Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/76d81576-7dc1-3d62-ab0e-1a190d167866.roa
File:                     76d81576-7dc1-3d62-ab0e-1a190d167866.roa (raw, json)
Hash identifier:          YCjaonK1hLbKyG31kO6ixRjuOl7npi63ukPTkFoqHLM=
Subject key identifier:   FD:F2:35:F2:0C:01:29:98:6C:85:E0:91:0E:BC:BA:CE:AB:82:80:20
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584E6BD699F90A8800E63CD4BF80
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/76d81576-7dc1-3d62-ab0e-1a190d167866.roa
Signing time:             Tue 07 Jul 2026 15:52:24 +0000
ROA not before:           Tue 07 Jul 2026 15:52:24 +0000
ROA not after:            Mon 05 Oct 2026 15:52:24 +0000
asID:                     30036
IP address blocks:        2604:2e86:2c00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6b:d6:99:f9:0a:88:00:e6:3c:d4:bf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jul  7 15:52:24 2026 GMT
            Not After : Oct  5 15:52:24 2026 GMT
        Subject: CN=8af42935-0a34-4ab5-909f-c5b56b31bc0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:fd:2e:09:37:7a:92:b1:b6:71:9a:7f:8c:7e:
                    6a:b7:ea:67:bd:1b:61:32:90:b7:24:80:20:2e:f8:
                    55:e5:56:d0:f4:81:32:91:38:ff:d2:88:2e:c5:72:
                    05:7b:13:c6:e4:e5:3f:c1:0a:6d:b3:fd:6e:7e:5e:
                    a0:6c:a6:88:90:5e:7b:90:bc:5e:5b:a9:b6:c1:cc:
                    cc:49:37:0d:bc:51:41:0e:3a:3c:eb:dd:9a:5e:72:
                    98:31:d5:ab:63:f6:82:0d:91:a4:a5:99:5b:46:77:
                    59:99:bb:9c:b0:45:b9:25:89:44:ae:ab:6f:65:2a:
                    70:8a:a1:4c:97:75:1e:b9:f3:1b:97:55:13:d4:78:
                    22:f1:d1:64:8f:c8:b2:36:aa:7e:aa:99:d3:51:98:
                    77:1a:76:81:d4:53:7f:3d:d4:98:92:1f:cb:7c:68:
                    f2:f9:db:2f:15:27:f3:19:d0:95:0e:42:dd:da:16:
                    22:db:d4:07:25:a9:76:22:e3:ab:c1:c6:b5:b2:a2:
                    79:ee:e7:1c:98:c8:f2:89:df:b7:7f:31:66:a3:56:
                    c5:eb:2b:8c:d2:72:b2:c7:57:e4:7a:5c:40:d8:8d:
                    71:dd:7f:b9:a1:04:65:d7:fa:c4:8d:a4:d3:d9:ab:
                    0a:fd:c0:30:a9:77:b8:b0:9c:49:c7:3f:b9:77:ad:
                    bd:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:F2:35:F2:0C:01:29:98:6C:85:E0:91:0E:BC:BA:CE:AB:82:80:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/76d81576-7dc1-3d62-ab0e-1a190d167866.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e86:2c00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:60:b1:1b:87:b4:da:fa:05:c6:0a:a8:1f:35:60:09:98:3f:
         59:a3:4f:0b:48:e8:5e:63:85:37:73:90:e7:e8:51:cd:05:4c:
         83:81:46:31:e1:3f:1a:fc:a9:f4:d8:d4:8d:32:5a:3d:2d:ae:
         88:0b:d3:e4:ea:dc:2b:70:dd:e4:4a:3f:d0:25:4d:1f:1b:51:
         e1:f4:a3:be:4f:3c:32:a0:02:66:ae:e7:c1:84:42:4d:4e:f5:
         72:29:03:71:82:bc:4a:90:f3:62:9c:5c:54:85:b0:82:bb:04:
         c7:29:37:7c:06:28:74:79:b8:46:e8:73:1c:3c:29:e4:5c:3a:
         84:bc:ee:e3:f7:78:ae:52:c5:45:2a:eb:eb:da:eb:a6:66:c3:
         08:e7:19:90:bc:ff:e7:9e:36:2e:23:e5:a6:7b:dd:25:88:5b:
         87:f0:f7:1e:ed:78:37:db:71:87:95:e9:30:af:9f:87:cd:c0:
         9a:10:7e:20:55:df:c9:7b:20:35:27:27:77:f6:c0:26:e5:ac:
         21:77:87:19:00:64:3c:d3:32:a7:d8:4a:0c:7c:2e:7d:c7:e5:
         c5:f6:85:72:fc:33:af:f8:67:e9:6c:68:6e:bc:e4:b5:54:96:
         13:e9:0e:44:9d:71:b7:a5:5f:c0:78:20:0b:33:8d:6e:17:04:
         89:ee:45:9d
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE5r1pn5CogA5jzUv4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI2MDcwNzE1NTIyNFoXDTI2MTAwNTE1NTIyNFowLzEtMCsGA1UEAxMk
OGFmNDI5MzUtMGEzNC00YWI1LTkwOWYtYzViNTZiMzFiYzBiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjv0uCTd6krG2cZp/jH5qt+pnvRthMpC3JIAg
LvhV5VbQ9IEykTj/0oguxXIFexPG5OU/wQpts/1ufl6gbKaIkF57kLxeW6m2wczM
STcNvFFBDjo8692aXnKYMdWrY/aCDZGkpZlbRndZmbucsEW5JYlErqtvZSpwiqFM
l3UeufMbl1UT1Hgi8dFkj8iyNqp+qpnTUZh3GnaB1FN/PdSYkh/LfGjy+dsvFSfz
GdCVDkLd2hYi29QHJal2IuOrwca1sqJ57uccmMjyid+3fzFmo1bF6yuM0nKyx1fk
elxA2I1x3X+5oQRl1/rEjaTT2asK/cAwqXe4sJxJxz+5d629lwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFP3yNfIMASmYbIXgkQ68us6rgoAgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNzZkODE1NzYtN2RjMS0z
ZDYyLWFiMGUtMWExOTBkMTY3ODY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuhiww
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAa2CxG4e02voFxgqoHzVgCZg/WaNPC0joXmOFN3OQ5+hRzQVMg4FG
MeE/Gvyp9NjUjTJaPS2uiAvT5OrcK3Dd5Eo/0CVNHxtR4fSjvk88MqACZq7nwYRC
TU71cikDcYK8SpDzYpxcVIWwgrsExyk3fAYodHm4RuhzHDwp5Fw6hLzu4/d4rlLF
RSrr69rrpmbDCOcZkLz/5542LiPlpnvdJYhbh/D3Hu14N9txh5XpMK+fh83AmhB+
IFXfyXsgNScnd/bAJuWsIXeHGQBkPNMyp9hKDHwufcflxfaFcvwzr/hn6Wxobrzk
tVSWE+kORJ1xt6VfwHggCzONbhcEie5FnQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 11:27:40 2026 by rpki-client