Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/45e9943d-5641-38a1-b8fa-fe27d6cc2d57.roa
File:                     45e9943d-5641-38a1-b8fa-fe27d6cc2d57.roa (raw, json)
Hash identifier:          845iCvUycjmwEHcZC6XdyqkxjAyF90Vm7pn6Kb5kymg=
Subject key identifier:   3E:B8:D5:D1:4B:C4:F7:9F:2A:DD:5F:AD:84:D7:F8:26:A4:54:94:EE
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584F498A9F117017A1409C58EC00
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/45e9943d-5641-38a1-b8fa-fe27d6cc2d57.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     30036
IP address blocks:        2604:2e8c:a400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8a:9f:11:70:17:a1:40:9c:58:ec:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=71619ebd-8c4e-4150-9d48-d3af10c53d44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c1:3a:67:09:7d:90:bf:5b:2e:26:5f:e6:8a:
                    c5:9c:79:a5:28:a2:6b:b3:06:a1:0d:2d:c6:1d:ec:
                    ff:f9:c9:ec:a5:fe:04:53:d4:0b:23:0c:f7:f7:76:
                    37:a7:73:35:f7:f2:c8:d9:7e:f4:ff:ca:47:6f:85:
                    0d:e1:ab:85:e2:a7:77:27:b1:56:f9:c5:a8:52:8c:
                    17:1e:10:76:b3:99:82:72:da:6c:85:aa:31:7c:7a:
                    47:3f:5c:c7:ec:7d:37:3c:ee:a3:f2:32:96:4b:4d:
                    c9:d8:2e:de:ce:0b:60:43:48:e2:97:21:30:26:20:
                    66:d4:1c:c6:d0:dc:de:3a:2d:9c:f6:96:78:e1:9d:
                    37:a7:c4:b1:81:7f:aa:73:77:16:40:5f:4a:d7:3c:
                    80:fd:7d:3f:6b:b1:9b:9d:53:ec:c8:b9:19:be:39:
                    91:4a:81:28:f9:36:1e:65:8c:27:15:85:a7:ee:cd:
                    19:a7:e3:14:06:4d:3a:72:18:fc:01:ef:1b:52:33:
                    ad:2c:d9:88:b7:10:35:ef:cd:e0:0d:f7:15:80:4a:
                    28:42:f9:c5:0f:a3:89:1c:2e:7e:02:51:30:0b:d4:
                    87:a8:4d:70:8c:49:2e:81:6b:6d:d3:5e:98:e4:bd:
                    17:ef:28:b4:b0:27:e1:53:02:81:3d:14:3e:e5:35:
                    e9:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:B8:D5:D1:4B:C4:F7:9F:2A:DD:5F:AD:84:D7:F8:26:A4:54:94:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/45e9943d-5641-38a1-b8fa-fe27d6cc2d57.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8c:a400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:b6:47:74:d6:a8:a4:8e:c1:25:7d:f5:cc:ed:05:5e:e7:b1:
         cb:64:70:bd:8f:14:c2:0d:df:6d:db:74:58:72:c3:cb:c0:4e:
         2a:f2:f2:de:b2:14:0a:eb:f4:b3:19:ba:30:cb:fd:df:12:80:
         40:a6:76:17:92:25:44:5c:3a:75:6f:e8:9c:2c:3e:9e:24:3e:
         f9:8a:e1:67:9b:4b:5b:c7:d0:3f:04:2e:3a:f2:a7:02:1f:fc:
         f7:9b:89:96:41:c1:5f:af:8f:de:38:ea:4e:02:05:7d:77:5f:
         4d:9f:f8:8c:3d:09:5e:bb:02:c0:18:e3:6f:12:2f:e5:e6:91:
         74:c2:d3:b2:c4:f2:59:56:ca:d6:1c:ef:11:82:40:9c:5f:42:
         1c:ef:de:03:11:14:7a:f4:54:0a:65:d5:97:b8:9e:6c:55:4e:
         91:1e:00:ba:75:51:8f:89:e4:ed:ad:de:64:18:5e:66:5c:36:
         28:30:5c:47:a0:66:d1:69:39:37:74:ec:6a:69:7e:df:01:e0:
         6e:5e:bf:84:7c:2b:0e:4b:8e:ec:fb:7e:5d:fc:74:08:f6:c8:
         b7:21:5d:29:37:81:5f:88:ee:d5:61:6a:39:90:96:de:ac:80:
         6c:1d:d0:8c:00:42:e4:da:2a:4a:97:c3:4a:fe:56:42:43:1c:
         17:77:d1:97
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9Jip8RcBehQJxY7AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
NzE2MTllYmQtOGM0ZS00MTUwLTlkNDgtZDNhZjEwYzUzZDQ0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmsE6Zwl9kL9bLiZf5orFnHmlKKJrswahDS3G
Hez/+cnspf4EU9QLIwz393Y3p3M19/LI2X70/8pHb4UN4auF4qd3J7FW+cWoUowX
HhB2s5mCctpshaoxfHpHP1zH7H03PO6j8jKWS03J2C7ezgtgQ0jilyEwJiBm1BzG
0NzeOi2c9pZ44Z03p8SxgX+qc3cWQF9K1zyA/X0/a7GbnVPsyLkZvjmRSoEo+TYe
ZYwnFYWn7s0Zp+MUBk06chj8Ae8bUjOtLNmItxA1783gDfcVgEooQvnFD6OJHC5+
AlEwC9SHqE1wjEkugWtt016Y5L0X7yi0sCfhUwKBPRQ+5TXp+QIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFD641dFLxPefKt1frYTX+CakVJTuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNDVlOTk0M2QtNTY0MS0z
OGExLWI4ZmEtZmUyN2Q2Y2MyZDU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujKQw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEASLZHdNaopI7BJX31zO0FXuexy2RwvY8Uwg3fbdt0WHLDy8BOKvLy
3rIUCuv0sxm6MMv93xKAQKZ2F5IlRFw6dW/onCw+niQ++YrhZ5tLW8fQPwQuOvKn
Ah/895uJlkHBX6+P3jjqTgIFfXdfTZ/4jD0JXrsCwBjjbxIv5eaRdMLTssTyWVbK
1hzvEYJAnF9CHO/eAxEUevRUCmXVl7iebFVOkR4AunVRj4nk7a3eZBheZlw2KDBc
R6Bm0Wk5N3Tsaml+3wHgbl6/hHwrDkuO7Pt+Xfx0CPbItyFdKTeBX4ju1WFqOZCW
3qyAbB3QjABC5NoqSpfDSv5WQkMcF3fRlw==
-----END CERTIFICATE-----
Generated at Mon Sep 28 22:51:42 2026 by rpki-client