Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/68c1ac95-18fd-3774-a85d-f5ee4fba3da3.roa
File:                     68c1ac95-18fd-3774-a85d-f5ee4fba3da3.roa (raw, json)
Hash identifier:          oad7YURYmj16MP9/3cwNLCS6SxCC8SzamAlGGi3aA4U=
Subject key identifier:   83:68:68:FA:7A:2A:46:4C:D9:6A:B4:40:3F:1D:93:8D:28:F0:FF:87
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584DB154C551784590463594A230
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/68c1ac95-18fd-3774-a85d-f5ee4fba3da3.roa
Signing time:             Fri 01 May 2026 20:30:27 +0000
ROA not before:           Fri 01 May 2026 20:30:27 +0000
ROA not after:            Thu 30 Jul 2026 20:30:27 +0000
asID:                     30036
IP address blocks:        2604:2e8f:7400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b1:54:c5:51:78:45:90:46:35:94:a2:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: May  1 20:30:27 2026 GMT
            Not After : Jul 30 20:30:27 2026 GMT
        Subject: CN=15232c97-df61-4ee0-93c7-f11d50dc9fb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:cc:00:fc:db:5c:04:de:f5:f4:77:ea:3e:17:
                    15:9a:20:4c:1c:fe:fb:97:46:80:f9:ec:27:dc:4d:
                    25:66:e0:36:7e:22:02:52:a6:fd:0a:09:b6:59:fe:
                    0a:00:81:de:8e:72:70:1d:b9:24:f1:fe:2b:bc:fd:
                    4e:02:61:a8:ec:1b:cc:4b:ee:d8:b7:f1:51:8b:e3:
                    92:48:12:99:7e:9a:4d:5b:1f:c0:96:0f:30:9d:64:
                    f2:76:ec:aa:58:28:4b:b3:ec:3a:b5:7d:a2:0f:51:
                    a1:40:ff:de:ca:84:1c:6a:4e:b7:92:85:0e:c0:87:
                    4c:8d:7b:79:65:19:61:00:5e:33:ca:bd:8e:75:af:
                    27:a0:1c:a9:46:bc:d1:6d:5b:d9:4d:bc:6a:2b:f4:
                    e6:28:5b:29:77:44:91:0c:63:7a:08:c4:ad:66:73:
                    99:f0:cd:92:83:39:a5:f9:37:ef:cb:ae:73:86:1a:
                    8e:90:aa:92:6f:45:a1:df:8a:25:32:9c:a7:5f:b7:
                    f4:a4:50:67:0d:3a:24:8a:7c:8c:f2:b8:f0:45:08:
                    d6:34:78:d5:a9:b7:ec:b8:49:3c:61:98:ce:fe:6e:
                    89:ab:fe:4d:1e:db:89:7e:a2:6e:e3:0f:17:a3:a0:
                    9a:0b:4c:0e:f7:73:20:80:a0:9f:dd:f1:14:a2:fb:
                    ca:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:68:68:FA:7A:2A:46:4C:D9:6A:B4:40:3F:1D:93:8D:28:F0:FF:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/68c1ac95-18fd-3774-a85d-f5ee4fba3da3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8f:7400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:24:a5:39:ac:f0:95:01:18:e3:79:34:f1:78:25:19:95:10:
         e3:a2:ad:2e:43:77:18:e3:f6:5d:8e:1f:6d:75:1c:77:b5:ba:
         9c:e4:21:b4:5a:e2:b4:4c:c4:15:31:92:80:85:dd:53:da:11:
         7c:e3:fd:e4:be:e0:08:4d:17:96:52:0c:ef:8f:7e:8b:1a:98:
         4e:90:29:26:6c:b8:90:c7:1d:0b:5a:92:01:23:a2:cf:6e:eb:
         bd:70:53:ab:89:04:61:e6:6f:d8:86:df:a8:ba:79:04:1a:68:
         d2:c6:0b:06:cd:10:76:aa:38:11:92:2b:73:e9:d9:9f:64:f0:
         c9:c1:bc:2a:e7:94:12:66:5d:34:59:ca:49:65:31:eb:21:fd:
         96:3c:92:c5:90:cc:be:7a:42:bd:d5:c9:7d:7f:6e:4b:55:77:
         dd:91:af:78:1e:46:6c:3f:ca:60:78:6e:2b:0a:44:32:3f:b3:
         fd:e2:f0:47:d5:6a:16:15:78:fa:2b:e6:3e:73:17:76:15:99:
         ea:f2:e1:4c:dc:3b:08:e9:96:eb:c7:5d:3c:89:6c:83:38:5e:
         8d:4f:4b:67:e8:ac:66:29:f0:ad:74:a2:37:84:61:e9:16:7a:
         11:0d:d7:ea:e9:00:95:ed:14:ed:61:dd:1b:50:03:5c:80:a0:
         af:6e:e2:36
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE2xVMVReEWQRjWUojAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI2MDUwMTIwMzAyN1oXDTI2MDczMDIwMzAyN1owLzEtMCsGA1UEAxMk
MTUyMzJjOTctZGY2MS00ZWUwLTkzYzctZjExZDUwZGM5ZmIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlcwA/NtcBN719HfqPhcVmiBMHP77l0aA+ewn
3E0lZuA2fiICUqb9Cgm2Wf4KAIHejnJwHbkk8f4rvP1OAmGo7BvMS+7Yt/FRi+OS
SBKZfppNWx/Alg8wnWTyduyqWChLs+w6tX2iD1GhQP/eyoQcak63koUOwIdMjXt5
ZRlhAF4zyr2Oda8noBypRrzRbVvZTbxqK/TmKFspd0SRDGN6CMStZnOZ8M2Sgzml
+Tfvy65zhhqOkKqSb0Wh34olMpynX7f0pFBnDTokinyM8rjwRQjWNHjVqbfsuEk8
YZjO/m6Jq/5NHtuJfqJu4w8Xo6CaC0wO93MggKCf3fEUovvKcQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFINoaPp6KkZM2Wq0QD8dk40o8P+HMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNjhjMWFjOTUtMThmZC0z
Nzc0LWE4NWQtZjVlZTRmYmEzZGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuj3Qw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAfCSlOazwlQEY43k08XglGZUQ46KtLkN3GOP2XY4fbXUcd7W6nOQh
tFritEzEFTGSgIXdU9oRfOP95L7gCE0XllIM749+ixqYTpApJmy4kMcdC1qSASOi
z27rvXBTq4kEYeZv2IbfqLp5BBpo0sYLBs0Qdqo4EZIrc+nZn2TwycG8KueUEmZd
NFnKSWUx6yH9ljySxZDMvnpCvdXJfX9uS1V33ZGveB5GbD/KYHhuKwpEMj+z/eLw
R9VqFhV4+ivmPnMXdhWZ6vLhTNw7COmW68ddPIlsgzhejU9LZ+isZinwrXSiN4Rh
6RZ6EQ3X6ukAle0U7WHdG1ADXICgr27iNg==
-----END CERTIFICATE-----
Generated at Fri May 8 18:23:23 2026 by rpki-client