Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ed4ca144-56b3-3535-8536-ff0cc2541a82.roa
File:                     ed4ca144-56b3-3535-8536-ff0cc2541a82.roa (raw, json)
Hash identifier:          7yyVj/JXa3Ul83DEt6jqs4VuJUNaBFEmNDOh4CpCSXA=
Subject key identifier:   69:A4:19:03:15:86:C3:25:3E:B8:62:69:AE:5C:2F:6E:DA:4D:EF:EB
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584B64CE4ECD6EC6271F9B61E5C0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ed4ca144-56b3-3535-8536-ff0cc2541a82.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     30036
IP address blocks:        2604:2e8a:5400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:4e:cd:6e:c6:27:1f:9b:61:e5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=e260160e-12a0-4c58-a7dc-4a87cb5013a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:ad:a7:b2:c0:49:54:50:53:52:88:f5:24:33:
                    40:1d:12:43:54:97:f9:f7:ed:35:3f:5d:83:aa:e0:
                    01:c0:b0:4e:3b:a3:9a:eb:5c:02:4b:0f:fe:99:d0:
                    df:c5:ed:e6:bf:5a:cb:f2:99:f1:8f:de:e1:57:e3:
                    6d:4b:f1:7f:e0:be:e2:e4:ef:38:74:18:d0:d6:11:
                    c6:78:66:8b:61:c5:f8:a2:7d:54:e3:9e:3c:c9:e6:
                    1b:2c:bd:da:e7:10:7a:f6:17:2c:e2:08:3d:a2:08:
                    43:e0:43:3e:2b:0e:38:da:b9:4c:03:04:de:b5:dc:
                    a8:88:72:c0:2c:89:f8:4e:eb:0c:42:e9:4a:1b:cc:
                    02:3f:86:5b:26:e3:8e:16:66:a7:e5:98:cc:2d:e8:
                    a5:64:4d:ca:e5:8e:c8:14:0e:4f:9f:94:f3:0b:ab:
                    ae:1b:8c:08:ed:03:ce:b0:66:9d:ab:d8:51:4f:3c:
                    b9:1b:9b:93:ef:54:19:43:41:d6:b3:f8:32:22:84:
                    4b:da:d2:b1:1b:7e:9d:7d:19:9f:f7:76:a7:17:5a:
                    12:8c:66:46:4b:a9:41:70:00:e6:01:96:09:9d:a9:
                    6f:f6:1d:52:8a:bc:ac:0d:7b:8c:5a:b4:1b:02:37:
                    f4:74:7b:d2:51:cf:67:fc:ae:03:f7:3f:1b:3d:70:
                    d1:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:A4:19:03:15:86:C3:25:3E:B8:62:69:AE:5C:2F:6E:DA:4D:EF:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ed4ca144-56b3-3535-8536-ff0cc2541a82.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8a:5400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:de:f6:6e:c3:80:11:35:ab:88:86:ff:23:c0:91:48:ad:b9:
         ef:51:ba:4d:e9:21:33:6b:1f:ff:0d:4d:bd:bf:5b:f3:b0:20:
         28:8a:73:a1:b5:03:72:31:c3:af:f4:f9:01:07:3b:26:39:03:
         6f:0d:04:bc:66:19:6f:99:58:89:d7:8f:8e:8c:29:c5:96:f1:
         85:64:49:83:e5:21:fb:76:f6:11:b1:84:60:ce:7d:2c:29:e8:
         c0:cf:6b:81:b7:1f:b4:1c:de:cf:cb:7b:8d:3d:00:40:e1:d9:
         c4:48:d9:2f:e1:4f:6c:d1:bb:41:0f:eb:83:7b:22:c6:04:6a:
         68:5f:b2:36:7a:1e:19:28:29:67:7f:a0:d5:a6:5f:ad:12:c5:
         bb:6e:60:ad:74:ad:c2:b5:80:c7:73:de:52:ed:d5:7a:5a:f1:
         9e:21:a3:33:36:ec:7d:43:59:77:f3:29:83:89:4c:b8:0c:1b:
         b3:77:19:bf:35:b2:31:9a:2f:f7:9b:4e:fc:5f:ea:81:37:a8:
         da:c5:14:82:6d:5e:54:b1:d9:91:46:2b:59:25:ee:c9:22:0e:
         6b:80:32:5b:79:b1:bd:ba:a7:41:87:e2:ae:15:cc:9a:da:14:
         ea:99:99:75:ac:67:53:56:78:21:82:88:83:47:cc:d3:67:df:
         13:cc:91:8c
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEtkzk7NbsYnH5th5cAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk
ZTI2MDE2MGUtMTJhMC00YzU4LWE3ZGMtNGE4N2NiNTAxM2E3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2q2nssBJVFBTUoj1JDNAHRJDVJf59+01P12D
quABwLBOO6Oa61wCSw/+mdDfxe3mv1rL8pnxj97hV+NtS/F/4L7i5O84dBjQ1hHG
eGaLYcX4on1U4548yeYbLL3a5xB69hcs4gg9oghD4EM+Kw442rlMAwTetdyoiHLA
LIn4TusMQulKG8wCP4ZbJuOOFman5ZjMLeilZE3K5Y7IFA5Pn5TzC6uuG4wI7QPO
sGadq9hRTzy5G5uT71QZQ0HWs/gyIoRL2tKxG36dfRmf93anF1oSjGZGS6lBcADm
AZYJnalv9h1SirysDXuMWrQbAjf0dHvSUc9n/K4D9z8bPXDRWwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFGmkGQMVhsMlPrhiaa5cL27aTe/rMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvZWQ0Y2ExNDQtNTZiMy0z
NTM1LTg1MzYtZmYwY2MyNTQxYTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuilQw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAHd72bsOAETWriIb/I8CRSK2571G6TekhM2sf/w1Nvb9b87AgKIpz
obUDcjHDr/T5AQc7JjkDbw0EvGYZb5lYidePjowpxZbxhWRJg+Uh+3b2EbGEYM59
LCnowM9rgbcftBzez8t7jT0AQOHZxEjZL+FPbNG7QQ/rg3sixgRqaF+yNnoeGSgp
Z3+g1aZfrRLFu25grXStwrWAx3PeUu3VelrxniGjMzbsfUNZd/Mpg4lMuAwbs3cZ
vzWyMZov95tO/F/qgTeo2sUUgm1eVLHZkUYrWSXuySIOa4AyW3mxvbqnQYfirhXM
mtoU6pmZdaxnU1Z4IYKIg0fM02ffE8yRjA==
-----END CERTIFICATE-----
Generated at Sat Oct 11 07:19:12 2025 by rpki-client