Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/6ab2a543-8e34-3e50-bdbe-a30e77d61c77.roa
File:                     6ab2a543-8e34-3e50-bdbe-a30e77d61c77.roa (raw, json)
Hash identifier:          gBDlnS7YSckcIVnANsO1kq60BIpSANqOwNgdaRV1RZw=
Subject key identifier:   E3:5F:3E:21:6F:4B:FE:93:82:50:4D:53:CA:CD:D9:54:28:0F:62:7E
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584F549D4E83777D02242CBD3800
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/6ab2a543-8e34-3e50-bdbe-a30e77d61c77.roa
Signing time:             Tue 29 Sep 2026 01:00:12 +0000
ROA not before:           Tue 29 Sep 2026 01:00:12 +0000
ROA not after:            Mon 28 Dec 2026 02:00:12 +0000
asID:                     19905
IP address blocks:        2604:2e87:800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:54:9d:4e:83:77:7d:02:24:2c:bd:38:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Sep 29 01:00:12 2026 GMT
            Not After : Dec 28 02:00:12 2026 GMT
        Subject: CN=72b276bb-a7dc-4340-b7cd-a5573febd247
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:1a:5a:9b:ef:bd:5d:6f:58:d7:e1:a1:57:a2:
                    88:72:f5:59:fe:aa:ac:89:3e:cf:5a:45:04:0e:fa:
                    ff:7b:f8:8e:5a:04:9f:d3:76:6f:11:5e:fa:32:51:
                    b3:82:18:e3:e5:00:ee:a3:5e:e9:3f:81:c2:bb:f1:
                    ce:3a:66:a4:18:8e:48:1f:c5:e6:e6:c7:1b:cb:7f:
                    da:66:fe:51:db:3c:06:cf:e2:a3:ad:7e:31:d5:cc:
                    3b:6a:a8:98:91:79:45:cb:66:2c:a6:47:2a:62:a2:
                    cb:21:d6:31:70:48:b6:c8:16:0b:12:42:da:48:7f:
                    e8:d3:51:38:f3:10:ef:77:23:62:32:7f:6f:7a:cb:
                    f5:b7:d2:a8:a5:a4:65:e4:cc:89:41:14:b0:91:9c:
                    a5:a6:a5:79:45:6c:c6:b5:23:14:c4:e8:1c:6d:29:
                    3a:42:4e:a6:46:b1:4e:ff:bf:2e:fe:ea:8d:45:46:
                    f3:11:99:39:2a:ec:e5:81:30:24:e3:b4:87:af:0b:
                    85:79:ad:e6:37:c2:57:5a:88:4c:c5:33:80:9f:e3:
                    ef:b9:0c:ee:4e:3d:64:9c:84:ab:af:8a:ca:0f:f3:
                    b2:21:61:c8:b7:bb:46:39:12:a5:d6:97:c5:4c:e7:
                    d8:83:84:a0:7c:e6:71:ab:c5:ec:46:89:77:42:b8:
                    48:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:5F:3E:21:6F:4B:FE:93:82:50:4D:53:CA:CD:D9:54:28:0F:62:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/6ab2a543-8e34-3e50-bdbe-a30e77d61c77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e87:800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:16:5c:4c:6d:7c:30:91:be:3a:90:ae:11:e0:65:c3:fc:8d:
         f9:09:a5:8c:e2:ab:e3:55:81:68:7a:c2:30:d5:29:37:9d:b9:
         4b:f1:73:91:b8:6b:ed:1c:0b:7e:33:7a:dc:d8:f4:24:58:88:
         de:dd:4b:30:d2:18:2f:30:df:65:3e:89:01:55:af:67:21:9d:
         de:40:f7:24:e5:c9:06:20:67:0a:df:18:07:50:74:f7:02:0e:
         3c:f8:a5:f0:85:d5:5a:8f:54:60:60:38:95:31:ef:45:ff:50:
         79:fa:f7:f3:9f:69:22:1a:70:72:7f:48:a8:22:01:25:37:25:
         f3:ae:45:a8:dc:77:9e:b2:52:3c:8a:c2:b2:b3:77:f9:93:d8:
         d3:a8:04:04:2f:e9:00:3a:59:e2:1f:6f:20:e3:79:8d:2e:5b:
         44:3f:09:17:3f:02:45:04:bc:cd:dc:b8:14:13:bc:f2:84:01:
         d7:98:60:9f:ef:ff:b9:c4:06:48:39:42:7f:74:c7:3f:04:25:
         83:ec:ee:81:67:53:77:23:a6:08:53:a9:d3:27:1c:11:e7:b2:
         ab:b4:9e:2f:22:94:42:e1:a3:d1:73:06:c7:48:02:57:21:2e:
         73:34:07:95:4e:b9:2b:33:89:f4:9f:93:48:45:f0:88:d6:f3:
         3f:47:89:55
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9UnU6Dd30CJCy9OAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk
NzJiMjc2YmItYTdkYy00MzQwLWI3Y2QtYTU1NzNmZWJkMjQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxpam++9XW9Y1+GhV6KIcvVZ/qqsiT7PWkUE
Dvr/e/iOWgSf03ZvEV76MlGzghjj5QDuo17pP4HCu/HOOmakGI5IH8Xm5scby3/a
Zv5R2zwGz+KjrX4x1cw7aqiYkXlFy2YspkcqYqLLIdYxcEi2yBYLEkLaSH/o01E4
8xDvdyNiMn9vesv1t9KopaRl5MyJQRSwkZylpqV5RWzGtSMUxOgcbSk6Qk6mRrFO
/78u/uqNRUbzEZk5KuzlgTAk47SHrwuFea3mN8JXWohMxTOAn+PvuQzuTj1knISr
r4rKD/OyIWHIt7tGORKl1pfFTOfYg4SgfOZxq8XsRol3QrhIewIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFONfPiFvS/6TglBNU8rN2VQoD2J+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNmFiMmE1NDMtOGUzNC0z
ZTUwLWJkYmUtYTMwZTc3ZDYxYzc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuhwgw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAGBZcTG18MJG+OpCuEeBlw/yN+QmljOKr41WBaHrCMNUpN525S/Fz
kbhr7RwLfjN63Nj0JFiI3t1LMNIYLzDfZT6JAVWvZyGd3kD3JOXJBiBnCt8YB1B0
9wIOPPil8IXVWo9UYGA4lTHvRf9Qefr3859pIhpwcn9IqCIBJTcl865FqNx3nrJS
PIrCsrN3+ZPY06gEBC/pADpZ4h9vION5jS5bRD8JFz8CRQS8zdy4FBO88oQB15hg
n+//ucQGSDlCf3THPwQlg+zugWdTdyOmCFOp0yccEeeyq7SeLyKUQuGj0XMGx0gC
VyEuczQHlU65KzOJ9J+TSEXwiNbzP0eJVQ==
-----END CERTIFICATE-----
Generated at Wed Oct 14 20:31:35 2026 by rpki-client