Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/496e57df-4052-3374-ae88-e803a24982b0.roa
File:                     496e57df-4052-3374-ae88-e803a24982b0.roa (raw, json)
Hash identifier:          yTwq1YtllQY2J8hYrBmIa6rc/JD3sSXSg34WHG7wRwM=
Subject key identifier:   62:68:A5:21:F9:CC:AE:03:46:00:4D:C0:DB:58:60:5C:B5:30:37:7B
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584EA79C71F19A9E99C9825488E0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/496e57df-4052-3374-ae88-e803a24982b0.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     30036
IP address blocks:        2604:2e8e:6000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9c:71:f1:9a:9e:99:c9:82:54:88:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=adfc5d53-9c9e-45e3-84a3-4d28a4144c24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:5c:cf:1f:6d:17:82:b5:28:75:e4:f4:f5:7b:
                    02:ac:1d:11:9c:a3:c9:42:73:1e:b7:b7:a6:e1:73:
                    7a:f2:cc:89:9f:f0:4c:83:c6:bb:05:8f:6d:73:1f:
                    3f:80:57:3c:6b:42:7c:1f:95:4a:96:18:b7:6f:71:
                    f0:46:1f:29:3c:c6:cf:7a:59:2e:37:08:6c:77:45:
                    ae:0d:32:1d:e9:c4:64:44:62:0e:30:da:cb:c3:c1:
                    cd:d0:0a:0a:73:5f:cc:1c:c6:24:a1:8f:4e:8c:c8:
                    5b:c8:69:7e:4a:aa:fa:dd:2e:40:ec:62:ad:ac:80:
                    fd:c1:10:df:1b:d2:0a:0b:bc:1f:74:be:8f:03:c3:
                    a4:eb:e2:a7:12:74:c5:73:dd:be:63:0a:df:44:b9:
                    7c:39:81:7c:ea:f8:2d:6b:68:1d:0b:9c:00:68:01:
                    cf:6a:77:c4:2f:ed:d0:30:09:2c:35:61:88:56:b5:
                    0d:97:ed:6b:eb:34:49:5a:90:28:6f:c6:a3:98:34:
                    c2:6b:e5:e9:12:7c:b8:06:25:a2:90:6f:ef:12:05:
                    b8:89:24:fa:8a:5b:9e:9f:77:37:a2:9e:59:c3:bf:
                    28:02:a7:ae:cd:f1:28:56:ea:e9:66:d3:70:44:7f:
                    aa:36:57:02:cc:b5:20:d0:fe:47:55:f1:41:4c:95:
                    b3:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:68:A5:21:F9:CC:AE:03:46:00:4D:C0:DB:58:60:5C:B5:30:37:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/496e57df-4052-3374-ae88-e803a24982b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8e:6000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:54:72:7a:95:d5:bb:85:d9:a1:0e:cd:2a:10:d6:5b:7c:de:
         0e:37:d9:90:a8:74:da:64:4f:18:d6:7b:09:65:32:5c:dc:c9:
         48:9a:4c:d5:1c:44:60:a4:c8:d0:99:f5:f4:05:b2:24:84:0f:
         11:68:9c:a9:85:06:c5:6b:5d:fe:0f:08:5d:2e:61:82:50:cb:
         66:28:80:30:d5:fd:e9:09:b1:63:16:ab:7d:ad:1b:30:62:e1:
         dd:17:f5:57:16:a1:71:32:20:25:7c:fb:f5:d4:04:7a:f5:7f:
         22:df:f3:65:2f:00:8a:f9:68:53:ba:80:73:27:5e:1c:16:99:
         68:47:e6:f3:81:9a:52:ad:32:73:d9:e4:d4:9d:a5:43:67:b4:
         9d:00:3a:1f:fd:42:ef:45:d5:2a:94:85:db:74:59:7f:91:91:
         b4:a2:3a:84:4e:83:23:21:d5:a6:94:0d:f7:59:56:c2:0b:ea:
         bb:56:61:5f:85:f3:10:41:4b:15:e3:56:8a:cb:b2:ae:9c:fd:
         2f:bd:88:d9:a1:fe:f5:40:34:cf:ce:a1:9a:71:9f:ce:82:86:
         1f:8c:07:3e:e4:eb:45:20:ed:37:77:9b:fd:db:94:05:6b:a2:
         dc:67:c5:78:1a:58:c9:31:bf:34:78:7f:e5:0b:9e:da:03:39:
         14:ca:b1:c7
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE6nnHHxmp6ZyYJUiOAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
YWRmYzVkNTMtOWM5ZS00NWUzLTg0YTMtNGQyOGE0MTQ0YzI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFzPH20XgrUodeT09XsCrB0RnKPJQnMet7em
4XN68syJn/BMg8a7BY9tcx8/gFc8a0J8H5VKlhi3b3HwRh8pPMbPelkuNwhsd0Wu
DTId6cRkRGIOMNrLw8HN0AoKc1/MHMYkoY9OjMhbyGl+Sqr63S5A7GKtrID9wRDf
G9IKC7wfdL6PA8Ok6+KnEnTFc92+YwrfRLl8OYF86vgta2gdC5wAaAHPanfEL+3Q
MAksNWGIVrUNl+1r6zRJWpAob8ajmDTCa+XpEny4BiWikG/vEgW4iST6iluen3c3
op5Zw78oAqeuzfEoVurpZtNwRH+qNlcCzLUg0P5HVfFBTJWzbQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFGJopSH5zK4DRgBNwNtYYFy1MDd7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNDk2ZTU3ZGYtNDA1Mi0z
Mzc0LWFlODgtZTgwM2EyNDk4MmIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujmAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAllRyepXVu4XZoQ7NKhDWW3zeDjfZkKh02mRPGNZ7CWUyXNzJSJpM
1RxEYKTI0Jn19AWyJIQPEWicqYUGxWtd/g8IXS5hglDLZiiAMNX96QmxYxarfa0b
MGLh3Rf1VxahcTIgJXz79dQEevV/It/zZS8AivloU7qAcydeHBaZaEfm84GaUq0y
c9nk1J2lQ2e0nQA6H/1C70XVKpSF23RZf5GRtKI6hE6DIyHVppQN91lWwgvqu1Zh
X4XzEEFLFeNWisuyrpz9L72I2aH+9UA0z86hmnGfzoKGH4wHPuTrRSDtN3eb/duU
BWui3GfFeBpYyTG/NHh/5Que2gM5FMqxxw==
-----END CERTIFICATE-----
Generated at Fri Aug 21 01:46:06 2026 by rpki-client