Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/e49fa3d1-af37-313a-a929-f6fc07cde917.roa
File:                     e49fa3d1-af37-313a-a929-f6fc07cde917.roa (raw, json)
Hash identifier:          YAWeJyHdOfKrP4C4x7SW5o1gWY0nEyIJfp9H0eVQyoI=
Subject key identifier:   34:7D:71:67:8A:DC:91:48:9E:FC:3E:BD:71:35:7D:64:22:23:69:07
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584F3E47FFEC865D22F02AAB6A00
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/e49fa3d1-af37-313a-a929-f6fc07cde917.roa
Signing time:             Mon 21 Sep 2026 01:00:11 +0000
ROA not before:           Mon 21 Sep 2026 01:00:11 +0000
ROA not after:            Sun 20 Dec 2026 02:00:11 +0000
asID:                     30036
IP address blocks:        2604:2e89:6c00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3e:47:ff:ec:86:5d:22:f0:2a:ab:6a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Sep 21 01:00:11 2026 GMT
            Not After : Dec 20 02:00:11 2026 GMT
        Subject: CN=49a7c1d1-f6ff-4ebc-b936-5e40a24cdf9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:1c:01:76:64:55:76:22:d0:88:85:c4:d9:17:
                    4d:47:5f:63:59:8f:0f:14:17:22:d8:24:5e:30:74:
                    0b:ee:ea:33:1d:a8:81:29:32:63:ab:ff:f0:a5:79:
                    87:90:24:8e:63:df:61:01:b6:73:28:b1:de:aa:95:
                    0f:52:69:1e:0b:fb:7d:ef:56:58:0b:ea:73:22:8d:
                    16:d2:66:06:d7:b5:cc:31:ab:cd:c0:45:06:02:17:
                    0a:25:3d:7d:57:f7:ee:c2:76:de:98:a2:45:ec:22:
                    2a:18:69:b7:c2:f5:dd:60:3f:ed:e9:d7:46:0d:8e:
                    6e:82:b7:bc:19:06:5f:06:f6:3f:c1:bc:f2:37:b9:
                    f9:2e:16:af:8c:37:e6:a1:f9:fd:82:03:68:cc:81:
                    af:43:7b:b4:60:2a:5a:29:06:a5:08:4c:f6:60:d3:
                    0c:17:2d:a1:81:89:fd:63:63:63:ac:03:20:93:41:
                    1f:1a:27:d2:6b:65:21:8a:e9:c0:93:20:71:3d:55:
                    f8:7c:a3:d2:0a:31:18:79:6e:25:12:c7:58:3d:4f:
                    45:67:3a:8b:33:b6:63:15:f8:1c:42:b0:17:30:17:
                    3b:85:3e:da:10:a0:6c:43:7f:81:c0:6c:e5:61:e1:
                    24:70:c2:cd:0a:39:c7:5c:fb:22:24:5a:4a:e6:a2:
                    28:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:7D:71:67:8A:DC:91:48:9E:FC:3E:BD:71:35:7D:64:22:23:69:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/e49fa3d1-af37-313a-a929-f6fc07cde917.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e89:6c00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:b4:7d:86:7e:46:ad:7e:c5:8e:26:40:2c:4b:57:67:33:72:
         56:cf:d7:27:bc:3a:31:3b:7d:63:df:a5:a6:33:ff:4c:a2:1b:
         d8:70:09:7a:f3:6a:13:98:d1:6b:27:ec:26:cf:42:9a:02:79:
         8b:3c:53:e2:a1:d7:1d:c6:a6:a1:aa:d3:5f:dd:33:3a:8e:19:
         d1:08:3a:9a:cc:f5:ee:82:68:ea:b3:49:c5:39:8d:b4:3c:6d:
         98:65:0d:af:37:f2:3d:d1:c3:fa:a2:2c:03:32:3c:25:c1:e8:
         c0:7a:ba:1e:86:37:27:30:08:c2:f1:5a:2b:07:1e:f0:52:f0:
         e3:94:61:7c:af:5a:48:6d:c7:7c:8d:6f:aa:3f:5a:7a:e0:91:
         75:af:48:d1:73:4a:2b:35:61:fb:72:d1:fd:38:3b:30:b2:db:
         fb:6b:8d:c8:24:f2:c9:c2:3b:35:b1:19:75:50:62:f2:63:28:
         32:5f:dc:74:03:d4:d5:2e:e7:33:36:cb:c9:64:bf:94:70:76:
         e2:9a:2e:0e:6d:fe:b9:9f:4e:41:98:a0:7e:6a:55:d2:8d:a8:
         fd:41:a3:e8:55:db:74:98:af:57:b7:e6:e2:cf:a9:8a:c1:8e:
         cb:6a:b3:69:a7:23:d8:8b:8a:87:4e:c2:9b:88:e5:51:82:8b:
         c2:c7:7e:be
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE8+R//shl0i8CqragAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI2MDkyMTAxMDAxMVoXDTI2MTIyMDAyMDAxMVowLzEtMCsGA1UEAxMk
NDlhN2MxZDEtZjZmZi00ZWJjLWI5MzYtNWU0MGEyNGNkZjljMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxwBdmRVdiLQiIXE2RdNR19jWY8PFBci2CRe
MHQL7uozHaiBKTJjq//wpXmHkCSOY99hAbZzKLHeqpUPUmkeC/t971ZYC+pzIo0W
0mYG17XMMavNwEUGAhcKJT19V/fuwnbemKJF7CIqGGm3wvXdYD/t6ddGDY5ugre8
GQZfBvY/wbzyN7n5LhavjDfmofn9ggNozIGvQ3u0YCpaKQalCEz2YNMMFy2hgYn9
Y2NjrAMgk0EfGifSa2UhiunAkyBxPVX4fKPSCjEYeW4lEsdYPU9FZzqLM7ZjFfgc
QrAXMBc7hT7aEKBsQ3+BwGzlYeEkcMLNCjnHXPsiJFpK5qIotwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFDR9cWeK3JFInvw+vXE1fWQiI2kHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvZTQ5ZmEzZDEtYWYzNy0z
MTNhLWE5MjktZjZmYzA3Y2RlOTE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiWww
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAUbR9hn5GrX7FjiZALEtXZzNyVs/XJ7w6MTt9Y9+lpjP/TKIb2HAJ
evNqE5jRayfsJs9CmgJ5izxT4qHXHcamoarTX90zOo4Z0Qg6msz17oJo6rNJxTmN
tDxtmGUNrzfyPdHD+qIsAzI8JcHowHq6HoY3JzAIwvFaKwce8FLw45RhfK9aSG3H
fI1vqj9aeuCRda9I0XNKKzVh+3LR/Tg7MLLb+2uNyCTyycI7NbEZdVBi8mMoMl/c
dAPU1S7nMzbLyWS/lHB24pouDm3+uZ9OQZigfmpV0o2o/UGj6FXbdJivV7fm4s+p
isGOy2qzaacj2IuKh07Cm4jlUYKLwsd+vg==
-----END CERTIFICATE-----
Generated at Tue Oct 6 14:17:49 2026 by rpki-client