Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8b82699c-e50e-3db6-8f92-30a8c9f5ac2f.roa
File:                     8b82699c-e50e-3db6-8f92-30a8c9f5ac2f.roa (raw, json)
Hash identifier:          MfTHfMHfPLPnnPbmU0pKp1Gu/Msw8OjhBIw28aEYkWs=
Subject key identifier:   44:2E:79:BB:D6:F9:88:D6:BD:A6:3E:0A:FF:3C:19:B6:96:E8:7E:67
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584EA79C82DC7A82085FDDEF8A80
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8b82699c-e50e-3db6-8f92-30a8c9f5ac2f.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     30036
IP address blocks:        2604:2e8f:8380::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9c:82:dc:7a:82:08:5f:dd:ef:8a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=7db21261-1cda-42e3-85cb-cf9db789ff6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:57:6a:64:ed:4d:f5:70:36:4f:00:16:c0:d5:
                    9d:93:8e:9b:36:a3:8f:88:63:92:12:46:64:52:42:
                    21:a8:e1:b4:fa:24:d3:80:0a:58:02:03:91:ec:6b:
                    58:0e:6c:00:c6:8f:f7:ee:05:22:35:5b:96:2c:5c:
                    d7:4d:80:fa:12:cf:f6:3b:fa:a7:e4:6a:ad:97:6a:
                    db:f5:7b:72:0c:f5:e3:62:6d:44:13:a0:a1:ef:66:
                    a2:e8:57:fd:44:9d:65:3c:30:c1:8c:e6:74:98:29:
                    17:57:98:53:f5:de:df:0c:a4:26:b1:66:ef:b3:2c:
                    f5:07:a7:71:c6:ae:fb:2c:4e:71:f3:35:11:bc:29:
                    ec:92:3e:1e:90:99:b1:71:6d:a4:bb:db:c0:56:8d:
                    9a:0a:18:7d:5b:04:ed:ff:41:31:dc:1d:8b:4f:8d:
                    93:f7:ba:0c:97:a2:6d:18:f3:f5:5f:2a:99:fa:02:
                    b4:57:3c:e2:37:ff:3e:75:de:f0:53:44:35:44:36:
                    a2:70:1c:13:af:c4:c4:3d:3a:d0:d3:9b:b9:fc:ff:
                    65:88:11:b2:ba:f1:86:58:cf:bd:70:2d:4d:1e:cc:
                    4d:64:a3:3f:fb:cc:00:80:a2:5d:45:b4:a7:41:04:
                    69:b0:9d:3d:a3:e0:83:57:51:df:99:2f:fa:5e:cc:
                    c9:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:2E:79:BB:D6:F9:88:D6:BD:A6:3E:0A:FF:3C:19:B6:96:E8:7E:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8b82699c-e50e-3db6-8f92-30a8c9f5ac2f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8f:8380::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:97:de:b2:a0:21:8b:63:2c:82:b7:e6:b5:c5:d6:83:69:59:
         ee:3e:4b:51:9b:a9:e1:4a:a4:67:bc:d6:a5:2b:2e:da:ea:a9:
         4c:d8:7e:d6:ec:d6:2c:19:c3:cf:99:93:ae:01:26:41:da:9a:
         37:8a:26:0e:50:37:c7:39:8a:4f:df:76:44:15:e5:61:a7:de:
         4f:d5:72:e3:7b:cc:6a:c2:10:ad:95:78:f0:d9:ad:86:38:90:
         1a:07:ca:29:02:9b:b0:83:63:6b:12:a5:de:22:b8:64:da:af:
         b0:68:a2:34:3d:66:b6:5a:98:8f:83:5b:8c:24:1a:b1:d4:df:
         37:2b:21:91:8d:7f:c7:6d:98:3d:a0:58:9a:e6:6a:a6:8e:29:
         29:95:b4:ee:c8:da:4c:46:57:b1:62:b3:b2:eb:a4:4c:b8:4d:
         2d:b8:af:b1:1b:35:d8:d5:2a:f0:78:a9:b3:3a:d7:f6:23:be:
         ec:4c:20:82:d8:92:10:9d:94:bc:4c:9a:47:75:37:46:38:f2:
         5b:ad:46:1e:c7:41:29:0b:69:1e:5e:ec:bd:92:14:fb:f4:a5:
         ad:b1:0a:f7:b5:b8:9e:94:bc:a6:ad:05:87:64:3c:cf:a1:7e:
         07:5e:41:2f:74:ad:69:95:f5:9d:01:59:c6:42:b6:9d:44:7f:
         ff:5d:d2:ae
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6nnILceoIIX93vioAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
N2RiMjEyNjEtMWNkYS00MmUzLTg1Y2ItY2Y5ZGI3ODlmZjZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1dqZO1N9XA2TwAWwNWdk46bNqOPiGOSEkZk
UkIhqOG0+iTTgApYAgOR7GtYDmwAxo/37gUiNVuWLFzXTYD6Es/2O/qn5Gqtl2rb
9XtyDPXjYm1EE6Ch72ai6Ff9RJ1lPDDBjOZ0mCkXV5hT9d7fDKQmsWbvsyz1B6dx
xq77LE5x8zURvCnskj4ekJmxcW2ku9vAVo2aChh9WwTt/0Ex3B2LT42T97oMl6Jt
GPP1XyqZ+gK0VzziN/8+dd7wU0Q1RDaicBwTr8TEPTrQ05u5/P9liBGyuvGGWM+9
cC1NHsxNZKM/+8wAgKJdRbSnQQRpsJ09o+CDV1HfmS/6XszJ+QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFEQuebvW+YjWvaY+Cv88GbaW6H5nMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvOGI4MjY5OWMtZTUwZS0z
ZGI2LThmOTItMzBhOGM5ZjVhYzJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQuj4OA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAIGX3rKgIYtjLIK35rXF1oNpWe4+S1GbqeFKpGe81qUrLtrqqUzY
ftbs1iwZw8+Zk64BJkHamjeKJg5QN8c5ik/fdkQV5WGn3k/VcuN7zGrCEK2VePDZ
rYY4kBoHyikCm7CDY2sSpd4iuGTar7BoojQ9ZrZamI+DW4wkGrHU3zcrIZGNf8dt
mD2gWJrmaqaOKSmVtO7I2kxGV7Fis7LrpEy4TS24r7EbNdjVKvB4qbM61/YjvuxM
IILYkhCdlLxMmkd1N0Y48lutRh7HQSkLaR5e7L2SFPv0pa2xCve1uJ6UvKatBYdk
PM+hfgdeQS90rWmV9Z0BWcZCtp1Ef/9d0q4=
-----END CERTIFICATE-----
Generated at Fri Aug 21 01:43:42 2026 by rpki-client