Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1a317b59-ca63-3e49-81c2-b46b7da2deab.roa
File:                     1a317b59-ca63-3e49-81c2-b46b7da2deab.roa (raw, json)
Hash identifier:          /6xfqGe1xltYie/3bGVfuMxDZ/tzlbmu/z9M4CR0BYE=
Subject key identifier:   44:54:B0:8B:7F:F3:23:1C:26:B9:2D:69:A8:14:3B:09:54:4C:C0:00
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584EC7A1C1A599217E97EE8D7280
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1a317b59-ca63-3e49-81c2-b46b7da2deab.roa
Signing time:             Sun 09 Aug 2026 13:00:12 +0000
ROA not before:           Sun 09 Aug 2026 13:00:12 +0000
ROA not after:            Sat 07 Nov 2026 14:00:12 +0000
asID:                     30036
IP address blocks:        2604:2e8f:5000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c7:a1:c1:a5:99:21:7e:97:ee:8d:72:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Aug  9 13:00:12 2026 GMT
            Not After : Nov  7 14:00:12 2026 GMT
        Subject: CN=5fec303c-2d3a-45f7-afd5-8a172b36329d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:7c:6e:d2:52:4b:8e:25:45:b1:0a:f5:3f:cc:
                    71:38:7a:1b:6e:51:4b:d1:26:04:10:b6:92:76:92:
                    77:2f:e3:4b:c4:51:ba:e0:32:df:ae:3d:35:21:56:
                    4e:e8:11:e0:07:a0:6a:68:93:05:fc:25:37:43:34:
                    76:a3:70:f9:7e:6a:25:dc:a0:47:d3:f8:b8:9d:70:
                    2d:b5:7b:11:a1:22:5a:df:42:33:68:18:b3:48:c7:
                    83:cd:0f:ed:e4:cd:81:02:9c:2f:04:c6:54:77:b0:
                    4e:35:70:63:75:47:ef:1a:04:08:8e:02:12:29:70:
                    76:9e:9d:8f:05:ea:ab:93:02:ec:c3:59:2c:6c:ff:
                    6c:b2:5f:a6:b2:00:0d:86:b5:b4:5d:2d:e5:52:c1:
                    5b:77:7b:e2:73:97:3b:f7:9b:17:e6:55:df:1c:27:
                    b4:0a:3a:44:cd:09:0e:a9:c4:da:7a:92:64:fb:2f:
                    f4:a3:14:be:8b:ac:a0:2f:ac:e3:2f:05:a2:a2:5b:
                    24:fc:ce:c9:25:d1:1f:35:6f:c5:b2:22:9e:c5:48:
                    f8:da:98:c1:9b:7c:87:70:f6:41:d5:4f:f9:48:29:
                    42:bf:a8:cf:07:ea:04:bd:6a:fc:11:0c:f2:fc:cd:
                    98:7d:12:a3:a7:40:21:65:5e:7d:b2:cc:6f:2a:70:
                    1f:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:54:B0:8B:7F:F3:23:1C:26:B9:2D:69:A8:14:3B:09:54:4C:C0:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1a317b59-ca63-3e49-81c2-b46b7da2deab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8f:5000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:55:24:e8:13:7d:31:b0:38:dc:b8:cf:0c:b1:2b:04:1e:cb:
         cc:96:47:95:21:fb:5c:d8:7e:73:dd:9c:cc:69:10:35:9a:34:
         6d:a1:cf:0d:94:4f:54:a7:db:d9:9b:69:f1:b7:e5:ab:45:ce:
         a2:04:61:87:5d:57:12:16:13:0e:ef:4b:2e:9a:3d:15:a0:30:
         ee:c7:d4:f7:b5:13:6e:e2:1f:5c:a9:17:a7:d3:b0:00:56:94:
         bf:1b:78:32:c4:d1:d0:ed:3e:0b:74:e1:ec:30:28:ad:f7:4d:
         28:cd:63:5b:b8:b9:e2:21:5a:d5:95:04:2d:73:c3:ba:fb:47:
         14:05:83:2a:e5:a2:4a:56:d6:c7:a4:a8:2b:aa:2b:0a:1d:53:
         87:cd:1a:01:27:89:8b:6d:58:2d:cc:c2:fc:2c:98:31:6c:65:
         79:ad:74:27:2c:19:2d:fd:42:58:db:f2:2f:f9:e7:bf:6b:b1:
         f8:b3:da:7c:8a:f0:72:1e:dd:0d:46:b2:00:54:05:45:d7:fe:
         82:04:90:02:af:4e:31:7e:42:c1:26:34:05:b4:4d:46:04:93:
         52:5b:10:d8:62:c3:d7:bc:9b:6b:b5:d0:44:70:e4:b7:6b:9d:
         74:ef:04:3b:d8:24:c7:f8:90:b4:85:7b:46:49:72:c2:3a:69:
         58:97:ac:f1
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE7HocGlmSF+l+6NcoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI2MDgwOTEzMDAxMloXDTI2MTEwNzE0MDAxMlowLzEtMCsGA1UEAxMk
NWZlYzMwM2MtMmQzYS00NWY3LWFmZDUtOGExNzJiMzYzMjlkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9Xxu0lJLjiVFsQr1P8xxOHobblFL0SYEELaS
dpJ3L+NLxFG64DLfrj01IVZO6BHgB6BqaJMF/CU3QzR2o3D5fmol3KBH0/i4nXAt
tXsRoSJa30IzaBizSMeDzQ/t5M2BApwvBMZUd7BONXBjdUfvGgQIjgISKXB2np2P
BeqrkwLsw1ksbP9ssl+msgANhrW0XS3lUsFbd3vic5c795sX5lXfHCe0CjpEzQkO
qcTaepJk+y/0oxS+i6ygL6zjLwWiolsk/M7JJdEfNW/FsiKexUj42pjBm3yHcPZB
1U/5SClCv6jPB+oEvWr8EQzy/M2YfRKjp0AhZV59ssxvKnAf/wIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFERUsIt/8yMcJrktaagUOwlUTMAAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMWEzMTdiNTktY2E2My0z
ZTQ5LTgxYzItYjQ2YjdkYTJkZWFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuj1Aw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAYlUk6BN9MbA43LjPDLErBB7LzJZHlSH7XNh+c92czGkQNZo0baHP
DZRPVKfb2Ztp8bflq0XOogRhh11XEhYTDu9LLpo9FaAw7sfU97UTbuIfXKkXp9Ow
AFaUvxt4MsTR0O0+C3Th7DAorfdNKM1jW7i54iFa1ZUELXPDuvtHFAWDKuWiSlbW
x6SoK6orCh1Th80aASeJi21YLczC/CyYMWxlea10JywZLf1CWNvyL/nnv2ux+LPa
fIrwch7dDUayAFQFRdf+ggSQAq9OMX5CwSY0BbRNRgSTUlsQ2GLD17yba7XQRHDk
t2uddO8EO9gkx/iQtIV7RklywjppWJes8Q==
-----END CERTIFICATE-----
Generated at Fri Aug 21 01:44:44 2026 by rpki-client