Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/877e52d7-50a2-39d0-b70d-087c37f67e3d.roa
File:                     877e52d7-50a2-39d0-b70d-087c37f67e3d.roa (raw, json)
Hash identifier:          Z9KvP90IfQoN7jfam4z1KYpyVKlwQbuRQht7VJ3o0zs=
Subject key identifier:   1F:94:08:C5:88:37:64:7B:04:66:13:77:4B:F0:B8:AE:67:B6:22:14
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584E97B500E035530BABF3279980
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/877e52d7-50a2-39d0-b70d-087c37f67e3d.roa
Signing time:             Thu 23 Jul 2026 09:00:11 +0000
ROA not before:           Thu 23 Jul 2026 09:00:11 +0000
ROA not after:            Wed 21 Oct 2026 09:00:11 +0000
asID:                     19905
IP address blocks:        2604:2e87:e800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:97:b5:00:e0:35:53:0b:ab:f3:27:99:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jul 23 09:00:11 2026 GMT
            Not After : Oct 21 09:00:11 2026 GMT
        Subject: CN=72cdf09d-44d5-4b8c-ab75-41dede3175f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ca:16:4f:ab:31:91:d3:d4:f9:71:81:cb:c8:
                    d1:70:71:c4:65:99:46:47:78:1c:6a:af:86:e2:87:
                    31:7b:02:25:58:b4:47:51:de:93:02:2c:91:4c:e4:
                    36:5d:09:98:9f:af:9c:3a:cb:3f:f0:c6:2d:c0:99:
                    07:69:20:c6:06:08:e6:22:6f:6a:bb:65:6a:88:3e:
                    37:9d:ed:f4:b6:7c:ae:31:c1:a2:0c:39:45:b0:cc:
                    ca:04:e6:9b:37:30:04:82:f8:0b:73:c7:fd:6d:49:
                    ee:7c:b8:c9:5f:fe:83:4d:3e:73:43:6e:22:14:9d:
                    d7:c7:bc:a8:0f:d8:01:dc:6d:3e:a2:9a:e0:ff:dd:
                    28:88:15:02:2e:ef:de:43:e8:93:b4:7e:e4:b5:e0:
                    2a:f2:78:2d:f6:9d:3d:a3:fb:af:96:b2:da:bf:4d:
                    dc:e4:e8:4e:50:a5:00:e1:bf:10:71:15:78:cc:6a:
                    94:01:99:a6:1d:1f:87:02:23:b8:6b:61:a6:e9:58:
                    86:a1:55:2c:9c:c7:9a:9c:66:94:40:db:bc:c2:7e:
                    f1:96:c3:71:c0:37:f1:b9:d1:65:91:dc:d4:60:70:
                    32:4d:6f:e5:28:81:f9:00:85:71:b5:5d:60:9c:fd:
                    3b:19:00:25:23:90:5b:50:13:78:33:44:80:f2:91:
                    fa:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:94:08:C5:88:37:64:7B:04:66:13:77:4B:F0:B8:AE:67:B6:22:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/877e52d7-50a2-39d0-b70d-087c37f67e3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e87:e800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:df:ed:8d:c5:d5:a7:85:eb:5f:2b:8d:c5:8f:e1:5c:d9:bf:
         99:60:4d:1e:2c:06:75:ec:8c:c0:1f:fe:02:c2:d9:1f:63:b9:
         7f:0c:41:14:d3:05:c0:1f:1d:d6:4e:4c:25:db:54:f4:b1:21:
         87:e0:0e:b7:e2:45:c7:26:85:e1:49:01:6d:15:d6:ab:b3:35:
         6d:d6:38:27:2c:c2:c9:13:ab:3e:9f:b8:26:e8:07:fa:37:a5:
         21:1a:06:20:68:1b:14:8e:70:a1:05:39:03:13:98:80:94:2c:
         55:a9:6b:35:66:73:b7:ab:3d:db:5e:76:49:7e:72:6b:21:d7:
         6a:46:29:b7:0e:1c:6a:ea:44:ba:e5:20:28:c5:82:c0:ae:6b:
         f9:98:fc:af:e7:d0:a8:35:69:d3:f4:0f:bb:d4:94:cf:ce:8d:
         a3:1b:23:4d:ab:54:e8:5e:ba:8a:cd:8e:8b:dc:8e:99:ae:60:
         ee:46:c3:e5:45:7a:9d:f0:62:05:b9:14:5f:c4:4b:9a:72:96:
         e1:91:80:06:3a:3a:0d:06:3d:d4:bb:4e:e1:bd:31:18:b9:21:
         1f:ff:7e:ac:ee:e4:47:a6:c8:74:17:17:78:c5:cb:90:40:eb:
         a9:2d:6e:80:96:60:02:d1:1b:da:6f:0b:92:1e:c5:f6:67:22:
         4a:dd:8a:21
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE6XtQDgNVMLq/MnmYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI2MDcyMzA5MDAxMVoXDTI2MTAyMTA5MDAxMVowLzEtMCsGA1UEAxMk
NzJjZGYwOWQtNDRkNS00YjhjLWFiNzUtNDFkZWRlMzE3NWY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8oWT6sxkdPU+XGBy8jRcHHEZZlGR3gcaq+G
4ocxewIlWLRHUd6TAiyRTOQ2XQmYn6+cOss/8MYtwJkHaSDGBgjmIm9qu2VqiD43
ne30tnyuMcGiDDlFsMzKBOabNzAEgvgLc8f9bUnufLjJX/6DTT5zQ24iFJ3Xx7yo
D9gB3G0+oprg/90oiBUCLu/eQ+iTtH7kteAq8ngt9p09o/uvlrLav03c5OhOUKUA
4b8QcRV4zGqUAZmmHR+HAiO4a2Gm6ViGoVUsnMeanGaUQNu8wn7xlsNxwDfxudFl
kdzUYHAyTW/lKIH5AIVxtV1gnP07GQAlI5BbUBN4M0SA8pH6XwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFB+UCMWIN2R7BGYTd0vwuK5ntiIUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvODc3ZTUyZDctNTBhMi0z
OWQwLWI3MGQtMDg3YzM3ZjY3ZTNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuh+gw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAh9/tjcXVp4XrXyuNxY/hXNm/mWBNHiwGdeyMwB/+AsLZH2O5fwxB
FNMFwB8d1k5MJdtU9LEhh+AOt+JFxyaF4UkBbRXWq7M1bdY4JyzCyROrPp+4JugH
+jelIRoGIGgbFI5woQU5AxOYgJQsValrNWZzt6s92152SX5yayHXakYptw4caupE
uuUgKMWCwK5r+Zj8r+fQqDVp0/QPu9SUz86NoxsjTatU6F66is2Oi9yOma5g7kbD
5UV6nfBiBbkUX8RLmnKW4ZGABjo6DQY91LtO4b0xGLkhH/9+rO7kR6bIdBcXeMXL
kEDrqS1ugJZgAtEb2m8Lkh7F9mciSt2KIQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 13:34:24 2026 by rpki-client