Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/525a8858-0ad9-37d9-901c-8c74bef96b29.roa
File:                     525a8858-0ad9-37d9-901c-8c74bef96b29.roa (raw, json)
Hash identifier:          IXKtflMH0KbbzuQrwJpFlOtGZFEeZW2YKljsQE0zP+I=
Subject key identifier:   D9:57:E6:57:CC:3F:A6:FA:A9:AB:7E:96:49:1C:A2:9F:AD:97:E1:78
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584E5D149CC8C623DDE7A96AE400
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/525a8858-0ad9-37d9-901c-8c74bef96b29.roa
Signing time:             Thu 02 Jul 2026 09:00:12 +0000
ROA not before:           Thu 02 Jul 2026 09:00:12 +0000
ROA not after:            Wed 30 Sep 2026 09:00:12 +0000
asID:                     30036
IP address blocks:        2604:2e8d:7800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5d:14:9c:c8:c6:23:dd:e7:a9:6a:e4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jul  2 09:00:12 2026 GMT
            Not After : Sep 30 09:00:12 2026 GMT
        Subject: CN=b0b2d92e-a578-40d0-8adc-247857c9c2c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:0b:ac:c9:41:40:24:26:58:23:58:dc:a9:0e:
                    f9:ba:ce:8e:43:37:67:99:0f:bb:91:40:42:4b:99:
                    45:ca:5d:b9:22:7c:ae:ac:83:c0:f6:2e:a5:25:ab:
                    9f:82:9c:2e:6f:4f:f6:0e:8d:c8:36:a2:71:a6:44:
                    f8:31:53:5c:45:39:dd:d8:7d:4c:83:a3:e9:2e:a4:
                    76:1e:24:c7:d9:37:f0:23:7b:bf:a2:26:fc:0c:78:
                    32:3b:ae:df:e6:47:ff:b3:30:e5:58:ef:a8:cd:ad:
                    8a:d4:32:95:90:4b:7b:ec:a3:82:f1:e9:2b:8f:30:
                    2f:3d:1d:bc:63:af:6f:3b:e9:9b:c1:8d:3b:5b:b9:
                    ce:c1:3d:de:d8:f4:32:11:d6:5b:36:14:1d:85:5c:
                    09:dd:cc:60:bf:13:9f:a1:a9:39:a6:ad:5e:86:91:
                    2a:c7:b6:67:03:40:90:67:ef:2b:9e:b2:4d:4f:0a:
                    f8:57:fa:d1:7a:e0:d5:72:28:f9:d3:1c:5b:4e:12:
                    ae:15:44:d7:42:d7:db:be:a5:d7:78:b1:32:36:15:
                    9e:77:ba:3d:11:3b:d0:df:a3:f8:e7:51:3b:59:48:
                    93:0d:c6:94:b6:72:df:47:38:7b:4f:e6:0a:14:a7:
                    f8:78:87:29:ed:f0:ce:7a:18:aa:87:24:95:be:87:
                    91:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:57:E6:57:CC:3F:A6:FA:A9:AB:7E:96:49:1C:A2:9F:AD:97:E1:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/525a8858-0ad9-37d9-901c-8c74bef96b29.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8d:7800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:ef:7d:e5:87:26:a5:ed:27:96:12:eb:e0:42:d5:c6:02:1a:
         19:29:76:16:6a:4c:2d:60:13:b8:82:c3:b3:a1:75:01:08:0b:
         f5:f0:15:cb:eb:b1:0a:9d:49:95:cd:72:8d:7a:cf:68:0d:4e:
         4e:73:87:31:12:92:04:51:fb:bd:87:0a:fd:f2:83:c5:ad:0a:
         88:71:97:dc:a7:40:a8:fa:0a:f4:b9:a5:ad:9e:d4:55:07:9a:
         73:e9:2e:b8:d0:73:f6:79:4b:61:48:06:8f:fa:2f:25:37:7c:
         62:9d:17:b4:f6:8c:26:3f:93:1b:d4:d7:46:62:8f:82:df:0b:
         84:55:90:00:80:77:4c:72:42:52:15:9e:52:cb:64:cd:17:7c:
         cf:e0:bd:44:13:2e:48:d5:b8:fa:df:3b:9e:f5:55:86:1a:ec:
         fd:ec:9b:4d:2e:ba:fc:02:6a:8f:d2:f0:9c:d4:23:77:ad:dd:
         5c:f3:bd:ce:a5:cf:2e:10:1e:19:53:48:a9:e3:e2:1a:62:1d:
         96:2d:10:0d:ab:04:c7:66:f4:15:1c:86:bd:12:7d:4c:92:bb:
         7f:72:26:19:bc:d8:73:5d:f2:47:aa:4f:b6:ff:66:5f:0b:0b:
         70:52:3b:8e:f9:23:ce:ba:62:8b:30:a1:15:e2:46:b9:8a:53:
         6c:ae:5b:a5
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE5dFJzIxiPd56lq5AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI2MDcwMjA5MDAxMloXDTI2MDkzMDA5MDAxMlowLzEtMCsGA1UEAxMk
YjBiMmQ5MmUtYTU3OC00MGQwLThhZGMtMjQ3ODU3YzljMmMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgwusyUFAJCZYI1jcqQ75us6OQzdnmQ+7kUBC
S5lFyl25InyurIPA9i6lJaufgpwub0/2Do3INqJxpkT4MVNcRTnd2H1Mg6PpLqR2
HiTH2TfwI3u/oib8DHgyO67f5kf/szDlWO+oza2K1DKVkEt77KOC8ekrjzAvPR28
Y69vO+mbwY07W7nOwT3e2PQyEdZbNhQdhVwJ3cxgvxOfoak5pq1ehpEqx7ZnA0CQ
Z+8rnrJNTwr4V/rReuDVcij50xxbThKuFUTXQtfbvqXXeLEyNhWed7o9ETvQ36P4
51E7WUiTDcaUtnLfRzh7T+YKFKf4eIcp7fDOehiqhySVvoeR9wIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFNlX5lfMP6b6qat+lkkcop+tl+F4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNTI1YTg4NTgtMGFkOS0z
N2Q5LTkwMWMtOGM3NGJlZjk2YjI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujXgw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAPu995Ycmpe0nlhLr4ELVxgIaGSl2FmpMLWATuILDs6F1AQgL9fAV
y+uxCp1Jlc1yjXrPaA1OTnOHMRKSBFH7vYcK/fKDxa0KiHGX3KdAqPoK9LmlrZ7U
VQeac+kuuNBz9nlLYUgGj/ovJTd8Yp0XtPaMJj+TG9TXRmKPgt8LhFWQAIB3THJC
UhWeUstkzRd8z+C9RBMuSNW4+t87nvVVhhrs/eybTS66/AJqj9LwnNQjd63dXPO9
zqXPLhAeGVNIqePiGmIdli0QDasEx2b0FRyGvRJ9TJK7f3ImGbzYc13yR6pPtv9m
XwsLcFI7jvkjzrpiizChFeJGuYpTbK5bpQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 14:31:02 2026 by rpki-client