Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5004927c-f4ba-3439-b90d-72853318b574.roa
File:                     5004927c-f4ba-3439-b90d-72853318b574.roa (raw, json)
Hash identifier:          EzFhQyF9FbMHdJxEyEy1N89cDC9lOkhzSuwdZn6Yri0=
Subject key identifier:   09:57:E2:5D:7E:72:3A:3A:61:AB:70:C9:23:E6:84:F4:3C:57:91:21
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584EE0C1E3D7DDCBE57A33858C00
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5004927c-f4ba-3439-b90d-72853318b574.roa
Signing time:             Tue 18 Aug 2026 13:00:12 +0000
ROA not before:           Tue 18 Aug 2026 13:00:12 +0000
ROA not after:            Mon 16 Nov 2026 14:00:12 +0000
asID:                     30036
IP address blocks:        2604:2e87:3400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e0:c1:e3:d7:dd:cb:e5:7a:33:85:8c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Aug 18 13:00:12 2026 GMT
            Not After : Nov 16 14:00:12 2026 GMT
        Subject: CN=cf0ae8cd-7a47-4ded-b311-d6b3ce80cd90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:eb:9c:22:ac:f1:db:82:9a:5c:66:2d:b4:4d:
                    62:84:87:9b:d3:0c:21:84:71:79:39:47:99:d2:5e:
                    39:33:ef:52:94:9b:67:70:c8:af:1b:2a:40:79:02:
                    e8:ae:63:b0:90:57:26:f1:80:8d:87:8c:2f:55:d3:
                    ea:b8:ad:66:d0:8d:be:fa:29:f1:aa:b9:85:46:79:
                    c0:3b:f0:71:94:ba:2e:49:03:b1:c3:32:d4:a5:7d:
                    e5:72:5d:f0:50:b0:85:c1:ea:4e:24:b3:d0:69:db:
                    68:05:ed:a2:16:89:6a:1b:8a:9c:20:5c:04:19:e7:
                    a1:71:87:79:d9:3d:ea:7d:bf:70:c9:08:df:83:56:
                    0c:20:fb:25:52:02:de:f1:08:54:77:88:12:59:88:
                    77:4a:e0:36:a3:57:03:e4:b6:e4:0c:9c:b3:82:ee:
                    49:62:b2:49:f0:ca:cb:83:df:1d:c2:bb:59:b6:36:
                    65:bb:df:e3:89:4a:23:42:af:a5:17:c4:70:cd:08:
                    e3:84:22:6a:b2:ba:75:51:0a:e1:da:9c:69:ce:b4:
                    07:aa:68:c5:f6:ff:8a:7e:a0:13:e3:70:3c:09:3b:
                    50:76:91:1c:08:9e:a3:fd:79:2c:c8:4d:b1:42:fd:
                    73:c5:8f:d5:96:8e:a6:0f:23:2f:80:1c:7d:87:f3:
                    54:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:57:E2:5D:7E:72:3A:3A:61:AB:70:C9:23:E6:84:F4:3C:57:91:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5004927c-f4ba-3439-b90d-72853318b574.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e87:3400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:10:57:a3:e9:1a:3a:4f:f8:d8:fa:d4:c7:9a:4d:35:ae:2e:
         5c:49:0d:2a:0d:9b:d4:42:27:8b:54:3e:d5:d2:40:f7:4a:25:
         c5:5f:47:00:48:2d:71:8f:09:9b:47:6d:9f:0e:e2:1d:69:01:
         dd:f5:d0:03:2f:ac:74:ef:2a:78:f9:26:e2:77:f4:d7:59:30:
         d2:4b:1f:33:da:94:8e:73:f6:ef:76:cc:3b:67:7f:9d:b4:76:
         93:09:59:dd:02:12:c0:ee:e7:bc:14:6a:b5:ae:e8:42:11:b4:
         da:da:1b:dd:bb:4a:81:f7:3e:cd:f6:62:32:9a:f7:65:f1:d0:
         21:9d:ee:a5:89:9f:17:69:52:c3:17:f6:4b:c3:d8:86:0a:96:
         01:18:1f:e6:d2:7f:18:00:4d:1a:57:af:fb:0a:a7:ba:9b:66:
         bd:3e:7b:a0:3e:a0:96:c8:01:b5:53:eb:2c:99:09:30:22:d4:
         c8:6e:b0:85:fb:5d:9b:02:3b:18:28:bf:16:2c:c7:d8:9d:ad:
         9f:e8:b8:a6:09:f4:e8:33:04:47:ac:ac:a2:b0:0d:10:b2:03:
         c6:9f:d9:eb:1b:e9:68:1c:c9:61:d4:18:62:bf:52:a9:73:44:
         ea:e3:d1:90:3b:37:31:e2:27:90:7e:70:54:64:fc:ba:ca:93:
         57:0b:96:61
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE7gwePX3cvlejOFjAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI2MDgxODEzMDAxMloXDTI2MTExNjE0MDAxMlowLzEtMCsGA1UEAxMk
Y2YwYWU4Y2QtN2E0Ny00ZGVkLWIzMTEtZDZiM2NlODBjZDkwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3+ucIqzx24KaXGYttE1ihIeb0wwhhHF5OUeZ
0l45M+9SlJtncMivGypAeQLormOwkFcm8YCNh4wvVdPquK1m0I2++inxqrmFRnnA
O/BxlLouSQOxwzLUpX3lcl3wULCFwepOJLPQadtoBe2iFolqG4qcIFwEGeehcYd5
2T3qfb9wyQjfg1YMIPslUgLe8QhUd4gSWYh3SuA2o1cD5LbkDJyzgu5JYrJJ8MrL
g98dwrtZtjZlu9/jiUojQq+lF8RwzQjjhCJqsrp1UQrh2pxpzrQHqmjF9v+KfqAT
43A8CTtQdpEcCJ6j/XksyE2xQv1zxY/Vlo6mDyMvgBx9h/NUswIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFAlX4l1+cjo6YatwySPmhPQ8V5EhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNTAwNDkyN2MtZjRiYS0z
NDM5LWI5MGQtNzI4NTMzMThiNTc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuhzQw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAohBXo+kaOk/42PrUx5pNNa4uXEkNKg2b1EIni1Q+1dJA90olxV9H
AEgtcY8Jm0dtnw7iHWkB3fXQAy+sdO8qePkm4nf011kw0ksfM9qUjnP273bMO2d/
nbR2kwlZ3QISwO7nvBRqta7oQhG02tob3btKgfc+zfZiMpr3ZfHQIZ3upYmfF2lS
wxf2S8PYhgqWARgf5tJ/GABNGlev+wqnuptmvT57oD6glsgBtVPrLJkJMCLUyG6w
hftdmwI7GCi/FizH2J2tn+i4pgn06DMER6ysorANELIDxp/Z6xvpaBzJYdQYYr9S
qXNE6uPRkDs3MeInkH5wVGT8usqTVwuWYQ==
-----END CERTIFICATE-----
Generated at Fri Aug 21 01:48:56 2026 by rpki-client