Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/030e8a48-2429-3aa8-94b1-fa33f945302e.roa
File:                     030e8a48-2429-3aa8-94b1-fa33f945302e.roa (raw, json)
Hash identifier:          +wg9dqAMGu73+12/EGPJLpPy7DbTLALC9hPKgVCyNIQ=
Subject key identifier:   02:E7:F0:3C:9F:55:AF:F0:7D:C1:03:29:10:0B:92:FD:1E:95:A9:72
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584D237A02D353985E520EB70A80
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/030e8a48-2429-3aa8-94b1-fa33f945302e.roa
Signing time:             Thu 12 Mar 2026 01:00:32 +0000
ROA not before:           Thu 12 Mar 2026 01:00:32 +0000
ROA not after:            Wed 10 Jun 2026 01:00:32 +0000
asID:                     30036
IP address blocks:        2604:2e89:4800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 13 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:23:7a:02:d3:53:98:5e:52:0e:b7:0a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Mar 12 01:00:32 2026 GMT
            Not After : Jun 10 01:00:32 2026 GMT
        Subject: CN=396689ba-237f-401c-914d-ce1383f72f86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:8a:2b:fb:ad:38:86:4a:b2:a6:22:71:09:a5:
                    77:b4:4e:7c:57:99:92:5f:56:56:c7:ad:74:0d:69:
                    ac:ad:40:73:77:e9:b6:2a:1f:5d:2f:ed:b4:da:22:
                    b4:5c:8a:eb:f2:ff:6f:a7:69:ee:ac:1e:58:12:0f:
                    f4:54:6c:ab:5e:30:0a:ae:ae:46:9d:37:9c:0c:84:
                    0e:fb:5b:15:15:0a:e3:11:a3:12:6f:09:a2:06:d4:
                    d0:06:10:ad:25:71:14:4a:90:4d:d1:88:1e:cf:b7:
                    c6:59:12:90:ec:69:24:61:c4:d1:61:06:c0:0a:90:
                    44:1a:3a:85:91:da:b9:f5:1c:66:b5:eb:9b:49:23:
                    cf:b7:13:72:ac:50:70:f3:01:55:61:6e:72:7e:df:
                    3e:e1:dc:9c:0d:8b:b4:7e:10:7d:93:21:a0:9c:b0:
                    b2:f0:2d:b7:3e:8b:43:52:60:b9:9c:37:d3:de:14:
                    65:cb:fe:23:da:44:9e:45:6d:ed:8d:37:76:59:f0:
                    6f:ff:3e:95:ec:29:25:f1:b5:e3:96:31:b6:d6:df:
                    ad:b2:85:a0:26:e4:b8:92:48:17:dd:54:a2:ce:06:
                    3b:f4:bd:47:e8:21:47:a4:25:9c:35:f2:53:e2:87:
                    e8:fe:34:73:be:4e:54:fd:bb:ff:07:01:af:ab:d8:
                    1d:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:E7:F0:3C:9F:55:AF:F0:7D:C1:03:29:10:0B:92:FD:1E:95:A9:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/030e8a48-2429-3aa8-94b1-fa33f945302e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e89:4800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:fb:b8:36:c0:d8:f8:46:c0:47:76:d3:41:23:ba:ea:ad:ea:
         3a:9c:c5:05:7d:6c:07:fd:67:bf:e4:c0:2a:d1:c4:f3:09:36:
         6b:3b:2d:6e:6c:72:36:fe:8c:51:ca:6e:d2:6d:c1:c9:e9:29:
         cd:8b:f8:54:e8:c7:ba:b6:7a:8f:da:e5:17:e5:bf:ee:42:3b:
         50:9e:2d:fc:d3:0c:7f:3b:82:38:7c:ea:1d:3a:02:0b:72:b9:
         19:c0:7a:33:65:05:67:c3:30:01:fe:e5:40:c0:8d:b5:03:10:
         e4:7f:5c:db:39:1c:d0:41:02:37:a4:22:46:fe:85:35:c4:d7:
         ba:87:e7:76:9b:23:ff:5f:32:b7:19:15:da:a8:60:b3:86:f8:
         cc:0a:c5:c0:04:80:10:97:6a:b9:14:8c:74:aa:57:92:be:05:
         77:ae:6e:c4:fc:13:e4:2b:04:5d:85:71:5f:11:fe:e1:0a:f7:
         83:d8:8e:94:82:1e:9e:47:e1:ed:d4:5d:af:a4:80:74:a5:73:
         7b:61:67:bb:ad:3d:6e:d8:20:4f:42:74:4b:ab:1a:87:c0:98:
         59:db:85:f3:f5:54:60:d4:ff:ec:ae:f8:a9:eb:52:1b:4d:6f:
         7a:1b:e9:7d:c2:ee:ac:7e:c6:02:0d:3f:1b:cc:a9:48:12:3f:
         c6:27:e0:36
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE0jegLTU5heUg63CoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk
Mzk2Njg5YmEtMjM3Zi00MDFjLTkxNGQtY2UxMzgzZjcyZjg2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIor+604hkqypiJxCaV3tE58V5mSX1ZWx610
DWmsrUBzd+m2Kh9dL+202iK0XIrr8v9vp2nurB5YEg/0VGyrXjAKrq5GnTecDIQO
+1sVFQrjEaMSbwmiBtTQBhCtJXEUSpBN0Ygez7fGWRKQ7GkkYcTRYQbACpBEGjqF
kdq59RxmteubSSPPtxNyrFBw8wFVYW5yft8+4dycDYu0fhB9kyGgnLCy8C23PotD
UmC5nDfT3hRly/4j2kSeRW3tjTd2WfBv/z6V7Ckl8bXjljG21t+tsoWgJuS4kkgX
3VSizgY79L1H6CFHpCWcNfJT4ofo/jRzvk5U/bv/BwGvq9gdlwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFALn8DyfVa/wfcEDKRALkv0elalyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMDMwZThhNDgtMjQyOS0z
YWE4LTk0YjEtZmEzM2Y5NDUzMDJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiUgw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEABvu4NsDY+EbAR3bTQSO66q3qOpzFBX1sB/1nv+TAKtHE8wk2azst
bmxyNv6MUcpu0m3ByekpzYv4VOjHurZ6j9rlF+W/7kI7UJ4t/NMMfzuCOHzqHToC
C3K5GcB6M2UFZ8MwAf7lQMCNtQMQ5H9c2zkc0EECN6QiRv6FNcTXuofndpsj/18y
txkV2qhgs4b4zArFwASAEJdquRSMdKpXkr4Fd65uxPwT5CsEXYVxXxH+4Qr3g9iO
lIIenkfh7dRdr6SAdKVze2Fnu609btggT0J0S6sah8CYWduF8/VUYNT/7K74qetS
G01vehvpfcLurH7GAg0/G8ypSBI/xifgNg==
-----END CERTIFICATE-----
Generated at Thu Mar 12 06:36:08 2026 by rpki-client