Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0065fc65-bd2c-3357-b051-a0feb3c33a10.roa
File:                     0065fc65-bd2c-3357-b051-a0feb3c33a10.roa (raw, json)
Hash identifier:          h7zZgdanWA03aLA/aJJAGuoUFW3bJkZkbmyPAGVad30=
Subject key identifier:   9D:48:C0:AE:75:7F:7C:32:20:18:17:BB:4C:4A:7A:68:B7:4C:05:5C
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584D1707ED8A362E8F3F5F138B00
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0065fc65-bd2c-3357-b051-a0feb3c33a10.roa
Signing time:             Sat 07 Mar 2026 14:00:41 +0000
ROA not before:           Sat 07 Mar 2026 14:00:41 +0000
ROA not after:            Fri 05 Jun 2026 13:00:41 +0000
asID:                     30036
IP address blocks:        2604:2e88:9400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 13 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:17:07:ed:8a:36:2e:8f:3f:5f:13:8b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Mar  7 14:00:41 2026 GMT
            Not After : Jun  5 13:00:41 2026 GMT
        Subject: CN=9d9d5377-fc69-41de-8625-9a4f9be33f17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f2:b8:16:b7:01:ff:cd:79:15:b0:cd:ea:c2:
                    a3:f1:d0:77:dc:cb:c6:45:8d:14:e1:d1:a0:ee:47:
                    a2:58:c1:e6:ae:d3:39:ae:f0:f3:d3:e4:e5:a5:02:
                    1b:c5:1b:74:23:b0:1f:a9:41:9f:71:28:db:c9:b3:
                    65:74:2b:05:b5:38:8e:48:35:57:9f:38:5d:b6:2a:
                    ba:b6:0d:fc:29:ac:ca:5f:69:81:fb:01:0f:52:7a:
                    13:39:9a:9c:fc:d2:40:73:c0:f6:55:03:c0:cb:32:
                    27:c5:da:f8:90:07:a7:28:e7:7b:be:81:c4:08:01:
                    1b:3f:22:df:b5:f0:2f:e8:e7:4b:d7:5b:31:28:4b:
                    75:f3:5b:97:b2:52:31:53:07:41:cf:c0:12:17:cd:
                    c5:86:42:ca:0e:40:22:77:51:4d:0a:e5:d1:a3:fc:
                    90:c3:b4:ed:0d:ac:d4:b1:9c:36:9f:90:69:ed:63:
                    4a:f9:3f:6d:a6:4c:83:0e:16:4f:38:3e:dd:91:d0:
                    8f:d3:30:31:69:82:38:03:66:ea:eb:d2:7a:30:70:
                    da:44:94:0b:47:25:68:2d:8d:45:1b:91:9c:35:54:
                    1f:dc:56:74:98:dd:89:5f:c2:2a:31:e5:50:11:c2:
                    09:a6:25:50:20:66:b6:76:de:aa:c5:2b:db:3e:e4:
                    83:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:48:C0:AE:75:7F:7C:32:20:18:17:BB:4C:4A:7A:68:B7:4C:05:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0065fc65-bd2c-3357-b051-a0feb3c33a10.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e88:9400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:64:6e:4c:b9:27:0d:46:60:de:5b:0a:9f:a7:fa:d7:f5:63:
         c1:48:9c:74:ee:ab:8c:c9:82:62:b8:18:60:8d:41:1e:12:b5:
         01:d8:0a:c4:ba:ec:2c:eb:b2:fe:ba:3a:80:67:e1:fd:bd:00:
         b8:90:cf:0b:65:02:05:eb:36:29:cd:bd:c4:88:5a:67:03:c8:
         2b:a8:2f:cf:6f:3c:7f:87:06:08:9f:12:f3:f1:a7:fc:ab:a3:
         0a:d0:f4:a2:10:16:bb:84:cc:e4:df:55:f4:d6:48:46:17:8f:
         47:81:c0:64:52:33:79:aa:8b:30:e0:65:44:08:4e:75:b4:8f:
         57:8c:f9:3a:a8:a7:25:8f:ca:36:a4:12:a1:36:83:21:52:d3:
         7f:c4:9b:9a:15:d3:d6:48:76:8d:19:60:14:02:95:b6:f1:cf:
         38:4b:62:bb:65:20:b1:00:3e:d6:5f:42:fd:32:9d:03:8a:88:
         30:57:63:b3:f4:51:fc:6a:6c:7b:b4:ee:10:39:98:1b:ea:b2:
         8b:b7:48:02:b7:0e:27:bc:14:c3:5f:71:90:99:46:cb:3c:1c:
         f6:d4:24:cd:cd:8c:a3:d2:f1:72:22:83:0b:97:8f:aa:7e:17:
         bb:ba:8f:e7:84:ec:52:9a:c5:6a:a4:77:07:e8:e8:ce:a2:45:
         7f:2a:23:a0
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE0XB+2KNi6PP18TiwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI2MDMwNzE0MDA0MVoXDTI2MDYwNTEzMDA0MVowLzEtMCsGA1UEAxMk
OWQ5ZDUzNzctZmM2OS00MWRlLTg2MjUtOWE0ZjliZTMzZjE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvK4FrcB/815FbDN6sKj8dB33MvGRY0U4dGg
7keiWMHmrtM5rvDz0+TlpQIbxRt0I7AfqUGfcSjbybNldCsFtTiOSDVXnzhdtiq6
tg38KazKX2mB+wEPUnoTOZqc/NJAc8D2VQPAyzInxdr4kAenKOd7voHECAEbPyLf
tfAv6OdL11sxKEt181uXslIxUwdBz8ASF83FhkLKDkAid1FNCuXRo/yQw7TtDazU
sZw2n5Bp7WNK+T9tpkyDDhZPOD7dkdCP0zAxaYI4A2bq69J6MHDaRJQLRyVoLY1F
G5GcNVQf3FZ0mN2JX8IqMeVQEcIJpiVQIGa2dt6qxSvbPuSDwwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFJ1IwK51f3wyIBgXu0xKemi3TAVcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMDA2NWZjNjUtYmQyYy0z
MzU3LWIwNTEtYTBmZWIzYzMzYTEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiJQw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAH2RuTLknDUZg3lsKn6f61/VjwUicdO6rjMmCYrgYYI1BHhK1AdgK
xLrsLOuy/ro6gGfh/b0AuJDPC2UCBes2Kc29xIhaZwPIK6gvz288f4cGCJ8S8/Gn
/KujCtD0ohAWu4TM5N9V9NZIRhePR4HAZFIzeaqLMOBlRAhOdbSPV4z5OqinJY/K
NqQSoTaDIVLTf8SbmhXT1kh2jRlgFAKVtvHPOEtiu2UgsQA+1l9C/TKdA4qIMFdj
s/RR/Gpse7TuEDmYG+qyi7dIArcOJ7wUw19xkJlGyzwc9tQkzc2Mo9LxciKDC5eP
qn4Xu7qP54TsUprFaqR3B+jozqJFfyojoA==
-----END CERTIFICATE-----
Generated at Thu Mar 12 06:37:20 2026 by rpki-client