Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cee2e301-b359-3d13-a6dd-af46aa457288.roa
File:                     cee2e301-b359-3d13-a6dd-af46aa457288.roa (raw, json)
Hash identifier:          CabzlC8NvCZegdI4xpCEqqmh261/Dfuqo2abU/P/6QM=
Subject key identifier:   ED:2C:FA:DA:27:27:F7:01:6E:67:01:6A:FD:E8:83:F9:0F:A8:30:DF
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584E7204DF13103EC0C5E77BA640
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cee2e301-b359-3d13-a6dd-af46aa457288.roa
Signing time:             Thu 09 Jul 2026 21:00:11 +0000
ROA not before:           Thu 09 Jul 2026 21:00:11 +0000
ROA not after:            Wed 07 Oct 2026 21:00:11 +0000
asID:                     19905
IP address blocks:        2604:2d81:e00::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:72:04:df:13:10:3e:c0:c5:e7:7b:a6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul  9 21:00:11 2026 GMT
            Not After : Oct  7 21:00:11 2026 GMT
        Subject: CN=ccb31174-27fc-4c83-9388-653e1d494cd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:3d:7e:a3:28:64:91:09:e0:b9:9c:b7:46:af:
                    b7:d4:8a:f7:bb:a9:7b:f3:30:e5:95:43:80:d5:7d:
                    35:fa:fa:21:ef:b7:8f:b9:4b:93:27:d8:77:87:1a:
                    6a:10:d0:fc:ad:ff:e6:86:e1:7d:c0:dc:1f:05:1f:
                    9d:81:52:74:91:d5:48:0c:17:0c:9b:3e:0a:31:82:
                    eb:d4:6e:99:60:c5:9b:ef:c5:3c:7d:71:a2:e2:53:
                    72:f9:7e:81:02:23:1e:97:f0:4f:cf:dc:a0:c1:bd:
                    73:58:c4:8d:aa:8a:5b:05:46:42:15:04:d9:d6:46:
                    25:19:c3:b5:47:05:6b:34:06:b8:3b:98:32:46:44:
                    77:3b:bd:49:fa:dc:4a:23:37:d5:e6:49:43:8c:e8:
                    58:c1:43:a9:5b:84:13:7e:3f:a4:d2:f5:3c:72:c9:
                    81:f9:ea:a8:b4:65:aa:a0:b1:04:2c:81:00:8e:98:
                    a5:5e:5a:22:ee:f0:30:45:3a:d7:e1:18:7f:c5:17:
                    c9:a7:eb:bc:04:7e:15:8f:bf:6a:dc:cd:87:7a:a4:
                    fc:c3:c1:ec:7e:12:2d:fe:c9:27:00:5a:38:c6:80:
                    ab:c6:e6:ac:ad:5f:ec:8f:5b:b6:ae:0d:f7:4e:44:
                    71:80:a6:97:cf:35:14:e6:da:ea:87:61:d7:cf:f5:
                    19:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:2C:FA:DA:27:27:F7:01:6E:67:01:6A:FD:E8:83:F9:0F:A8:30:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cee2e301-b359-3d13-a6dd-af46aa457288.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d81:e00::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:4a:7b:d7:09:97:53:48:90:cd:9f:75:ad:fa:25:fa:cf:74:
         2b:82:b3:d9:5d:48:23:09:13:db:ee:a6:85:26:9a:48:d8:75:
         4e:c8:c3:10:dd:6b:ab:aa:3c:1b:66:5c:41:0b:ad:54:f3:25:
         28:5a:92:c5:1d:ae:65:a0:91:0a:7a:eb:91:75:0c:c1:c9:bb:
         14:bd:27:44:03:b4:e4:7f:b6:e5:2d:33:fd:7d:99:ed:4c:1f:
         da:45:05:f4:74:44:29:6c:e3:32:a1:08:69:0f:19:2a:a8:2b:
         c6:31:5d:c8:65:93:e1:58:cb:88:59:09:4b:99:db:7a:00:ae:
         44:7a:e4:41:9c:a5:c2:e6:0c:d6:02:fa:92:30:6e:a5:33:77:
         a7:64:e8:66:36:e4:bf:41:4a:f9:40:32:ee:6c:7a:c0:4d:90:
         ea:b8:6d:b3:a6:3f:4a:64:d4:5c:bc:bd:52:e5:30:07:d2:8c:
         de:58:b8:2a:4e:aa:53:27:6a:15:53:0f:b7:43:71:08:05:df:
         5f:ac:6a:97:c4:6d:06:c5:83:45:2c:7e:d5:d8:78:40:39:de:
         7e:44:de:6a:72:46:8d:be:a2:e0:f1:2e:b1:d3:69:23:d9:f9:
         47:60:3a:dd:e1:27:34:f2:7d:26:80:5e:9c:9a:fa:97:08:6f:
         5f:21:2b:10
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE5yBN8TED7Axed7pkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDcwOTIxMDAxMVoXDTI2MTAwNzIxMDAxMVowLzEtMCsGA1UEAxMk
Y2NiMzExNzQtMjdmYy00YzgzLTkzODgtNjUzZTFkNDk0Y2Q0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkz1+oyhkkQnguZy3Rq+31Ir3u6l78zDllUOA
1X01+voh77ePuUuTJ9h3hxpqEND8rf/mhuF9wNwfBR+dgVJ0kdVIDBcMmz4KMYLr
1G6ZYMWb78U8fXGi4lNy+X6BAiMel/BPz9ygwb1zWMSNqopbBUZCFQTZ1kYlGcO1
RwVrNAa4O5gyRkR3O71J+txKIzfV5klDjOhYwUOpW4QTfj+k0vU8csmB+eqotGWq
oLEELIEAjpilXloi7vAwRTrX4Rh/xRfJp+u8BH4Vj79q3M2HeqT8w8HsfhIt/skn
AFo4xoCrxuasrV/sj1u2rg33TkRxgKaXzzUU5trqh2HXz/UZDwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFO0s+tonJ/cBbmcBav3og/kPqDDfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvY2VlMmUzMDEtYjM1OS0z
ZDEzLWE2ZGQtYWY0NmFhNDU3Mjg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgQ4A
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAClKe9cJl1NIkM2fda36JfrPdCuCs9ldSCMJE9vupoUmmkjYdU7I
wxDda6uqPBtmXEELrVTzJShaksUdrmWgkQp665F1DMHJuxS9J0QDtOR/tuUtM/19
me1MH9pFBfR0RCls4zKhCGkPGSqoK8YxXchlk+FYy4hZCUuZ23oArkR65EGcpcLm
DNYC+pIwbqUzd6dk6GY25L9BSvlAMu5sesBNkOq4bbOmP0pk1Fy8vVLlMAfSjN5Y
uCpOqlMnahVTD7dDcQgF31+sapfEbQbFg0UsftXYeEA53n5E3mpyRo2+ouDxLrHT
aSPZ+UdgOt3hJzTyfSaAXpya+pcIb18hKxA=
-----END CERTIFICATE-----
Generated at Fri Jul 24 06:33:11 2026 by rpki-client