Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/24d94350-8c13-3306-9c5c-b377f6c417f9.roa
File:                     24d94350-8c13-3306-9c5c-b377f6c417f9.roa (raw, json)
Hash identifier:          aDUKfVtTuNaY/PcJDQiBVCTt+1CWoLYRG9F4+3SbHRc=
Subject key identifier:   BE:78:4A:7C:73:34:57:B2:CD:95:4C:BF:7F:96:9B:A9:90:5F:CB:A1
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584E8DEFB4AF251C736E2E8EA840
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/24d94350-8c13-3306-9c5c-b377f6c417f9.roa
Signing time:             Sun 19 Jul 2026 21:00:12 +0000
ROA not before:           Sun 19 Jul 2026 21:00:12 +0000
ROA not after:            Sat 17 Oct 2026 21:00:12 +0000
asID:                     30036
IP address blocks:        2604:2e8b:5000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8d:ef:b4:af:25:1c:73:6e:2e:8e:a8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jul 19 21:00:12 2026 GMT
            Not After : Oct 17 21:00:12 2026 GMT
        Subject: CN=3341f7ec-200a-4fac-a12f-94bc7cec5014
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:70:eb:00:2a:6d:29:08:34:9f:b8:3b:2d:82:
                    7d:cf:88:17:8f:42:30:b0:68:74:23:d7:33:a7:c3:
                    ab:36:20:4f:ca:51:f8:64:40:a9:0d:51:b2:c9:28:
                    6c:40:bc:c8:cd:9e:f7:0b:13:9d:33:c4:e6:6e:62:
                    92:7c:c2:d2:5d:c1:eb:d5:0f:88:92:f0:d6:f2:0b:
                    fd:26:cb:3f:71:23:19:52:9e:b7:93:a6:91:57:b8:
                    4b:9f:2c:49:d8:2f:7e:16:e8:ff:88:9b:73:de:91:
                    d3:d1:5e:9e:01:07:80:19:09:81:ff:6f:f4:c7:23:
                    73:12:8d:d0:6b:56:e6:15:dc:e2:40:cb:b8:01:2e:
                    9a:fa:5a:94:b0:30:95:a7:4a:e9:02:a5:7d:0a:ea:
                    a8:ba:dd:d2:c7:9e:c9:5a:39:8d:76:c6:69:27:75:
                    89:77:cd:66:64:51:06:ac:5b:8b:04:60:4e:e1:ed:
                    bc:30:23:4f:dc:89:7a:f6:62:d6:ad:2f:dd:c6:75:
                    66:64:19:6e:8a:13:f1:22:d1:58:67:90:30:7c:09:
                    6c:05:8e:46:fb:d5:26:21:8f:0d:7b:ae:1d:4e:ea:
                    7d:96:da:9d:b1:2b:2f:fc:a5:80:9b:16:96:4a:3a:
                    90:e6:9d:c8:42:a9:18:a6:e3:34:4a:9f:9b:72:3b:
                    67:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:78:4A:7C:73:34:57:B2:CD:95:4C:BF:7F:96:9B:A9:90:5F:CB:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/24d94350-8c13-3306-9c5c-b377f6c417f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8b:5000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:22:28:0d:a4:d6:63:24:6f:7a:5b:29:6a:fb:dc:0a:b0:1a:
         4e:bc:97:97:42:ad:70:ec:5c:ea:9d:63:41:49:7f:10:1e:b6:
         3f:f6:dc:40:ba:5d:e0:52:4c:9c:e4:61:6a:eb:29:96:a5:7a:
         f6:0a:f5:30:31:2a:9d:84:1f:fd:80:60:31:ac:ce:c7:07:e2:
         e2:52:27:d8:0d:ed:72:fd:fe:2e:98:8d:2c:59:85:cd:b9:4f:
         70:20:37:a4:00:81:b1:06:62:aa:37:90:db:c8:d5:bf:cc:df:
         71:4d:ac:fe:ea:bb:42:3c:0a:8f:9b:24:bc:9a:21:43:03:f3:
         3b:d9:be:5f:2b:d1:a5:58:1e:47:02:50:ed:9c:1a:49:86:23:
         1e:f2:a6:9c:5c:3e:af:94:bb:90:74:d0:18:13:6d:ff:62:b4:
         a4:bc:4a:99:bb:c4:33:15:1f:2b:22:43:a7:73:77:67:62:f4:
         48:a7:09:47:8c:4a:fd:7c:f5:da:72:6e:54:64:d7:28:9c:67:
         aa:d5:8d:65:61:0e:55:30:c3:37:a8:87:97:d5:d6:bf:18:de:
         26:50:51:67:bc:8e:5c:40:fd:f4:db:37:f8:05:c2:45:fc:ad:
         f3:9b:27:85:53:49:ba:b7:b2:b3:2f:87:0d:85:81:d2:39:a4:
         4f:2b:ad:c8
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE6N77SvJRxzbi6OqEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI2MDcxOTIxMDAxMloXDTI2MTAxNzIxMDAxMlowLzEtMCsGA1UEAxMk
MzM0MWY3ZWMtMjAwYS00ZmFjLWExMmYtOTRiYzdjZWM1MDE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1XDrACptKQg0n7g7LYJ9z4gXj0IwsGh0I9cz
p8OrNiBPylH4ZECpDVGyyShsQLzIzZ73CxOdM8TmbmKSfMLSXcHr1Q+IkvDW8gv9
Jss/cSMZUp63k6aRV7hLnyxJ2C9+Fuj/iJtz3pHT0V6eAQeAGQmB/2/0xyNzEo3Q
a1bmFdziQMu4AS6a+lqUsDCVp0rpAqV9Cuqout3Sx57JWjmNdsZpJ3WJd81mZFEG
rFuLBGBO4e28MCNP3Il69mLWrS/dxnVmZBluihPxItFYZ5AwfAlsBY5G+9UmIY8N
e64dTup9ltqdsSsv/KWAmxaWSjqQ5p3IQqkYpuM0Sp+bcjtnIQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFL54SnxzNFeyzZVMv3+Wm6mQX8uhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMjRkOTQzNTAtOGMxMy0z
MzA2LTljNWMtYjM3N2Y2YzQxN2Y5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQui1Aw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAGyIoDaTWYyRvelspavvcCrAaTryXl0KtcOxc6p1jQUl/EB62P/bc
QLpd4FJMnORhausplqV69gr1MDEqnYQf/YBgMazOxwfi4lIn2A3tcv3+LpiNLFmF
zblPcCA3pACBsQZiqjeQ28jVv8zfcU2s/uq7QjwKj5skvJohQwPzO9m+XyvRpVge
RwJQ7ZwaSYYjHvKmnFw+r5S7kHTQGBNt/2K0pLxKmbvEMxUfKyJDp3N3Z2L0SKcJ
R4xK/Xz12nJuVGTXKJxnqtWNZWEOVTDDN6iHl9XWvxjeJlBRZ7yOXED99Ns3+AXC
Rfyt85snhVNJureysy+HDYWB0jmkTyutyA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 14:33:34 2026 by rpki-client