Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/df2ba8b1-f3ef-3989-ba38-6e10b866ad09.roa
File:                     df2ba8b1-f3ef-3989-ba38-6e10b866ad09.roa (raw, json)
Hash identifier:          1YZ3Nv8HHFntryewNJj8T+UeiUyztbZk+rRcY9o8Co8=
Subject key identifier:   DE:4C:CC:60:6D:B7:CD:B6:05:5B:85:F9:CD:EF:7B:11:FD:B5:9A:5E
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584EA79193B25EE8908BEFE8B160
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/df2ba8b1-f3ef-3989-ba38-6e10b866ad09.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     19905
IP address blocks:        2604:2e88:cc00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:91:93:b2:5e:e8:90:8b:ef:e8:b1:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=17a87cc6-136e-43e5-888f-b332ec2b07cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:ec:c4:87:88:a8:0f:92:86:5b:cf:98:35:a8:
                    66:2f:8d:93:40:55:cc:9a:8e:80:84:43:d3:48:84:
                    25:ab:e5:e2:53:ca:21:dc:f8:ec:8b:56:20:a4:a5:
                    d4:e2:13:03:2a:0e:a3:6d:f8:62:b4:5c:89:d7:3f:
                    bb:83:75:4c:f5:95:16:70:64:cc:58:cf:15:e8:26:
                    c8:43:45:40:b3:3f:be:5a:21:b4:30:53:c1:cd:9d:
                    8e:40:7a:6b:ab:18:fa:c2:27:ad:3a:b2:74:e7:42:
                    50:ba:68:4a:fa:0f:4a:37:06:13:ac:bb:dc:a8:88:
                    1b:66:fb:10:96:94:d7:30:55:91:f0:35:d9:83:fc:
                    8b:7f:f6:22:a5:70:13:de:da:a1:e3:be:b9:38:8d:
                    68:c8:20:8a:a9:44:44:c9:5c:01:6c:fd:8f:7e:be:
                    28:25:53:a6:4c:dd:5a:86:32:b4:2c:49:d1:cc:f2:
                    4c:96:4a:1c:c5:64:9c:5e:85:39:d7:a4:e6:05:dc:
                    35:6a:0e:e1:b5:d7:0a:5e:4a:ce:cb:98:39:1c:b0:
                    03:fc:bb:e4:7d:aa:4a:95:eb:b7:6e:09:01:ab:66:
                    97:d6:a8:ee:06:46:eb:2a:6b:cc:6d:7f:77:66:2e:
                    ad:bb:5d:62:b1:7c:49:16:93:93:05:48:54:9b:d4:
                    e1:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:4C:CC:60:6D:B7:CD:B6:05:5B:85:F9:CD:EF:7B:11:FD:B5:9A:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/df2ba8b1-f3ef-3989-ba38-6e10b866ad09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e88:cc00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:e1:f8:69:69:f7:9f:ee:0f:d6:82:2e:29:bb:0c:f9:0e:49:
         20:f7:ab:e5:15:ef:c1:7f:ee:d7:f4:28:02:7a:80:4a:a5:32:
         c5:34:bb:df:ab:31:7d:64:10:40:d6:ae:1f:52:ce:d6:5c:f9:
         dd:55:9b:6a:18:b3:b6:18:b2:27:2e:98:0e:90:82:2f:c6:ec:
         b3:3e:66:d7:f0:4e:4f:8f:54:7e:53:90:40:36:4e:22:5a:32:
         ee:93:1d:b6:a6:b9:32:e1:90:24:a8:15:9d:f9:7f:6a:11:72:
         05:53:ee:da:c6:3f:85:a8:34:f0:09:96:e4:27:0a:55:55:e1:
         22:da:50:ff:33:30:a5:b2:6f:d3:fc:84:3a:a4:95:02:21:d6:
         1f:3f:23:95:5f:d7:9d:61:3c:09:bb:84:aa:2d:1b:2e:8a:c0:
         d2:9d:86:bf:af:23:90:df:d4:e1:55:9b:ac:34:ef:40:6c:dd:
         4f:5f:14:a6:f0:73:4a:d5:3a:70:65:66:f6:67:3c:d0:e0:27:
         61:6e:0e:9a:b9:a6:06:37:aa:23:0e:90:85:a6:ff:85:49:cc:
         12:e8:00:72:86:2a:0c:6b:43:b6:44:a9:57:f2:ec:90:f0:ef:
         2a:4f:92:2d:09:f0:22:6a:29:a9:32:e6:f4:b8:e0:f4:a7:fa:
         6c:94:f0:b9
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE6nkZOyXuiQi+/osWAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
MTdhODdjYzYtMTM2ZS00M2U1LTg4OGYtYjMzMmVjMmIwN2NkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhezEh4ioD5KGW8+YNahmL42TQFXMmo6AhEPT
SIQlq+XiU8oh3Pjsi1YgpKXU4hMDKg6jbfhitFyJ1z+7g3VM9ZUWcGTMWM8V6CbI
Q0VAsz++WiG0MFPBzZ2OQHprqxj6wietOrJ050JQumhK+g9KNwYTrLvcqIgbZvsQ
lpTXMFWR8DXZg/yLf/YipXAT3tqh4765OI1oyCCKqUREyVwBbP2Pfr4oJVOmTN1a
hjK0LEnRzPJMlkocxWScXoU516TmBdw1ag7htdcKXkrOy5g5HLAD/LvkfapKleu3
bgkBq2aX1qjuBkbrKmvMbX93Zi6tu11isXxJFpOTBUhUm9ThMQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFN5MzGBtt822BVuF+c3vexH9tZpeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvZGYyYmE4YjEtZjNlZi0z
OTg5LWJhMzgtNmUxMGI4NjZhZDA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiMww
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAjuH4aWn3n+4P1oIuKbsM+Q5JIPer5RXvwX/u1/QoAnqASqUyxTS7
36sxfWQQQNauH1LO1lz53VWbahizthiyJy6YDpCCL8bssz5m1/BOT49UflOQQDZO
Iloy7pMdtqa5MuGQJKgVnfl/ahFyBVPu2sY/hag08AmW5CcKVVXhItpQ/zMwpbJv
0/yEOqSVAiHWHz8jlV/XnWE8CbuEqi0bLorA0p2Gv68jkN/U4VWbrDTvQGzdT18U
pvBzStU6cGVm9mc80OAnYW4OmrmmBjeqIw6Qhab/hUnMEugAcoYqDGtDtkSpV/Ls
kPDvKk+SLQnwImopqTLm9Ljg9Kf6bJTwuQ==
-----END CERTIFICATE-----
Generated at Fri Aug 21 02:30:12 2026 by rpki-client