Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0d17ea79-2c78-3bcd-8d19-f433cdfe02b4.roa
File:                     0d17ea79-2c78-3bcd-8d19-f433cdfe02b4.roa (raw, json)
Hash identifier:          VAQMK+Ng6Jkiw7jnWkjR/CoPyBtsES/uEqlF3h6zhyk=
Subject key identifier:   AA:A0:B9:C3:CB:7F:E9:CF:E0:8C:1A:50:57:1A:CB:A5:33:FC:E8:E0
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584EAA5196FD8823DBE57CB06780
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0d17ea79-2c78-3bcd-8d19-f433cdfe02b4.roa
Signing time:             Thu 30 Jul 2026 01:00:12 +0000
ROA not before:           Thu 30 Jul 2026 01:00:12 +0000
ROA not after:            Wed 28 Oct 2026 01:00:12 +0000
asID:                     30036
IP address blocks:        2604:2e8c:5c00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:aa:51:96:fd:88:23:db:e5:7c:b0:67:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jul 30 01:00:12 2026 GMT
            Not After : Oct 28 01:00:12 2026 GMT
        Subject: CN=37259433-e51d-4d01-9317-1a7b1afd2b27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f0:97:0b:6e:fd:91:55:90:f9:64:cd:30:ad:
                    d8:85:a5:dd:28:43:66:a0:3f:a9:8a:7f:04:da:7d:
                    69:e1:3b:9a:d0:54:e9:e3:54:b9:76:5b:89:40:54:
                    ff:fa:1d:8a:fc:27:ef:1d:f1:41:18:59:cd:c5:13:
                    27:07:b7:50:9e:b3:19:29:ae:6d:d7:25:1b:4b:03:
                    3b:4e:c2:6f:9c:52:dd:b4:b2:6b:b2:f3:c0:84:78:
                    89:61:35:a7:cb:99:1d:02:a0:b3:a3:12:f0:7e:92:
                    66:69:88:0d:a9:18:f2:02:87:e3:ca:f9:5a:e3:c2:
                    13:51:0f:db:2c:02:2b:db:cb:9e:68:cc:72:50:b0:
                    d4:db:a8:20:88:22:75:8e:47:d2:a4:ad:8a:e3:00:
                    e5:63:d7:2f:a4:f9:d6:03:33:47:f4:ba:b3:e6:97:
                    62:e8:db:ba:27:20:65:ca:f4:6f:88:d2:6f:02:59:
                    b4:da:d3:6f:b4:bf:78:25:0e:dc:3e:a0:a3:af:5a:
                    42:79:63:d5:05:1b:08:39:17:9c:41:b9:3e:9d:3c:
                    30:77:c3:1b:cf:54:16:e3:99:b3:27:00:3e:a5:86:
                    f3:64:8b:ab:31:d4:0e:5d:02:2b:cc:46:ab:54:81:
                    25:bb:90:d4:2a:37:13:a3:35:c3:a4:5c:09:db:17:
                    06:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:A0:B9:C3:CB:7F:E9:CF:E0:8C:1A:50:57:1A:CB:A5:33:FC:E8:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0d17ea79-2c78-3bcd-8d19-f433cdfe02b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8c:5c00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:76:55:0b:f6:cb:63:66:32:a0:7e:8a:2a:b3:94:b8:72:99:
         90:0f:17:6c:d8:21:cc:3b:36:0f:96:a1:f4:68:59:c7:36:97:
         ad:c9:b8:f6:fb:04:98:8c:5e:59:91:14:23:91:f1:4c:50:c5:
         19:40:cf:55:0b:6f:bf:9b:c2:32:2d:7c:ae:6f:6a:ec:d8:1f:
         9d:8c:41:b6:55:5c:97:e2:5c:b6:46:f2:2c:33:36:ca:04:8e:
         ec:dc:d7:be:51:4a:09:be:61:f0:fc:2f:57:53:a6:e4:dc:74:
         0f:46:6a:11:51:59:56:55:72:f7:61:d4:e1:dd:f6:bb:10:26:
         75:c2:9c:42:89:87:98:81:5f:36:db:d2:54:4c:7c:05:5d:ba:
         9e:7a:07:c7:7d:1f:dd:0a:d2:ec:3d:8a:09:e2:2f:70:3e:b3:
         ce:cc:0d:da:1c:c0:cd:48:26:a9:b4:0c:87:bd:fa:49:28:c9:
         fb:52:e0:ed:44:f7:d8:9f:37:1b:0f:5d:b4:07:d8:9a:46:cd:
         f3:ef:50:e4:0e:6e:06:e2:2a:d4:1d:46:48:db:d6:d5:f6:23:
         15:cf:6c:98:34:96:f0:f2:cc:e1:de:d7:20:57:4c:14:bf:e7:
         a3:1c:f9:0a:3c:86:c0:72:34:be:c0:22:5b:82:81:c3:29:a0:
         5a:c6:77:0c
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE6qUZb9iCPb5XywZ4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI2MDczMDAxMDAxMloXDTI2MTAyODAxMDAxMlowLzEtMCsGA1UEAxMk
MzcyNTk0MzMtZTUxZC00ZDAxLTkzMTctMWE3YjFhZmQyYjI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPCXC279kVWQ+WTNMK3YhaXdKENmoD+pin8E
2n1p4Tua0FTp41S5dluJQFT/+h2K/CfvHfFBGFnNxRMnB7dQnrMZKa5t1yUbSwM7
TsJvnFLdtLJrsvPAhHiJYTWny5kdAqCzoxLwfpJmaYgNqRjyAofjyvla48ITUQ/b
LAIr28ueaMxyULDU26ggiCJ1jkfSpK2K4wDlY9cvpPnWAzNH9Lqz5pdi6Nu6JyBl
yvRviNJvAlm02tNvtL94JQ7cPqCjr1pCeWPVBRsIORecQbk+nTwwd8Mbz1QW45mz
JwA+pYbzZIurMdQOXQIrzEarVIElu5DUKjcTozXDpFwJ2xcGsQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFKqgucPLf+nP4IwaUFcay6Uz/OjgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMGQxN2VhNzktMmM3OC0z
YmNkLThkMTktZjQzM2NkZmUwMmI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujFww
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAcHZVC/bLY2YyoH6KKrOUuHKZkA8XbNghzDs2D5ah9GhZxzaXrcm4
9vsEmIxeWZEUI5HxTFDFGUDPVQtvv5vCMi18rm9q7NgfnYxBtlVcl+JctkbyLDM2
ygSO7NzXvlFKCb5h8PwvV1Om5Nx0D0ZqEVFZVlVy92HU4d32uxAmdcKcQomHmIFf
NtvSVEx8BV26nnoHx30f3QrS7D2KCeIvcD6zzswN2hzAzUgmqbQMh736SSjJ+1Lg
7UT32J83Gw9dtAfYmkbN8+9Q5A5uBuIq1B1GSNvW1fYjFc9smDSW8PLM4d7XIFdM
FL/noxz5CjyGwHI0vsAiW4KBwymgWsZ3DA==
-----END CERTIFICATE-----
Generated at Fri Aug 21 01:44:46 2026 by rpki-client