Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2af0611e-3778-3a6c-b927-d9ace1efa668.roa
File:                     2af0611e-3778-3a6c-b927-d9ace1efa668.roa (raw, json)
Hash identifier:          Eg0q4qAceQp9Zeljm8onZFQTh32V01cH7a3byzGsNZw=
Subject key identifier:   6D:76:0E:BE:CD:FE:A3:EF:59:34:F1:C4:F4:94:0F:94:50:13:29:29
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584EBC76FC3DFA474514C2AB4100
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2af0611e-3778-3a6c-b927-d9ace1efa668.roa
Signing time:             Wed 05 Aug 2026 13:00:12 +0000
ROA not before:           Wed 05 Aug 2026 13:00:12 +0000
ROA not after:            Tue 03 Nov 2026 14:00:12 +0000
asID:                     19905
IP address blocks:        2604:2e88:ac00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bc:76:fc:3d:fa:47:45:14:c2:ab:41:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Aug  5 13:00:12 2026 GMT
            Not After : Nov  3 14:00:12 2026 GMT
        Subject: CN=a7e7da20-ebf2-4ebc-b921-058bc9bd84e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:c0:ec:8e:4a:d3:5e:dc:1f:6c:7d:0f:b3:bb:
                    8f:c4:21:b6:9a:22:c2:bf:de:47:6d:98:1b:a2:ea:
                    11:70:05:d2:41:03:3f:33:e7:cd:99:d7:33:96:90:
                    c8:90:d6:f3:27:ae:9e:07:fc:b1:56:35:a6:4a:d0:
                    c1:29:9e:11:90:32:9a:2d:43:21:b9:a3:ed:01:b7:
                    8a:a9:32:c8:22:3d:7f:44:6d:dc:a7:cb:fa:bc:6e:
                    ca:50:cb:29:dc:cb:e3:ec:c4:e7:06:c5:ff:80:0a:
                    cf:4d:b9:c5:12:44:97:25:48:fd:2b:b4:8f:e2:ec:
                    dd:e7:d2:b1:35:1b:7c:0f:5e:5c:04:3f:48:06:3e:
                    78:29:d4:6e:4a:63:68:18:4d:9d:9e:e9:4c:4c:ee:
                    00:9a:45:d2:68:35:ef:67:5c:ec:c5:10:c4:b6:c4:
                    ea:ff:20:9c:c3:93:7d:22:89:2d:88:df:bc:03:91:
                    1a:d1:8b:bc:63:48:f0:f1:03:5e:e8:f9:c0:16:68:
                    69:71:33:0b:cc:96:08:68:5a:55:ab:92:bc:b9:02:
                    bd:4a:a9:52:97:81:07:c1:3c:4a:ed:1d:cb:ba:56:
                    34:2e:0e:ad:ff:df:5e:6f:8a:3e:d6:65:03:db:01:
                    a2:fa:73:c3:9d:61:7d:7a:10:9d:bd:41:f5:b0:e6:
                    95:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:76:0E:BE:CD:FE:A3:EF:59:34:F1:C4:F4:94:0F:94:50:13:29:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2af0611e-3778-3a6c-b927-d9ace1efa668.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e88:ac00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:6d:f0:93:3a:3c:04:68:40:50:4b:e3:d5:86:72:48:ec:ea:
         31:6d:33:1c:41:f2:b1:bd:38:da:30:9b:82:9e:ce:28:64:3e:
         27:79:76:af:8e:a6:b7:aa:e1:c5:ac:72:49:e5:47:30:7e:28:
         7e:4f:46:43:23:0e:ec:9d:17:91:71:18:f3:a1:8c:54:f4:d3:
         db:68:75:fd:ac:cc:e3:fa:3a:23:bc:de:d5:7b:93:3d:d0:06:
         fc:5d:d3:76:6f:a4:f1:c4:a1:b8:22:97:aa:66:8b:51:3e:d9:
         c9:f2:67:6f:8b:5b:61:1d:b8:21:8a:a7:d0:db:04:1a:dc:a9:
         c0:b5:5b:bf:d6:07:1d:0c:6f:82:3f:85:e4:be:e8:78:7b:40:
         60:b7:26:08:94:fb:08:bf:f2:fe:ec:e9:34:b8:b9:d7:76:93:
         c0:87:d7:3f:ca:98:ff:8f:3d:b1:61:36:f1:99:2a:d6:cf:fa:
         39:5f:e4:88:55:44:eb:71:18:a1:48:e0:ad:24:49:2a:73:56:
         1d:96:49:7b:0b:d5:19:ab:1e:79:cd:b1:96:ce:24:95:d2:78:
         cd:4b:05:69:97:ce:85:d9:ce:28:76:98:d8:58:d7:a1:85:ab:
         07:57:9f:67:b4:52:d8:5b:4e:48:06:c6:a0:f2:fe:29:33:b9:
         89:04:44:66
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE68dvw9+kdFFMKrQQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI2MDgwNTEzMDAxMloXDTI2MTEwMzE0MDAxMlowLzEtMCsGA1UEAxMk
YTdlN2RhMjAtZWJmMi00ZWJjLWI5MjEtMDU4YmM5YmQ4NGU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMDsjkrTXtwfbH0Ps7uPxCG2miLCv95HbZgb
ouoRcAXSQQM/M+fNmdczlpDIkNbzJ66eB/yxVjWmStDBKZ4RkDKaLUMhuaPtAbeK
qTLIIj1/RG3cp8v6vG7KUMsp3Mvj7MTnBsX/gArPTbnFEkSXJUj9K7SP4uzd59Kx
NRt8D15cBD9IBj54KdRuSmNoGE2dnulMTO4AmkXSaDXvZ1zsxRDEtsTq/yCcw5N9
IoktiN+8A5Ea0Yu8Y0jw8QNe6PnAFmhpcTMLzJYIaFpVq5K8uQK9SqlSl4EHwTxK
7R3LulY0Lg6t/99eb4o+1mUD2wGi+nPDnWF9ehCdvUH1sOaVawIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFG12Dr7N/qPvWTTxxPSUD5RQEykpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMmFmMDYxMWUtMzc3OC0z
YTZjLWI5MjctZDlhY2UxZWZhNjY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiKww
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAO23wkzo8BGhAUEvj1YZySOzqMW0zHEHysb042jCbgp7OKGQ+J3l2
r46mt6rhxaxySeVHMH4ofk9GQyMO7J0XkXEY86GMVPTT22h1/azM4/o6I7ze1XuT
PdAG/F3Tdm+k8cShuCKXqmaLUT7ZyfJnb4tbYR24IYqn0NsEGtypwLVbv9YHHQxv
gj+F5L7oeHtAYLcmCJT7CL/y/uzpNLi513aTwIfXP8qY/489sWE28Zkq1s/6OV/k
iFVE63EYoUjgrSRJKnNWHZZJewvVGaseec2xls4kldJ4zUsFaZfOhdnOKHaY2FjX
oYWrB1efZ7RS2FtOSAbGoPL+KTO5iQREZg==
-----END CERTIFICATE-----
Generated at Fri Aug 21 02:29:33 2026 by rpki-client