Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4691484a-b551-3207-a7de-902605b6e48a.roa
File:                     4691484a-b551-3207-a7de-902605b6e48a.roa (raw, json)
Hash identifier:          p3lWaR6Y+0C11f/7FdSRxxXKur8qS3ZxzfgCeLoRBbo=
Subject key identifier:   FE:CD:60:4B:F6:39:7E:1E:0D:45:41:06:67:1A:48:CA:C5:D6:58:9F
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584E5619F426C40FA5543F815F80
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4691484a-b551-3207-a7de-902605b6e48a.roa
Signing time:             Mon 29 Jun 2026 21:00:12 +0000
ROA not before:           Mon 29 Jun 2026 21:00:12 +0000
ROA not after:            Sun 27 Sep 2026 21:00:12 +0000
asID:                     30036
IP address blocks:        2604:2e8b:4c00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:56:19:f4:26:c4:0f:a5:54:3f:81:5f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jun 29 21:00:12 2026 GMT
            Not After : Sep 27 21:00:12 2026 GMT
        Subject: CN=5f04b836-09fa-4599-acea-7934429f29ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:b1:4f:76:8e:ec:4f:9d:78:45:95:59:d3:aa:
                    32:3f:b5:f4:43:a2:6d:01:de:95:9a:70:da:7a:02:
                    24:f4:b4:62:89:76:e2:1d:24:92:84:f7:ad:3e:8b:
                    f4:7e:42:cb:d0:fa:de:6e:2b:30:b5:5a:ab:1a:6b:
                    36:d6:db:68:01:54:54:2e:89:0d:72:75:89:79:7c:
                    5a:13:f9:7f:1f:25:3c:12:d9:8f:a9:06:9d:40:34:
                    02:8a:1b:52:ad:2c:dc:d7:e7:07:46:f4:f1:d4:a3:
                    62:63:7d:d0:cc:6e:44:fd:4e:2c:62:2f:69:74:97:
                    a9:2c:92:e7:38:0d:f1:f6:63:15:df:fd:79:59:02:
                    2b:2b:d2:02:3b:d5:3d:87:98:aa:ed:81:5c:28:98:
                    ce:61:c2:7d:a5:ea:0f:c6:44:f4:08:b0:00:4b:87:
                    a7:fc:ff:f3:31:f5:e4:55:b5:61:ed:d3:1a:cc:8b:
                    21:ca:bd:13:92:c2:3d:ea:a6:07:0d:10:43:84:68:
                    0e:b4:50:c4:c0:d3:44:d4:5a:f3:d6:0f:db:42:6c:
                    e4:ef:d2:cf:e1:75:80:3c:bf:29:54:74:cb:60:4f:
                    44:dd:39:92:40:83:f2:49:f4:5c:b1:c7:ff:96:b4:
                    55:f1:ba:43:d9:7a:cc:c7:b3:94:5e:10:c3:2d:30:
                    49:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:CD:60:4B:F6:39:7E:1E:0D:45:41:06:67:1A:48:CA:C5:D6:58:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4691484a-b551-3207-a7de-902605b6e48a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8b:4c00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:57:bb:3e:4a:fc:84:a3:3c:7e:d0:9c:04:ed:b2:fa:6a:fd:
         5d:75:74:05:00:29:68:33:98:36:ac:09:23:2b:5c:7a:0f:1c:
         9a:34:b3:f4:c6:ff:96:7f:fa:bf:34:1b:c1:ae:21:82:ce:73:
         70:d8:5c:1b:30:b4:d6:b2:23:80:18:81:83:ea:0f:c6:3c:9e:
         db:98:0c:f6:6f:f2:4b:ad:95:d0:f3:9c:e9:79:58:9c:09:34:
         6a:24:2f:1f:73:8b:7d:af:99:e1:ca:d5:f2:49:5f:78:24:97:
         00:54:34:54:59:58:d9:ce:49:9c:7d:7a:f7:3b:4e:42:d6:21:
         5c:eb:67:1f:39:ec:eb:c3:96:f3:16:02:50:ef:f2:a9:9d:38:
         56:49:c7:27:92:05:4a:99:4a:e3:b4:07:42:10:d1:ca:0f:a1:
         03:99:0f:0e:02:10:b8:59:15:19:db:3b:76:ee:e2:38:0c:7b:
         2e:e0:78:10:00:45:9f:70:8a:9d:85:6e:e1:d3:da:a2:ce:16:
         46:1a:5f:e2:98:0e:5a:b3:ef:ab:22:d7:1b:01:31:df:17:4c:
         44:d9:a6:91:0a:3d:4c:13:40:97:93:4a:6b:bd:f3:32:0d:88:
         d4:c0:64:8f:58:c6:cd:9b:ad:0d:cf:f7:40:0a:21:e0:65:e4:
         06:1a:7e:f7
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE5WGfQmxA+lVD+BX4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI2MDYyOTIxMDAxMloXDTI2MDkyNzIxMDAxMlowLzEtMCsGA1UEAxMk
NWYwNGI4MzYtMDlmYS00NTk5LWFjZWEtNzkzNDQyOWYyOWNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlbFPdo7sT514RZVZ06oyP7X0Q6JtAd6VmnDa
egIk9LRiiXbiHSSShPetPov0fkLL0PrebiswtVqrGms21ttoAVRULokNcnWJeXxa
E/l/HyU8EtmPqQadQDQCihtSrSzc1+cHRvTx1KNiY33QzG5E/U4sYi9pdJepLJLn
OA3x9mMV3/15WQIrK9ICO9U9h5iq7YFcKJjOYcJ9peoPxkT0CLAAS4en/P/zMfXk
VbVh7dMazIshyr0TksI96qYHDRBDhGgOtFDEwNNE1Frz1g/bQmzk79LP4XWAPL8p
VHTLYE9E3TmSQIPySfRcscf/lrRV8bpD2XrMx7OUXhDDLTBJfwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFP7NYEv2OX4eDUVBBmcaSMrF1lifMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNDY5MTQ4NGEtYjU1MS0z
MjA3LWE3ZGUtOTAyNjA1YjZlNDhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQui0ww
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAAFe7Pkr8hKM8ftCcBO2y+mr9XXV0BQApaDOYNqwJIytceg8cmjSz
9Mb/ln/6vzQbwa4hgs5zcNhcGzC01rIjgBiBg+oPxjye25gM9m/yS62V0POc6XlY
nAk0aiQvH3OLfa+Z4crV8klfeCSXAFQ0VFlY2c5JnH169ztOQtYhXOtnHzns68OW
8xYCUO/yqZ04VknHJ5IFSplK47QHQhDRyg+hA5kPDgIQuFkVGds7du7iOAx7LuB4
EABFn3CKnYVu4dPaos4WRhpf4pgOWrPvqyLXGwEx3xdMRNmmkQo9TBNAl5NKa73z
Mg2I1MBkj1jGzZutDc/3QAoh4GXkBhp+9w==
-----END CERTIFICATE-----
Generated at Fri Jul 24 13:00:49 2026 by rpki-client