Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/6cbd59bd-f1f0-3935-b956-c98fad2fc94c.roa
File:                     6cbd59bd-f1f0-3935-b956-c98fad2fc94c.roa (raw, json)
Hash identifier:          R07ndtOox00MA0NHqR9oeMtBG87iysOhc7V2nFAwxHk=
Subject key identifier:   80:CB:B3:9D:98:34:C9:F7:1D:F7:F3:AC:9A:C1:DF:D2:C3:AF:E8:DA
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584ED6FC7DEA1344274A5EC986E0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/6cbd59bd-f1f0-3935-b956-c98fad2fc94c.roa
Signing time:             Sat 15 Aug 2026 01:00:12 +0000
ROA not before:           Sat 15 Aug 2026 01:00:12 +0000
ROA not after:            Fri 13 Nov 2026 02:00:12 +0000
asID:                     19905
IP address blocks:        2604:2e86:c00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d6:fc:7d:ea:13:44:27:4a:5e:c9:86:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Aug 15 01:00:12 2026 GMT
            Not After : Nov 13 02:00:12 2026 GMT
        Subject: CN=89708871-2ffe-4922-affe-2ee78a049c7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:74:83:89:11:1c:6e:c6:db:a7:36:94:1b:43:
                    5d:26:58:4e:fa:f7:3a:33:64:c7:54:a8:df:02:d7:
                    3a:cf:de:96:7f:52:5d:fa:ff:cc:20:02:82:61:91:
                    43:8b:76:43:10:fd:82:fd:63:a1:41:10:52:43:05:
                    09:1e:73:3a:03:62:1d:e4:8f:53:7a:2d:06:10:8b:
                    e9:65:f0:b3:91:58:fb:b1:6c:b9:d6:5c:fb:c0:33:
                    32:c4:37:7e:bc:02:ad:e9:8c:7c:98:2a:71:16:67:
                    50:4f:84:ce:06:5a:98:12:ff:32:7c:44:34:61:0f:
                    d7:7f:ef:15:be:a8:8a:04:b8:7b:fa:f7:9e:09:c3:
                    d1:07:4c:9a:d0:f7:e5:05:8f:bc:11:16:e8:83:e9:
                    50:e0:f9:1d:19:20:4f:cb:fe:b8:49:23:f9:41:2b:
                    30:7b:8b:07:c8:af:5d:56:0b:a8:8e:29:2f:46:fb:
                    46:a3:6e:8c:de:1c:23:43:9b:08:60:ba:ba:80:f9:
                    db:2e:12:6b:19:a8:d9:0e:b9:ef:88:b0:53:14:73:
                    1c:48:ca:ce:b3:cc:b9:c5:31:59:74:2f:c4:ec:ee:
                    79:c0:6b:72:a6:5f:b2:09:9e:74:92:bf:80:d5:6e:
                    a2:9e:ad:96:01:49:ff:ab:bc:d4:23:e8:59:1a:2e:
                    bb:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:CB:B3:9D:98:34:C9:F7:1D:F7:F3:AC:9A:C1:DF:D2:C3:AF:E8:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/6cbd59bd-f1f0-3935-b956-c98fad2fc94c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e86:c00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:52:e8:9b:c4:82:07:f4:e8:21:34:cf:74:93:bb:ed:71:4a:
         b3:8e:cf:25:59:fb:ec:6d:73:f2:64:12:9a:91:02:32:4e:6f:
         2c:55:5f:62:9f:c5:fc:19:30:0b:7d:05:65:31:b5:45:c8:dd:
         0a:64:67:df:bf:91:44:58:a1:3b:49:b6:a3:99:64:27:46:3c:
         95:b4:b8:da:d7:0a:5b:30:b3:bb:88:81:f3:aa:39:df:50:87:
         44:39:e0:23:e9:e3:74:66:44:63:40:de:47:76:ed:5d:bf:43:
         bc:b3:6d:a7:a1:92:26:5f:f3:82:43:af:b3:a1:96:4d:38:e6:
         4d:72:1d:38:e1:9b:92:28:fc:70:4f:ee:c4:37:17:7c:80:61:
         e3:d1:0b:3b:64:43:89:f1:0f:2e:a0:0f:94:d1:24:10:be:63:
         6f:15:5a:41:3d:d1:9c:d2:32:ba:ef:a0:66:c5:ce:72:88:08:
         10:00:b5:cf:eb:cd:5f:9a:da:d0:00:7a:e8:04:ae:e9:c2:9a:
         06:0c:44:f9:7a:ec:17:d7:18:18:3b:b5:86:85:37:4d:d3:83:
         76:24:13:42:c6:24:e4:da:2f:f3:5a:69:68:70:67:fb:17:9b:
         c7:3c:5d:14:32:ad:da:3f:c9:e2:8e:5e:f7:b4:1c:d3:85:b9:
         c0:88:18:60
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE7W/H3qE0QnSl7JhuAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI2MDgxNTAxMDAxMloXDTI2MTExMzAyMDAxMlowLzEtMCsGA1UEAxMk
ODk3MDg4NzEtMmZmZS00OTIyLWFmZmUtMmVlNzhhMDQ5YzdiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnSDiREcbsbbpzaUG0NdJlhO+vc6M2THVKjf
Atc6z96Wf1Jd+v/MIAKCYZFDi3ZDEP2C/WOhQRBSQwUJHnM6A2Id5I9Tei0GEIvp
ZfCzkVj7sWy51lz7wDMyxDd+vAKt6Yx8mCpxFmdQT4TOBlqYEv8yfEQ0YQ/Xf+8V
vqiKBLh7+veeCcPRB0ya0PflBY+8ERbog+lQ4PkdGSBPy/64SSP5QSswe4sHyK9d
VguojikvRvtGo26M3hwjQ5sIYLq6gPnbLhJrGajZDrnviLBTFHMcSMrOs8y5xTFZ
dC/E7O55wGtypl+yCZ50kr+A1W6inq2WAUn/q7zUI+hZGi67CQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFIDLs52YNMn3HffzrJrB39LDr+jaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNmNiZDU5YmQtZjFmMC0z
OTM1LWI5NTYtYzk4ZmFkMmZjOTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuhgww
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAHlLom8SCB/ToITTPdJO77XFKs47PJVn77G1z8mQSmpECMk5vLFVf
Yp/F/BkwC30FZTG1RcjdCmRn37+RRFihO0m2o5lkJ0Y8lbS42tcKWzCzu4iB86o5
31CHRDngI+njdGZEY0DeR3btXb9DvLNtp6GSJl/zgkOvs6GWTTjmTXIdOOGbkij8
cE/uxDcXfIBh49ELO2RDifEPLqAPlNEkEL5jbxVaQT3RnNIyuu+gZsXOcogIEAC1
z+vNX5ra0AB66ASu6cKaBgxE+XrsF9cYGDu1hoU3TdODdiQTQsYk5Nov81ppaHBn
+xebxzxdFDKt2j/J4o5e97Qc04W5wIgYYA==
-----END CERTIFICATE-----
Generated at Fri Aug 21 02:30:11 2026 by rpki-client