Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/184c72b5-db8b-30e7-928e-58f6573f063c.roa
File:                     184c72b5-db8b-30e7-928e-58f6573f063c.roa (raw, json)
Hash identifier:          S3JTrYWY1ujfJR+F2cTEUXULxA3bjrbzgPNRpdO0iUw=
Subject key identifier:   4B:E7:79:BB:34:6A:CF:16:5B:75:82:CA:4E:0C:35:22:50:F4:A9:0F
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584F498BDF3AD04A5090F2E03100
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/184c72b5-db8b-30e7-928e-58f6573f063c.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     30036
IP address blocks:        2604:2e8b:e800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8b:df:3a:d0:4a:50:90:f2:e0:31:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=d4a5eb88-94cc-4f56-8194-4b4954a84780
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f6:5e:e8:7a:38:f6:7a:89:69:57:ea:e0:69:
                    0b:81:d3:4f:6a:ca:59:5f:f8:67:b0:5c:5e:bf:89:
                    9a:e0:4d:a2:77:60:18:10:e0:8c:88:c8:bc:3a:c2:
                    8a:2b:ae:e9:28:5a:03:5a:96:58:a8:78:38:a1:83:
                    86:1a:34:ed:fc:8d:43:45:00:6c:1d:9d:12:77:b0:
                    54:95:66:e9:75:2a:4e:95:00:7d:19:99:be:0c:ec:
                    42:37:ab:4a:67:e0:6e:7d:83:66:32:04:f8:98:8d:
                    2e:7b:c4:b9:ab:0c:80:f2:c1:5c:52:20:ce:ed:e1:
                    c3:42:98:ed:3d:9b:af:e7:29:ec:4d:70:cd:3f:32:
                    34:74:c8:62:0f:77:f9:a6:a5:3e:71:be:d8:8d:98:
                    a2:54:3f:08:a4:ea:02:10:22:23:59:fe:2b:b0:31:
                    e9:86:51:ab:c0:a8:02:00:d4:b8:4e:4a:4f:2f:3c:
                    d6:6a:b8:54:d5:b8:e9:e5:1a:44:ad:fb:46:69:d8:
                    17:91:95:4d:0b:7d:7a:99:02:0d:af:a0:3a:57:b6:
                    c1:be:72:a5:c2:9a:a3:43:44:ac:36:18:ef:1b:fe:
                    c0:e9:58:a0:3f:20:b4:55:dc:38:ba:25:09:07:94:
                    ae:60:83:78:6d:34:86:a8:e9:26:42:e3:dd:a1:34:
                    68:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:E7:79:BB:34:6A:CF:16:5B:75:82:CA:4E:0C:35:22:50:F4:A9:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/184c72b5-db8b-30e7-928e-58f6573f063c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8b:e800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:2d:b4:a8:5e:47:cb:cc:20:5d:5a:1a:ac:5c:9c:d9:87:3f:
         d5:4f:b1:8f:ef:05:6a:ca:40:0a:85:94:1c:8d:79:c8:32:df:
         44:36:14:1c:42:d6:b2:c4:fc:c0:3e:15:92:fd:43:b6:d8:cc:
         96:de:bf:6d:8a:c0:24:e9:6c:d5:f2:3f:19:dc:85:2e:d9:3b:
         3b:b6:37:2b:06:fa:7d:63:d2:7d:a4:7d:d5:60:80:45:0f:9a:
         af:f2:66:02:60:68:8f:fb:df:f2:0c:11:82:ee:ca:87:1b:17:
         f9:63:46:79:f7:14:23:99:fb:49:92:ee:ec:1c:fc:07:7c:e1:
         1a:cf:85:9f:be:d8:c6:30:30:00:12:42:db:ea:34:3a:c8:d1:
         db:4a:d3:5f:65:42:9d:25:d3:fb:b6:fa:63:94:09:8d:03:2c:
         73:6b:19:85:a9:70:f2:00:2f:46:33:1c:79:95:d7:31:bf:dd:
         06:9a:30:7f:66:30:74:59:7f:26:0c:78:6b:4a:e2:ac:11:f2:
         4f:47:a4:bc:5b:5b:b3:07:b7:db:ff:a7:2f:14:5b:ce:84:f8:
         a5:29:d6:c9:e6:1a:42:ba:91:fd:78:88:0b:0e:59:9f:8e:33:
         9e:10:68:4c:1e:e8:9f:68:c4:3b:b5:45:5d:b7:7a:e1:6c:cb:
         be:dd:93:ad
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9Ji9860EpQkPLgMQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
ZDRhNWViODgtOTRjYy00ZjU2LTgxOTQtNGI0OTU0YTg0NzgwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/Ze6Ho49nqJaVfq4GkLgdNPaspZX/hnsFxe
v4ma4E2id2AYEOCMiMi8OsKKK67pKFoDWpZYqHg4oYOGGjTt/I1DRQBsHZ0Sd7BU
lWbpdSpOlQB9GZm+DOxCN6tKZ+BufYNmMgT4mI0ue8S5qwyA8sFcUiDO7eHDQpjt
PZuv5ynsTXDNPzI0dMhiD3f5pqU+cb7YjZiiVD8IpOoCECIjWf4rsDHphlGrwKgC
ANS4TkpPLzzWarhU1bjp5RpErftGadgXkZVNC316mQINr6A6V7bBvnKlwpqjQ0Ss
NhjvG/7A6VigPyC0Vdw4uiUJB5SuYIN4bTSGqOkmQuPdoTRomQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFEvnebs0as8WW3WCyk4MNSJQ9KkPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMTg0YzcyYjUtZGI4Yi0z
MGU3LTkyOGUtNThmNjU3M2YwNjNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQui+gw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAoi20qF5Hy8wgXVoarFyc2Yc/1U+xj+8FaspACoWUHI15yDLfRDYU
HELWssT8wD4Vkv1DttjMlt6/bYrAJOls1fI/GdyFLtk7O7Y3Kwb6fWPSfaR91WCA
RQ+ar/JmAmBoj/vf8gwRgu7KhxsX+WNGefcUI5n7SZLu7Bz8B3zhGs+Fn77YxjAw
ABJC2+o0OsjR20rTX2VCnSXT+7b6Y5QJjQMsc2sZhalw8gAvRjMceZXXMb/dBpow
f2YwdFl/Jgx4a0rirBHyT0ekvFtbswe32/+nLxRbzoT4pSnWyeYaQrqR/XiICw5Z
n44znhBoTB7on2jEO7VFXbd64WzLvt2TrQ==
-----END CERTIFICATE-----
Generated at Fri Sep 25 07:27:28 2026 by rpki-client