Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/e99b72b6-459e-354d-a2d8-cf63ccd6dafa.roa
File:                     e99b72b6-459e-354d-a2d8-cf63ccd6dafa.roa (raw, json)
Hash identifier:          Ed6cS5a2fvtqScu1c92pmM4ZgVOYjDZ1ydlm6yhPqrE=
Subject key identifier:   A3:BC:72:EC:22:99:E6:7C:19:70:9C:59:7B:5D:DF:D3:7D:BF:BB:4D
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584E7D2F7CB356022860C531DC80
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/e99b72b6-459e-354d-a2d8-cf63ccd6dafa.roa
Signing time:             Mon 13 Jul 2026 21:00:12 +0000
ROA not before:           Mon 13 Jul 2026 21:00:12 +0000
ROA not after:            Sun 11 Oct 2026 21:00:12 +0000
asID:                     30036
IP address blocks:        2604:2e8f:cc00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7d:2f:7c:b3:56:02:28:60:c5:31:dc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jul 13 21:00:12 2026 GMT
            Not After : Oct 11 21:00:12 2026 GMT
        Subject: CN=0d1b8ac1-15b8-4acc-8cd5-b6caf43226bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c6:ba:e5:31:1a:55:f5:4c:e6:13:88:45:24:
                    53:73:5e:4a:1b:7c:9b:95:d4:f2:b8:14:c4:af:90:
                    a6:4b:41:1f:52:d9:4a:93:f9:69:6b:43:53:3f:b2:
                    e9:84:ee:92:65:a1:d8:00:6c:ac:5e:9c:ad:62:15:
                    72:ed:d4:98:63:74:0c:d0:53:97:ca:9a:fc:02:f1:
                    32:56:58:fe:57:4b:ab:02:dd:24:1c:a4:75:29:f0:
                    d6:ff:9f:a7:b3:bc:62:82:02:14:c4:5f:17:2c:25:
                    47:a5:49:91:aa:44:d8:5d:4c:f8:75:5d:6a:77:8b:
                    25:d1:ef:86:0e:f1:01:e1:39:1a:68:32:84:30:41:
                    94:ac:26:4f:53:d1:79:ec:d2:19:9e:fb:33:3c:d7:
                    eb:79:a7:a1:f7:7b:ab:f0:d3:56:33:85:89:e1:a6:
                    c9:f6:c2:36:d5:07:9c:e6:18:9f:5a:f1:a9:de:87:
                    48:3d:b4:29:38:1c:94:13:48:d6:9d:06:83:61:30:
                    9b:d4:8a:bc:92:6e:47:12:95:71:dc:a0:f2:3e:7f:
                    88:88:9f:22:ed:9e:e4:4a:f5:fe:31:24:3a:bb:44:
                    21:79:d8:26:85:37:96:df:cf:12:dd:6d:75:e8:45:
                    ec:a1:df:57:18:6b:c8:15:36:72:ca:8b:c8:ff:e4:
                    7d:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:BC:72:EC:22:99:E6:7C:19:70:9C:59:7B:5D:DF:D3:7D:BF:BB:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/e99b72b6-459e-354d-a2d8-cf63ccd6dafa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8f:cc00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:6a:97:b3:27:62:e9:44:1d:29:7b:0e:b1:6d:2b:6f:7d:9b:
         07:8e:5f:dd:aa:bf:82:9c:e4:94:08:5f:53:8c:9b:4f:39:64:
         4e:8b:c1:b6:49:b4:f9:d7:7e:39:42:3d:2c:ef:6d:56:84:f3:
         31:1f:90:7c:03:a0:f4:d0:ef:18:fb:8d:5d:d7:ae:f9:de:ec:
         ab:58:8a:aa:42:20:63:ae:98:72:41:5a:30:7e:7c:50:f5:2a:
         8a:9b:01:3e:72:3a:62:bc:28:76:f2:d8:54:cc:e3:7a:b5:e2:
         c0:b9:7e:62:44:14:7e:78:14:e4:e1:3f:ca:c1:8e:7f:dc:db:
         a4:a4:b0:e7:e0:e2:57:b2:94:b4:fd:26:b4:2c:b2:5e:3c:1f:
         ad:41:8a:b2:e2:73:e8:d9:77:e4:82:ea:9e:3d:93:b1:85:ab:
         7b:94:8b:29:85:27:14:63:67:85:63:08:83:82:c4:61:3d:e5:
         2c:34:9f:c0:a3:5e:48:1e:75:99:10:fe:ba:37:6b:7b:c7:56:
         d0:e5:df:0b:b6:70:3f:85:6d:1c:90:56:c7:ed:78:04:34:ef:
         2e:ab:91:db:a1:3b:b1:b1:cf:12:4a:f0:f1:8c:cd:d8:79:b1:
         e3:71:72:c7:ee:de:e3:22:cd:b1:67:4a:71:d3:7d:c4:7b:c2:
         7f:6f:fb:96
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE59L3yzVgIoYMUx3IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI2MDcxMzIxMDAxMloXDTI2MTAxMTIxMDAxMlowLzEtMCsGA1UEAxMk
MGQxYjhhYzEtMTViOC00YWNjLThjZDUtYjZjYWY0MzIyNmJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosa65TEaVfVM5hOIRSRTc15KG3ybldTyuBTE
r5CmS0EfUtlKk/lpa0NTP7LphO6SZaHYAGysXpytYhVy7dSYY3QM0FOXypr8AvEy
Vlj+V0urAt0kHKR1KfDW/5+ns7xiggIUxF8XLCVHpUmRqkTYXUz4dV1qd4sl0e+G
DvEB4TkaaDKEMEGUrCZPU9F57NIZnvszPNfreaeh93ur8NNWM4WJ4abJ9sI21Qec
5hifWvGp3odIPbQpOByUE0jWnQaDYTCb1Iq8km5HEpVx3KDyPn+IiJ8i7Z7kSvX+
MSQ6u0QhedgmhTeW388S3W116EXsod9XGGvIFTZyyovI/+R9zwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFKO8cuwimeZ8GXCcWXtd39N9v7tNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvZTk5YjcyYjYtNDU5ZS0z
NTRkLWEyZDgtY2Y2M2NjZDZkYWZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuj8ww
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAjWqXsydi6UQdKXsOsW0rb32bB45f3aq/gpzklAhfU4ybTzlkTovB
tkm0+dd+OUI9LO9tVoTzMR+QfAOg9NDvGPuNXdeu+d7sq1iKqkIgY66YckFaMH58
UPUqipsBPnI6YrwodvLYVMzjerXiwLl+YkQUfngU5OE/ysGOf9zbpKSw5+DiV7KU
tP0mtCyyXjwfrUGKsuJz6Nl35ILqnj2TsYWre5SLKYUnFGNnhWMIg4LEYT3lLDSf
wKNeSB51mRD+ujdre8dW0OXfC7ZwP4VtHJBWx+14BDTvLquR26E7sbHPEkrw8YzN
2Hmx43Fyx+7e4yLNsWdKcdN9xHvCf2/7lg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 07:46:40 2026 by rpki-client