Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/94a5fa59-bf98-3f40-b032-77e4c112fa41.roa
File:                     94a5fa59-bf98-3f40-b032-77e4c112fa41.roa (raw, json)
Hash identifier:          ZxK/dDrx97rpVPZ2KIEHkRdrGT05W6Ok+ySm066iz8U=
Subject key identifier:   5B:3D:CA:10:29:C6:78:C3:17:76:AB:48:65:42:E1:BF:24:09:28:41
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584D24DF927A7F6E9FBB5C618320
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/94a5fa59-bf98-3f40-b032-77e4c112fa41.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     30036
IP address blocks:        2604:2e8e:dc00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:df:92:7a:7f:6e:9f:bb:5c:61:83:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=0371e2b8-2064-4e36-afdd-556ddb749d20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:15:4a:37:eb:86:4c:32:0a:90:ab:48:6c:6d:
                    cc:3a:cb:4d:f7:0e:07:37:e2:23:0c:26:e1:1a:2b:
                    05:de:55:cc:4c:f6:d3:2c:51:9f:83:c9:3d:d0:6c:
                    e5:2b:65:cc:89:87:20:e1:3c:f1:d7:84:e1:bd:38:
                    18:fe:46:65:4a:ba:8a:56:ad:7d:c6:05:50:b2:df:
                    1b:19:8b:c5:74:e3:f7:93:53:2e:2a:ae:bb:dd:f7:
                    6c:1c:55:76:44:f9:28:55:e7:86:bb:ec:8d:1c:77:
                    b7:7c:02:26:8f:d4:3e:53:9c:29:85:c5:39:e0:1f:
                    f1:a5:3d:4a:91:d4:80:a9:d4:28:9a:ea:be:3f:89:
                    da:9d:2e:4c:16:5b:2d:78:ad:d8:59:e5:d2:46:87:
                    37:ad:ca:75:38:b3:f9:b2:61:47:ed:13:f7:c2:75:
                    b4:31:be:9a:26:12:2b:75:c5:43:15:99:71:77:e1:
                    39:ca:ce:69:dd:59:f9:7a:4a:c2:85:53:67:04:ad:
                    df:85:36:f7:dc:10:8f:e1:ad:9a:3a:3b:b7:8c:5f:
                    7e:ef:70:bb:6e:2d:9c:7b:46:5c:dd:36:10:3a:71:
                    69:46:81:2f:61:37:51:d4:76:df:f1:9c:c3:d5:3b:
                    76:0b:ba:e1:1d:11:b4:ef:e3:e9:b3:51:9f:64:c3:
                    9b:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:3D:CA:10:29:C6:78:C3:17:76:AB:48:65:42:E1:BF:24:09:28:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/94a5fa59-bf98-3f40-b032-77e4c112fa41.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8e:dc00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:14:4c:47:05:7b:eb:d3:2b:d3:ea:b2:1a:c6:2c:7b:8d:ae:
         ab:a5:f4:c5:2c:33:ab:72:64:29:6e:d7:dc:e9:24:58:90:da:
         c7:20:62:00:d7:2c:c6:cb:cd:92:56:12:8f:1d:79:32:b6:21:
         cd:af:22:e6:96:cf:0b:8a:eb:8d:48:22:60:e4:76:1a:dc:a7:
         7e:5a:d7:1c:b0:c9:45:4c:6f:dc:8c:80:2d:04:67:e0:9d:2d:
         6e:c7:b9:82:3d:e4:77:f0:93:f9:80:8a:7e:3a:dd:07:84:4b:
         1b:d7:a6:63:3f:b0:a6:7f:7f:ea:ab:17:cc:fb:c6:4e:27:fa:
         55:f2:3f:c1:26:78:7e:57:d5:fb:34:d8:5a:8b:d7:80:2c:9f:
         5a:81:05:6e:f4:79:fe:29:64:a6:e4:96:0b:a0:35:d2:f8:52:
         50:cf:84:c1:d1:59:1e:ed:5f:f0:a5:75:7d:67:24:e2:4e:b6:
         e7:8d:a0:86:25:ed:ae:37:2c:bb:d7:1c:8c:20:39:74:73:a4:
         dd:98:7d:f5:c8:6c:d4:ed:67:40:dd:4c:43:dc:b6:9e:8b:32:
         fe:0e:39:a7:01:ae:0b:38:29:a9:8e:49:70:77:18:34:74:ca:
         b6:5d:58:4d:f1:18:ae:a6:37:6f:b0:c8:8c:f8:cb:51:88:d6:
         d8:7e:07:1d
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE0k35J6f26fu1xhgyAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk
MDM3MWUyYjgtMjA2NC00ZTM2LWFmZGQtNTU2ZGRiNzQ5ZDIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhxVKN+uGTDIKkKtIbG3MOstN9w4HN+IjDCbh
GisF3lXMTPbTLFGfg8k90GzlK2XMiYcg4Tzx14ThvTgY/kZlSrqKVq19xgVQst8b
GYvFdOP3k1MuKq673fdsHFV2RPkoVeeGu+yNHHe3fAImj9Q+U5wphcU54B/xpT1K
kdSAqdQomuq+P4nanS5MFlsteK3YWeXSRoc3rcp1OLP5smFH7RP3wnW0Mb6aJhIr
dcVDFZlxd+E5ys5p3Vn5ekrChVNnBK3fhTb33BCP4a2aOju3jF9+73C7bi2ce0Zc
3TYQOnFpRoEvYTdR1Hbf8ZzD1Tt2C7rhHRG07+Pps1GfZMObJwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFFs9yhApxnjDF3arSGVC4b8kCShBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvOTRhNWZhNTktYmY5OC0z
ZjQwLWIwMzItNzdlNGMxMTJmYTQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujtww
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAPRRMRwV769Mr0+qyGsYse42uq6X0xSwzq3JkKW7X3OkkWJDaxyBi
ANcsxsvNklYSjx15MrYhza8i5pbPC4rrjUgiYOR2GtynflrXHLDJRUxv3IyALQRn
4J0tbse5gj3kd/CT+YCKfjrdB4RLG9emYz+wpn9/6qsXzPvGTif6VfI/wSZ4flfV
+zTYWovXgCyfWoEFbvR5/ilkpuSWC6A10vhSUM+EwdFZHu1f8KV1fWck4k62542g
hiXtrjcsu9ccjCA5dHOk3Zh99chs1O1nQN1MQ9y2nosy/g45pwGuCzgpqY5JcHcY
NHTKtl1YTfEYrqY3b7DIjPjLUYjW2H4HHQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:29:00 2026 by rpki-client