Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1867b5bb-e885-3dcb-8c08-92e9686f02ef.roa
File:                     1867b5bb-e885-3dcb-8c08-92e9686f02ef.roa (raw, json)
Hash identifier:          SiNJKM9WiFdPVup0xiHTp0IckU6X5D1wUyCp6LSFg/U=
Subject key identifier:   E3:30:99:51:27:07:B1:D6:0E:98:10:53:19:AC:17:F0:A8:46:B1:BC
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584F4F080CD9379DDF880F2A3960
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1867b5bb-e885-3dcb-8c08-92e9686f02ef.roa
Signing time:             Sun 27 Sep 2026 01:00:12 +0000
ROA not before:           Sun 27 Sep 2026 01:00:12 +0000
ROA not after:            Sat 26 Dec 2026 02:00:12 +0000
asID:                     19905
IP address blocks:        2604:2e87:6800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4f:08:0c:d9:37:9d:df:88:0f:2a:39:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Sep 27 01:00:12 2026 GMT
            Not After : Dec 26 02:00:12 2026 GMT
        Subject: CN=d4eede8b-1522-4526-8af3-25edf51627cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:7a:ea:af:a8:ef:a3:d3:f3:dc:f3:60:cd:b2:
                    2c:fe:38:5d:3b:82:5f:b9:37:58:81:89:9e:87:56:
                    78:af:7a:db:04:7a:31:4e:7d:c0:e8:31:19:e2:40:
                    b9:af:25:76:ba:43:79:0f:65:cb:21:9c:72:f8:13:
                    04:06:5e:33:5e:9f:77:9e:6a:2d:2b:1e:6e:5a:2d:
                    fe:78:18:01:0e:48:9b:85:7d:35:d7:84:49:39:62:
                    77:8e:83:79:08:3f:5b:7a:f5:cf:39:4f:02:3a:5a:
                    fc:ea:12:d4:17:39:59:e7:10:9b:3d:af:a2:9e:ad:
                    55:00:5e:d4:f2:d4:15:5a:8d:c3:e7:ec:28:e2:a4:
                    97:7e:fb:9f:92:a6:e7:d5:55:cc:cd:9c:6d:a4:96:
                    be:13:ed:b6:24:55:b6:dd:10:75:84:6f:0a:42:18:
                    02:85:fc:45:f0:26:9d:d8:3d:69:7b:a9:38:66:9d:
                    c5:ed:21:ed:4d:cb:6e:15:ff:2c:ed:7b:c8:cb:43:
                    2b:67:de:54:3b:da:ff:cc:95:d1:90:77:30:0f:32:
                    56:0d:c5:fb:21:f1:49:62:d2:b5:cb:23:c5:7d:1e:
                    a4:e1:1b:af:c5:a4:1d:f7:be:06:28:ef:07:f6:78:
                    0a:04:4c:aa:63:a3:bb:d5:e2:68:90:ef:db:62:f2:
                    86:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:30:99:51:27:07:B1:D6:0E:98:10:53:19:AC:17:F0:A8:46:B1:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1867b5bb-e885-3dcb-8c08-92e9686f02ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e87:6800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:69:e4:b9:13:56:93:bf:a2:3b:d5:be:f0:77:32:01:ae:b0:
         05:55:aa:0b:08:fa:09:7a:29:88:5c:f1:04:5c:1e:39:db:dc:
         1a:ea:c3:87:d3:c9:e3:de:98:d3:16:1b:f8:3c:93:8d:09:ea:
         40:87:c2:76:77:b2:05:57:3a:ea:5a:2c:63:dd:3f:f1:17:44:
         98:b5:27:87:da:6b:30:62:45:67:c7:ca:74:85:18:84:18:7f:
         72:b2:cc:57:34:e6:75:1d:61:1f:0c:3b:9b:57:61:76:18:84:
         fe:cf:db:0a:21:9d:78:ca:32:74:03:5f:32:8f:b5:89:e5:fd:
         9f:73:b3:c0:6c:9a:e3:b5:f1:db:f6:2f:c9:86:27:d7:9d:d5:
         63:9c:0e:b7:d9:65:8a:1d:4d:b9:c1:c8:6e:3b:c3:ec:0b:db:
         36:30:29:5b:83:32:fa:d8:8a:55:c5:3e:25:35:d0:20:4b:ef:
         48:f8:f0:58:63:fc:01:3f:3e:c8:c8:fa:2e:4f:eb:49:ff:46:
         c0:31:b4:d4:ab:d9:49:ae:5f:b4:dd:d0:9e:af:46:91:f4:11:
         65:0b:54:21:04:f9:77:a3:75:d0:1f:4b:d5:9f:d9:49:bb:ca:
         15:1b:6f:3a:fc:72:3e:00:3b:5d:a3:09:2c:1f:c8:aa:a3:94:
         db:94:1a:70
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9PCAzZN53fiA8qOWAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI2MDkyNzAxMDAxMloXDTI2MTIyNjAyMDAxMlowLzEtMCsGA1UEAxMk
ZDRlZWRlOGItMTUyMi00NTI2LThhZjMtMjVlZGY1MTYyN2NiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA73rqr6jvo9Pz3PNgzbIs/jhdO4JfuTdYgYme
h1Z4r3rbBHoxTn3A6DEZ4kC5ryV2ukN5D2XLIZxy+BMEBl4zXp93nmotKx5uWi3+
eBgBDkibhX0114RJOWJ3joN5CD9bevXPOU8COlr86hLUFzlZ5xCbPa+inq1VAF7U
8tQVWo3D5+wo4qSXfvufkqbn1VXMzZxtpJa+E+22JFW23RB1hG8KQhgChfxF8Cad
2D1pe6k4Zp3F7SHtTctuFf8s7XvIy0MrZ95UO9r/zJXRkHcwDzJWDcX7IfFJYtK1
yyPFfR6k4RuvxaQd974GKO8H9ngKBEyqY6O71eJokO/bYvKGWwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFOMwmVEnB7HWDpgQUxmsF/CoRrG8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMTg2N2I1YmItZTg4NS0z
ZGNiLThjMDgtOTJlOTY4NmYwMmVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuh2gw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAbWnkuRNWk7+iO9W+8HcyAa6wBVWqCwj6CXopiFzxBFweOdvcGurD
h9PJ496Y0xYb+DyTjQnqQIfCdneyBVc66losY90/8RdEmLUnh9prMGJFZ8fKdIUY
hBh/crLMVzTmdR1hHww7m1dhdhiE/s/bCiGdeMoydANfMo+1ieX9n3OzwGya47Xx
2/YvyYYn153VY5wOt9llih1NucHIbjvD7AvbNjApW4My+tiKVcU+JTXQIEvvSPjw
WGP8AT8+yMj6Lk/rSf9GwDG01KvZSa5ftN3Qnq9GkfQRZQtUIQT5d6N10B9L1Z/Z
SbvKFRtvOvxyPgA7XaMJLB/IqqOU25QacA==
-----END CERTIFICATE-----
Generated at Sun Oct 11 08:38:26 2026 by rpki-client