Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/80039b13-66c7-3f27-abad-23cc33e6e555.roa
File:                     80039b13-66c7-3f27-abad-23cc33e6e555.roa (raw, json)
Hash identifier:          404ak7FpMFEQ60YlN2mQNacCFF+7sCDhxo2pmyfiN2Y=
Subject key identifier:   20:6F:C9:D2:BE:4D:FA:F5:01:1D:BA:AF:E9:D9:3D:A4:57:15:23:27
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584E4C54B219CCCED1E4736AB800
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/80039b13-66c7-3f27-abad-23cc33e6e555.roa
Signing time:             Fri 26 Jun 2026 09:00:12 +0000
ROA not before:           Fri 26 Jun 2026 09:00:12 +0000
ROA not after:            Thu 24 Sep 2026 09:00:12 +0000
asID:                     30036
IP address blocks:        2604:2e8f:6000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4c:54:b2:19:cc:ce:d1:e4:73:6a:b8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jun 26 09:00:12 2026 GMT
            Not After : Sep 24 09:00:12 2026 GMT
        Subject: CN=c43e5d84-0f31-48f2-9c87-072e8cbeaa0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:25:e5:4a:7e:0e:bc:f9:34:c7:db:20:e3:6c:
                    cd:64:c4:3d:14:8e:06:49:45:13:e4:c9:d5:43:1b:
                    5c:c8:87:d4:d8:a3:b5:20:c3:54:d3:31:e0:d6:71:
                    19:8e:80:fa:ea:6b:84:31:c9:1a:46:cf:37:58:c2:
                    22:c6:89:09:a6:73:e9:78:24:2d:de:9c:03:b8:b2:
                    bf:09:02:97:55:2a:13:d7:cc:52:dc:83:ce:5e:c1:
                    4a:cf:fe:e8:f8:ed:3c:c6:03:66:00:4f:b0:4c:67:
                    0f:80:62:da:09:19:e3:fc:54:03:21:90:4d:f8:ae:
                    2c:77:27:45:eb:b8:59:b3:35:bf:db:9a:df:3b:99:
                    96:1d:35:cd:dc:77:81:11:e5:d0:5f:14:23:ca:80:
                    37:76:1a:b7:f7:e7:73:b3:db:ea:4d:65:ca:b6:d4:
                    3b:d8:b3:f7:64:4e:c0:ed:a2:c1:85:a1:e1:c9:2f:
                    8d:b1:f8:58:66:83:1b:a4:dc:0e:7d:fb:ce:46:06:
                    52:bf:41:d2:c8:f6:e9:2c:05:55:da:97:91:cb:ec:
                    0f:08:7a:06:73:e6:9e:c8:90:ce:3a:cb:8a:75:2d:
                    4e:d0:f5:6f:61:bf:c4:a0:0b:41:85:2a:af:6d:be:
                    c9:e4:7c:85:53:6f:3b:e3:b4:dd:73:67:ec:88:e5:
                    4e:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:6F:C9:D2:BE:4D:FA:F5:01:1D:BA:AF:E9:D9:3D:A4:57:15:23:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/80039b13-66c7-3f27-abad-23cc33e6e555.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8f:6000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:f8:67:cf:25:e5:95:df:e3:de:35:22:1b:75:0e:4b:c2:a4:
         99:cc:c4:54:cb:8c:f3:2a:ee:bf:af:34:13:7c:a6:fd:dc:a9:
         30:58:98:80:14:85:27:d5:5b:7d:5d:71:81:0a:57:8e:b4:2e:
         7f:34:ac:da:74:24:c4:78:4c:87:9c:68:42:60:e3:0f:2f:28:
         0a:aa:59:07:36:54:8a:87:55:3f:f4:fe:ea:f5:1d:03:20:97:
         6b:d6:b7:06:b0:08:c1:bd:b2:2b:f3:09:c5:c7:ff:51:59:ec:
         65:12:a5:10:ba:ee:f4:a8:de:ad:3d:0b:7a:81:c5:b2:90:20:
         72:30:c5:8c:a6:d1:55:5c:2d:b0:1b:68:01:91:59:f1:98:06:
         5c:30:b4:63:ba:0d:4f:ae:74:d3:b7:bd:91:93:9c:6c:51:94:
         e2:af:c2:f2:b4:ca:21:e5:88:35:f1:be:c8:85:e8:f7:b9:99:
         7d:fd:7b:ee:7d:b1:c6:e9:30:4a:fe:25:13:3c:ae:a7:68:a4:
         21:35:96:34:1a:93:2d:d2:24:5d:2f:64:07:88:6a:64:5f:0b:
         9a:9a:b6:61:32:d5:e7:8c:b6:ae:b7:85:fa:cf:21:d3:8c:e4:
         46:2a:ed:4c:2a:2c:4c:86:ff:15:37:eb:08:3a:f0:f8:a3:3e:
         b1:f2:40:c9
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE5MVLIZzM7R5HNquAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI2MDYyNjA5MDAxMloXDTI2MDkyNDA5MDAxMlowLzEtMCsGA1UEAxMk
YzQzZTVkODQtMGYzMS00OGYyLTljODctMDcyZThjYmVhYTBhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlyXlSn4OvPk0x9sg42zNZMQ9FI4GSUUT5MnV
QxtcyIfU2KO1IMNU0zHg1nEZjoD66muEMckaRs83WMIixokJpnPpeCQt3pwDuLK/
CQKXVSoT18xS3IPOXsFKz/7o+O08xgNmAE+wTGcPgGLaCRnj/FQDIZBN+K4sdydF
67hZszW/25rfO5mWHTXN3HeBEeXQXxQjyoA3dhq39+dzs9vqTWXKttQ72LP3ZE7A
7aLBhaHhyS+NsfhYZoMbpNwOffvORgZSv0HSyPbpLAVV2peRy+wPCHoGc+aeyJDO
OsuKdS1O0PVvYb/EoAtBhSqvbb7J5HyFU28747Tdc2fsiOVOiQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFCBvydK+Tfr1AR26r+nZPaRXFSMnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvODAwMzliMTMtNjZjNy0z
ZjI3LWFiYWQtMjNjYzMzZTZlNTU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuj2Aw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAgfhnzyXlld/j3jUiG3UOS8KkmczEVMuM8yruv680E3ym/dypMFiY
gBSFJ9VbfV1xgQpXjrQufzSs2nQkxHhMh5xoQmDjDy8oCqpZBzZUiodVP/T+6vUd
AyCXa9a3BrAIwb2yK/MJxcf/UVnsZRKlELru9KjerT0LeoHFspAgcjDFjKbRVVwt
sBtoAZFZ8ZgGXDC0Y7oNT65007e9kZOcbFGU4q/C8rTKIeWINfG+yIXo97mZff17
7n2xxukwSv4lEzyup2ikITWWNBqTLdIkXS9kB4hqZF8Lmpq2YTLV54y2rreF+s8h
04zkRirtTCosTIb/FTfrCDrw+KM+sfJAyQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 14:06:38 2026 by rpki-client