Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a04a33de-95c6-3ceb-9db4-fede37f5994a.roa
File:                     a04a33de-95c6-3ceb-9db4-fede37f5994a.roa (raw, json)
Hash identifier:          Zx8ZwEeHWptlA0o/je3Lxhul7OYt1P5A/p6jDfrzKmI=
Subject key identifier:   2A:02:73:FC:1A:BF:5D:BA:14:1D:BC:5B:B0:C5:4A:19:99:0B:1B:00
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584EB84738940013481C727DE480
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a04a33de-95c6-3ceb-9db4-fede37f5994a.roa
Signing time:             Tue 04 Aug 2026 01:00:12 +0000
ROA not before:           Tue 04 Aug 2026 01:00:12 +0000
ROA not after:            Mon 02 Nov 2026 02:00:12 +0000
asID:                     30036
IP address blocks:        2604:2e8f:4c00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b8:47:38:94:00:13:48:1c:72:7d:e4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Aug  4 01:00:12 2026 GMT
            Not After : Nov  2 02:00:12 2026 GMT
        Subject: CN=dcb9a97d-ffb7-4a21-b872-14d0edb66341
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:17:53:f4:24:90:60:89:21:22:77:a7:42:fe:
                    cd:f2:56:25:87:d7:ec:79:2e:1a:6d:1f:65:88:67:
                    44:10:fc:6a:99:f4:48:f6:47:df:3d:07:d6:cd:49:
                    13:61:4e:09:b3:e9:96:9a:3e:79:48:ae:34:5d:c4:
                    76:2f:d6:10:6b:97:c2:34:71:87:9a:d7:4f:7f:ed:
                    33:8d:ad:f9:22:7b:fe:e7:df:84:39:67:3e:1a:e6:
                    6c:94:7b:3a:21:25:6e:84:2e:6e:01:b7:04:e0:e2:
                    92:96:f8:17:b8:cc:01:24:1a:58:99:e5:c6:b3:34:
                    57:f2:ba:99:6f:74:d7:d1:82:62:bb:c6:ed:e5:04:
                    ef:10:98:be:6b:79:2b:dc:3a:63:e2:c4:83:41:9b:
                    91:45:77:19:23:d5:c3:8d:5f:fd:9d:5e:0f:df:ed:
                    49:01:25:5e:5a:68:20:2c:cc:e2:3f:4e:02:cb:70:
                    f8:03:72:b8:cf:ef:33:42:2b:fa:0f:c8:f6:e3:ea:
                    ac:6d:f9:e4:be:8a:0d:cc:75:d6:84:7c:cf:73:fd:
                    62:b7:d7:91:01:5b:e4:87:5a:34:b0:e5:6c:03:c7:
                    0e:e5:cf:92:0c:76:8d:c3:71:eb:bc:ce:ac:d7:05:
                    fd:54:64:3d:34:c9:0f:c7:50:86:fd:3d:17:b9:66:
                    63:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:02:73:FC:1A:BF:5D:BA:14:1D:BC:5B:B0:C5:4A:19:99:0B:1B:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a04a33de-95c6-3ceb-9db4-fede37f5994a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8f:4c00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:92:09:3a:57:6c:6c:57:17:9c:c9:21:0a:35:46:dd:c3:88:
         eb:8f:2f:77:b5:95:c1:12:a6:0a:fa:33:c8:b6:88:60:8c:fd:
         79:5a:3b:01:64:84:df:20:da:48:45:bb:e6:08:7e:a0:de:87:
         b7:ed:bd:de:9f:69:f0:1a:e9:90:e7:7f:ba:f7:9f:9b:a4:d1:
         d6:30:c5:4c:3d:b6:fa:cb:dd:29:ca:b9:86:c8:1c:16:4b:65:
         e3:93:26:5c:71:99:30:1f:f2:ee:b7:e1:77:7b:9d:f1:3b:12:
         59:7d:fc:5f:8a:76:b5:64:57:cf:ad:5c:d1:5a:68:99:e4:60:
         62:cc:28:2f:e3:f9:a9:17:41:27:fe:f9:ee:69:be:ea:6d:39:
         af:22:8b:9b:ce:da:5c:d4:15:25:d6:b7:4f:9f:f3:93:47:84:
         3f:1a:a6:85:34:43:2b:92:7a:27:6b:a4:03:3a:51:2c:68:ae:
         be:86:1e:10:17:46:9d:b0:50:62:38:70:17:0c:d8:e1:88:fa:
         58:f4:e5:45:79:2f:1f:ad:0d:e3:db:42:b6:51:28:eb:69:96:
         dc:ff:19:79:0f:10:08:bb:80:a2:96:c4:0e:7b:91:73:33:f6:
         70:db:41:1a:70:52:de:64:df:6e:04:4e:31:fc:96:84:89:7a:
         9a:e6:62:29
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE64RziUABNIHHJ95IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI2MDgwNDAxMDAxMloXDTI2MTEwMjAyMDAxMlowLzEtMCsGA1UEAxMk
ZGNiOWE5N2QtZmZiNy00YTIxLWI4NzItMTRkMGVkYjY2MzQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5hdT9CSQYIkhInenQv7N8lYlh9fseS4abR9l
iGdEEPxqmfRI9kffPQfWzUkTYU4Js+mWmj55SK40XcR2L9YQa5fCNHGHmtdPf+0z
ja35Inv+59+EOWc+GuZslHs6ISVuhC5uAbcE4OKSlvgXuMwBJBpYmeXGszRX8rqZ
b3TX0YJiu8bt5QTvEJi+a3kr3Dpj4sSDQZuRRXcZI9XDjV/9nV4P3+1JASVeWmgg
LMziP04Cy3D4A3K4z+8zQiv6D8j24+qsbfnkvooNzHXWhHzPc/1it9eRAVvkh1o0
sOVsA8cO5c+SDHaNw3HrvM6s1wX9VGQ9NMkPx1CG/T0XuWZj0wIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFCoCc/wav126FB28W7DFShmZCxsAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYTA0YTMzZGUtOTVjNi0z
Y2ViLTlkYjQtZmVkZTM3ZjU5OTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuj0ww
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEASJIJOldsbFcXnMkhCjVG3cOI648vd7WVwRKmCvozyLaIYIz9eVo7
AWSE3yDaSEW75gh+oN6Ht+293p9p8BrpkOd/uvefm6TR1jDFTD22+svdKcq5hsgc
Fktl45MmXHGZMB/y7rfhd3ud8TsSWX38X4p2tWRXz61c0VpomeRgYswoL+P5qRdB
J/757mm+6m05ryKLm87aXNQVJda3T5/zk0eEPxqmhTRDK5J6J2ukAzpRLGiuvoYe
EBdGnbBQYjhwFwzY4Yj6WPTlRXkvH60N49tCtlEo62mW3P8ZeQ8QCLuAopbEDnuR
czP2cNtBGnBS3mTfbgROMfyWhIl6muZiKQ==
-----END CERTIFICATE-----
Generated at Fri Aug 21 01:48:17 2026 by rpki-client