Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/73008ab2-fe20-3fb5-b501-39e9cba799c4.roa
File:                     73008ab2-fe20-3fb5-b501-39e9cba799c4.roa (raw, json)
Hash identifier:          CIGwPZ4GQoigoPjoufDmim+DGDSb8LLC3gKyNAoLr4c=
Subject key identifier:   64:16:07:83:83:4B:59:1A:DF:1D:F8:DE:3C:9D:C9:AE:B1:FA:C5:32
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584D27AA12D8EF1427FAA3B4C400
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/73008ab2-fe20-3fb5-b501-39e9cba799c4.roa
Signing time:             Fri 13 Mar 2026 13:00:40 +0000
ROA not before:           Fri 13 Mar 2026 13:00:40 +0000
ROA not after:            Thu 11 Jun 2026 13:00:40 +0000
asID:                     30036
IP address blocks:        2604:2e8b:3000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:27:aa:12:d8:ef:14:27:fa:a3:b4:c4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Mar 13 13:00:40 2026 GMT
            Not After : Jun 11 13:00:40 2026 GMT
        Subject: CN=831ade84-2c57-44a2-abc1-09db3f381ace
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f2:f0:58:71:ae:f7:96:c8:42:54:fc:38:4d:
                    73:e0:2c:09:31:81:7c:25:73:98:09:3e:fd:c1:c8:
                    f1:29:01:a3:1b:c3:c6:d2:59:e4:f0:ad:c8:f8:ca:
                    05:90:c7:84:b7:bb:12:bb:5d:74:ab:e7:ef:1e:a3:
                    74:82:06:92:db:60:2d:bb:97:29:49:27:8b:0a:fb:
                    a2:7e:9c:ca:54:a4:71:dd:cd:52:78:74:92:49:45:
                    7b:8b:a4:e7:e2:be:91:ef:9c:35:ec:dd:35:87:c8:
                    81:44:a9:7f:3d:a3:ec:82:fe:40:16:79:f6:18:a6:
                    ff:6c:71:c6:8c:ef:4d:aa:c6:5b:03:41:34:75:5b:
                    d0:1d:16:36:02:03:b6:d2:56:4e:ba:ab:dc:7d:5a:
                    6b:89:be:2f:21:f7:00:f2:00:26:c0:c1:99:56:61:
                    53:5b:2f:48:50:b2:62:a1:e0:a1:d9:79:5b:94:98:
                    82:f2:c5:4d:d0:01:b2:b2:88:d5:59:0e:bb:e3:ab:
                    37:8b:61:1e:98:2a:e5:79:c6:fe:41:a7:20:20:f6:
                    e4:c8:56:1d:e3:a0:6a:6c:e0:f8:75:7d:0b:3b:99:
                    a2:6a:e2:e5:83:98:83:ec:d3:43:bd:f7:d3:18:11:
                    d7:05:e7:fa:84:a8:d6:58:97:61:c5:f3:51:83:dd:
                    62:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:16:07:83:83:4B:59:1A:DF:1D:F8:DE:3C:9D:C9:AE:B1:FA:C5:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/73008ab2-fe20-3fb5-b501-39e9cba799c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8b:3000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:fc:91:85:11:82:57:c2:d6:89:cc:56:81:f3:21:19:6c:bc:
         c0:8b:43:de:d8:ee:5b:f4:14:11:38:f7:a3:7e:3f:75:fb:7f:
         4d:63:fc:80:a3:6d:3b:cd:86:2f:af:82:ec:f9:99:19:f6:7c:
         88:e8:b5:bd:65:29:fa:dd:96:b9:b7:8f:3b:ab:b3:df:9f:51:
         af:3c:69:1b:a0:be:58:09:93:49:09:e7:1c:f3:0a:4b:c6:ee:
         51:b7:6c:77:7f:39:6e:e5:31:f9:f7:4b:41:48:26:8b:a1:fb:
         b3:56:18:71:c6:72:74:76:b2:2e:9d:ce:54:93:44:11:21:55:
         6b:13:f1:4d:4f:9f:f5:39:2e:33:2a:da:c0:56:18:cf:55:77:
         9c:5a:08:55:21:24:00:72:bd:0f:e6:9f:1b:49:a6:c9:24:62:
         76:11:88:99:57:a4:df:bf:4e:ae:89:b4:4d:72:30:60:a2:0b:
         c5:02:11:48:91:d8:48:3c:c6:66:17:cd:70:da:0d:ac:45:53:
         f6:f8:80:b5:f3:4c:76:f5:94:5f:1f:0d:44:9b:a3:36:e5:17:
         3d:82:18:e9:c1:fd:a5:d5:3e:e8:b3:6a:07:c6:8d:7f:e0:a8:
         db:b2:97:31:42:57:b4:7c:42:8c:f5:b0:ae:e4:a1:22:31:66:
         23:db:a0:61
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE0nqhLY7xQn+qO0xAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk
ODMxYWRlODQtMmM1Ny00NGEyLWFiYzEtMDlkYjNmMzgxYWNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfLwWHGu95bIQlT8OE1z4CwJMYF8JXOYCT79
wcjxKQGjG8PG0lnk8K3I+MoFkMeEt7sSu110q+fvHqN0ggaS22Atu5cpSSeLCvui
fpzKVKRx3c1SeHSSSUV7i6Tn4r6R75w17N01h8iBRKl/PaPsgv5AFnn2GKb/bHHG
jO9NqsZbA0E0dVvQHRY2AgO20lZOuqvcfVprib4vIfcA8gAmwMGZVmFTWy9IULJi
oeCh2XlblJiC8sVN0AGysojVWQ6746s3i2EemCrlecb+QacgIPbkyFYd46BqbOD4
dX0LO5miauLlg5iD7NNDvffTGBHXBef6hKjWWJdhxfNRg91idwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFGQWB4ODS1ka3x343jydya6x+sUyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNzMwMDhhYjItZmUyMC0z
ZmI1LWI1MDEtMzllOWNiYTc5OWM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuizAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAKvyRhRGCV8LWicxWgfMhGWy8wItD3tjuW/QUETj3o34/dft/TWP8
gKNtO82GL6+C7PmZGfZ8iOi1vWUp+t2WubePO6uz359RrzxpG6C+WAmTSQnnHPMK
S8buUbdsd385buUx+fdLQUgmi6H7s1YYccZydHayLp3OVJNEESFVaxPxTU+f9Tku
MyrawFYYz1V3nFoIVSEkAHK9D+afG0mmySRidhGImVek379Orom0TXIwYKILxQIR
SJHYSDzGZhfNcNoNrEVT9viAtfNMdvWUXx8NRJujNuUXPYIY6cH9pdU+6LNqB8aN
f+Co27KXMUJXtHxCjPWwruShIjFmI9ugYQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:27:36 2026 by rpki-client