Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3f88044c-bc13-3f40-b905-859045681d0b.roa
File:                     3f88044c-bc13-3f40-b905-859045681d0b.roa (raw, json)
Hash identifier:          SL18KR5NaEBEJHWG0+rUSSZA0aY4uN7aMuwCDvct7iE=
Subject key identifier:   8D:1A:F6:69:39:B4:0D:1F:08:4E:58:75:59:42:6A:1C:E3:7E:36:41
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584E59506652FF784E8326D2B2D0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3f88044c-bc13-3f40-b905-859045681d0b.roa
Signing time:             Wed 01 Jul 2026 00:37:27 +0000
ROA not before:           Wed 01 Jul 2026 00:37:27 +0000
ROA not after:            Tue 29 Sep 2026 00:37:27 +0000
asID:                     19905
IP address blocks:        2604:2e86:2000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:59:50:66:52:ff:78:4e:83:26:d2:b2:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jul  1 00:37:27 2026 GMT
            Not After : Sep 29 00:37:27 2026 GMT
        Subject: CN=3a978538-a0b7-4523-966b-a9f050c7df67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:8f:92:97:7c:2b:aa:4c:73:32:a2:9d:8a:55:
                    18:c3:23:e0:46:bd:d5:79:cb:2c:34:02:6f:a1:10:
                    c9:44:6b:63:52:74:17:a7:24:a1:1e:0b:8a:54:48:
                    69:7b:96:8c:2f:e3:9b:5a:81:83:68:68:80:54:30:
                    f0:66:80:f6:69:17:04:f6:7d:17:f2:f3:1b:68:0a:
                    e5:b5:f3:92:65:9a:17:c3:ac:52:76:6a:d3:6b:f2:
                    b5:67:3e:34:d3:f1:08:85:53:69:75:9f:b6:d8:e3:
                    e9:d3:05:13:04:1c:3d:dc:9a:6c:75:55:f3:99:98:
                    81:ac:50:92:67:44:12:d5:93:6f:91:b3:6a:23:80:
                    ad:13:98:47:79:e6:fc:59:19:0a:9a:1b:fc:92:bc:
                    c9:f2:17:18:bb:ee:93:30:52:21:29:71:05:b7:a6:
                    84:d2:ce:f8:e3:3b:1d:32:50:ca:a9:74:6c:f2:9c:
                    a0:47:ad:24:17:b0:94:c3:64:94:33:61:b2:01:cf:
                    d9:29:59:6c:22:5b:d7:92:64:58:20:aa:80:2b:a5:
                    fe:3c:b1:e1:9c:1e:f7:aa:d8:c6:23:ac:7d:ae:59:
                    b6:f9:fe:55:a2:18:8c:d3:c8:40:59:ab:d3:e1:b1:
                    e1:3d:03:7f:08:86:a3:c8:ad:5e:71:b8:d6:3b:c2:
                    39:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:1A:F6:69:39:B4:0D:1F:08:4E:58:75:59:42:6A:1C:E3:7E:36:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3f88044c-bc13-3f40-b905-859045681d0b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e86:2000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:93:bd:d4:6e:a7:32:00:ef:9f:91:f0:35:70:67:bc:fd:9a:
         b9:20:4f:5d:d5:ce:af:15:af:74:d1:5d:aa:c6:d2:d8:de:0d:
         0c:0e:c2:9d:2e:03:b7:e9:a9:a4:59:42:9d:d5:75:32:46:80:
         30:86:16:36:46:c6:b9:74:c4:2f:0b:31:bb:b7:95:af:30:22:
         2d:14:57:21:2d:15:03:c4:77:20:a2:62:8a:e5:73:ed:93:7c:
         1d:f0:89:3c:81:56:38:d4:29:55:aa:85:00:0b:32:33:24:e7:
         56:8e:e4:95:a7:5a:cb:71:36:18:92:d5:44:1d:8a:18:ff:fc:
         2d:77:41:03:5d:38:50:94:e0:dd:f5:cd:03:68:8e:21:20:05:
         35:51:ca:dc:49:40:7a:a2:38:6c:b8:1f:d0:c6:15:ba:b7:05:
         8c:c8:dc:8e:2b:a5:a9:4f:da:6b:c8:76:17:39:9a:1b:32:c6:
         24:bb:e7:bf:f4:a7:27:9e:82:52:1c:32:69:04:e8:c8:2e:f2:
         84:1a:01:70:18:e2:81:5e:ea:55:e6:2d:42:ad:f3:f9:ed:96:
         48:62:a7:77:98:b7:a5:27:fe:18:3d:ff:08:87:7e:b7:5b:c8:
         9c:ac:46:e0:c2:80:d0:2d:f2:a5:48:c4:75:10:15:bb:91:18:
         9f:c9:02:94
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE5ZUGZS/3hOgybSstAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI2MDcwMTAwMzcyN1oXDTI2MDkyOTAwMzcyN1owLzEtMCsGA1UEAxMk
M2E5Nzg1MzgtYTBiNy00NTIzLTk2NmItYTlmMDUwYzdkZjY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmo+Sl3wrqkxzMqKdilUYwyPgRr3VecssNAJv
oRDJRGtjUnQXpyShHguKVEhpe5aML+ObWoGDaGiAVDDwZoD2aRcE9n0X8vMbaArl
tfOSZZoXw6xSdmrTa/K1Zz400/EIhVNpdZ+22OPp0wUTBBw93JpsdVXzmZiBrFCS
Z0QS1ZNvkbNqI4CtE5hHeeb8WRkKmhv8krzJ8hcYu+6TMFIhKXEFt6aE0s744zsd
MlDKqXRs8pygR60kF7CUw2SUM2GyAc/ZKVlsIlvXkmRYIKqAK6X+PLHhnB73qtjG
I6x9rlm2+f5VohiM08hAWavT4bHhPQN/CIajyK1ecbjWO8I5CwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFI0a9mk5tA0fCE5YdVlCahzjfjZBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvM2Y4ODA0NGMtYmMxMy0z
ZjQwLWI5MDUtODU5MDQ1NjgxZDBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuhiAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAK5O91G6nMgDvn5HwNXBnvP2auSBPXdXOrxWvdNFdqsbS2N4NDA7C
nS4Dt+mppFlCndV1MkaAMIYWNkbGuXTELwsxu7eVrzAiLRRXIS0VA8R3IKJiiuVz
7ZN8HfCJPIFWONQpVaqFAAsyMyTnVo7kladay3E2GJLVRB2KGP/8LXdBA104UJTg
3fXNA2iOISAFNVHK3ElAeqI4bLgf0MYVurcFjMjcjiulqU/aa8h2FzmaGzLGJLvn
v/SnJ56CUhwyaQToyC7yhBoBcBjigV7qVeYtQq3z+e2WSGKnd5i3pSf+GD3/CId+
t1vInKxG4MKA0C3ypUjEdRAVu5EYn8kClA==
-----END CERTIFICATE-----
Generated at Mon Jul 20 19:31:42 2026 by rpki-client