Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a41da2d8-6d56-3524-b868-acd5274597fb.roa
File:                     a41da2d8-6d56-3524-b868-acd5274597fb.roa (raw, json)
Hash identifier:          L7OzfrI8NHExnNoEThMX0jPbfAGrKBqRxf8BAqoFDBg=
Subject key identifier:   F2:EE:04:A9:B7:C6:5C:6D:3F:A3:A2:36:9B:BB:D7:8E:64:64:56:79
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584AD3A0FA7CF288C1D1E77D2100
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a41da2d8-6d56-3524-b868-acd5274597fb.roa
Signing time:             Tue 12 Aug 2025 01:00:32 +0000
ROA not before:           Tue 12 Aug 2025 01:00:32 +0000
ROA not after:            Mon 10 Nov 2025 02:00:32 +0000
asID:                     30036
IP address blocks:        2604:2e80::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d3:a0:fa:7c:f2:88:c1:d1:e7:7d:21:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Aug 12 01:00:32 2025 GMT
            Not After : Nov 10 02:00:32 2025 GMT
        Subject: CN=dfd1df30-8d44-47af-9e6a-8f7d1de98e58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:10:fc:7f:d2:2c:5f:1d:c4:c3:37:fa:25:3f:
                    37:15:fa:d3:b2:59:29:3f:e2:70:23:d1:cb:f9:e0:
                    2b:8e:48:af:07:87:dd:24:a8:32:e4:41:e8:d8:03:
                    49:12:da:66:c7:a5:24:79:ad:17:71:d4:6f:cf:2e:
                    a1:03:86:f0:d0:92:c5:9e:c7:2a:13:ec:74:2e:25:
                    1c:5b:ec:95:65:b3:33:0a:93:0c:20:f2:71:4c:40:
                    74:5a:cc:d3:1b:55:92:b3:eb:68:ca:c4:69:a6:4d:
                    f5:2e:38:c7:8e:84:15:d8:75:f0:17:0b:05:65:80:
                    11:68:64:3a:bd:68:9e:07:18:c3:f5:8a:ea:c4:6c:
                    34:78:c0:db:52:28:e8:b1:d4:08:7a:40:6c:f8:6f:
                    77:30:f1:99:81:fa:95:39:33:b0:0c:2d:7a:31:b5:
                    5d:34:7d:ac:e3:0f:fb:a3:56:b3:4c:7e:33:6e:64:
                    0d:10:0d:f7:2e:ae:fc:61:6f:08:61:d2:ae:a6:20:
                    f0:f8:74:52:51:6a:aa:95:20:0d:6e:63:48:c8:a3:
                    ad:26:8e:f0:00:51:27:09:44:ab:d3:dd:6d:b9:24:
                    5e:aa:75:af:9a:69:7f:99:af:3a:6c:46:82:09:5f:
                    2c:26:a4:9a:2c:4d:92:a6:41:c3:0c:ff:36:99:f1:
                    bf:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:EE:04:A9:B7:C6:5C:6D:3F:A3:A2:36:9B:BB:D7:8E:64:64:56:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a41da2d8-6d56-3524-b868-acd5274597fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e80::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:e1:5c:d9:65:68:45:ef:76:79:38:55:e7:a8:a8:e5:82:6e:
         5c:98:ad:f0:26:56:31:70:43:21:a5:f4:e1:0c:1a:8a:5c:98:
         fe:ec:db:de:bb:18:68:26:f7:00:47:15:df:df:a8:bf:6e:73:
         a9:7d:39:0d:5b:96:a1:91:53:50:e7:71:a7:17:bd:ba:8f:30:
         0b:e6:30:be:ef:e2:a9:3a:3b:25:63:50:58:25:12:5d:a5:65:
         11:9f:33:8e:04:c8:ec:af:f7:9d:2f:fc:fd:14:8c:02:5a:dc:
         25:69:4b:5b:5c:67:22:68:57:20:0b:b0:7a:17:59:19:0c:95:
         43:94:1c:fb:16:a9:0f:e6:e7:c2:ad:33:a7:8a:03:15:06:a0:
         b3:ae:a5:69:a2:01:25:68:11:00:96:7e:0d:dd:60:f8:6b:9b:
         ed:e4:60:78:f5:74:22:e7:bc:d3:26:b4:43:6c:36:94:7e:1e:
         ed:5e:c6:23:72:f0:4f:85:64:14:da:11:06:c4:45:2d:8d:71:
         63:3e:42:c7:bc:ba:f9:6b:8c:bc:ef:27:37:0f:7b:64:b2:8c:
         9e:54:e4:76:5b:00:c2:e4:10:61:25:3a:50:66:fa:a0:22:ec:
         b8:aa:6b:f5:52:08:a5:b0:6a:21:14:a1:51:43:62:60:6e:8b:
         6b:f8:9c:80
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWErToPp88ojB0ed9IQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI1MDgxMjAxMDAzMloXDTI1MTExMDAyMDAzMlowLzEtMCsGA1UEAxMk
ZGZkMWRmMzAtOGQ0NC00N2FmLTllNmEtOGY3ZDFkZTk4ZTU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRD8f9IsXx3Ewzf6JT83FfrTslkpP+JwI9HL
+eArjkivB4fdJKgy5EHo2ANJEtpmx6Ukea0XcdRvzy6hA4bw0JLFnscqE+x0LiUc
W+yVZbMzCpMMIPJxTEB0WszTG1WSs+toysRppk31LjjHjoQV2HXwFwsFZYARaGQ6
vWieBxjD9YrqxGw0eMDbUijosdQIekBs+G93MPGZgfqVOTOwDC16MbVdNH2s4w/7
o1azTH4zbmQNEA33Lq78YW8IYdKupiDw+HRSUWqqlSANbmNIyKOtJo7wAFEnCUSr
091tuSReqnWvmml/ma86bEaCCV8sJqSaLE2SpkHDDP82mfG/BwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFPLuBKm3xlxtP6OiNpu7145kZFZ5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYTQxZGEyZDgtNmQ1Ni0z
NTI0LWI4NjgtYWNkNTI3NDU5N2ZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQugAAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAG+Fc2WVoRe92eThV56io5YJuXJit8CZWMXBDIaX04QwailyY/uzb
3rsYaCb3AEcV39+ov25zqX05DVuWoZFTUOdxpxe9uo8wC+Ywvu/iqTo7JWNQWCUS
XaVlEZ8zjgTI7K/3nS/8/RSMAlrcJWlLW1xnImhXIAuwehdZGQyVQ5Qc+xapD+bn
wq0zp4oDFQags66laaIBJWgRAJZ+Dd1g+Gub7eRgePV0Iue80ya0Q2w2lH4e7V7G
I3LwT4VkFNoRBsRFLY1xYz5Cx7y6+WuMvO8nNw97ZLKMnlTkdlsAwuQQYSU6UGb6
oCLsuKpr9VIIpbBqIRShUUNiYG6La/icgA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 20:18:18 2025 by rpki-client