Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9803baf1-a6f3-36dc-8d06-e6315cddb2b3.roa
File:                     9803baf1-a6f3-36dc-8d06-e6315cddb2b3.roa (raw, json)
Hash identifier:          unAVivbnNHYv8LD08SpHzsg5LW0U6L+9xk441E8bhNI=
Subject key identifier:   78:B3:D6:FF:97:4C:60:A5:F8:AE:E2:6A:52:2B:14:17:2D:0F:94:92
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584F4974E76673B8B462CAC35600
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9803baf1-a6f3-36dc-8d06-e6315cddb2b3.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     19905
IP address blocks:        2604:2e8c:a800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:e7:66:73:b8:b4:62:ca:c3:56:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=67453317-5c6b-4e83-afd1-10990189e870
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:32:2b:81:ad:79:04:a2:b6:e5:03:51:c8:8c:
                    69:25:14:1e:f2:73:7f:12:cd:3d:05:ac:ee:4d:90:
                    26:f7:b4:85:ef:a6:bf:67:d6:f5:cf:bc:25:49:7d:
                    33:f3:2f:bf:b8:02:76:95:d8:45:7d:5d:f1:b0:16:
                    8c:3a:34:0d:bf:e7:6c:ea:43:8f:26:01:5e:f4:01:
                    a9:83:b8:d2:a2:70:2f:fa:97:21:12:85:b1:f3:a9:
                    06:41:28:61:7f:7e:69:4a:ed:b0:73:25:fb:5a:73:
                    af:fc:71:7d:05:64:b9:99:83:95:b9:40:1e:2d:ae:
                    42:fe:f3:f7:fd:b5:09:55:82:2a:cc:29:36:88:ce:
                    b9:c5:67:f0:22:7f:fc:92:1a:5c:1a:da:c7:11:0a:
                    5c:42:6b:ed:c0:82:7b:95:ea:86:46:28:51:58:61:
                    ef:d8:eb:f4:ef:25:a7:e8:20:02:83:a3:eb:ca:82:
                    cf:84:6c:d3:f8:8e:fa:ae:2c:c9:21:ea:fc:08:79:
                    82:a9:48:93:41:31:ab:ce:08:e4:a2:a5:11:05:b8:
                    b0:f0:80:12:36:d0:d9:5a:ea:a3:42:8d:9c:38:19:
                    1f:18:fa:ee:c3:20:2a:e4:27:fc:ad:fa:48:e4:d6:
                    53:d0:e1:4f:e2:e2:34:3c:a1:09:46:fe:af:21:e0:
                    54:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:B3:D6:FF:97:4C:60:A5:F8:AE:E2:6A:52:2B:14:17:2D:0F:94:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9803baf1-a6f3-36dc-8d06-e6315cddb2b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8c:a800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:cd:3b:c1:7d:30:88:05:48:47:df:27:68:85:bf:ba:ae:c4:
         e4:e7:b1:6e:5f:69:59:09:59:24:b2:b7:38:31:58:d0:a2:f5:
         82:2c:15:7b:80:ca:7b:42:be:78:7a:bf:d8:f1:b2:17:e9:6b:
         af:54:21:97:33:2e:65:44:5c:84:fc:fb:71:55:62:9e:ee:e4:
         ea:0a:95:43:80:a0:cb:8d:55:3d:75:fe:01:b4:2f:b0:f2:d4:
         6a:f5:b6:ec:1c:2b:21:cf:9e:49:25:8f:01:94:b5:b0:c4:ea:
         29:a2:37:c1:72:b6:d6:08:e6:e9:32:2a:82:cb:07:21:ce:70:
         e6:b1:97:df:42:27:bf:ac:b7:17:1c:71:a6:1a:01:8e:43:0f:
         d9:ea:e1:05:8c:a5:90:66:7c:06:03:53:ed:3f:7e:c9:86:4a:
         d6:e7:d0:5a:6c:59:5a:ac:b9:9a:0d:09:af:29:98:de:15:9e:
         99:81:07:94:24:74:5e:9a:0a:3e:7b:f2:16:f5:a0:1a:9f:4e:
         58:c5:5b:93:00:6b:8b:30:ac:dd:e3:d3:98:6a:9d:6c:ad:54:
         ca:3e:90:cf:de:51:c5:b9:88:c5:7a:56:05:51:7c:7f:e5:5d:
         64:87:cf:48:70:c4:c6:22:10:d3:83:18:43:62:b2:48:53:45:
         6a:e1:20:a1
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9JdOdmc7i0YsrDVgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
Njc0NTMzMTctNWM2Yi00ZTgzLWFmZDEtMTA5OTAxODllODcwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzIrga15BKK25QNRyIxpJRQe8nN/Es09Bazu
TZAm97SF76a/Z9b1z7wlSX0z8y+/uAJ2ldhFfV3xsBaMOjQNv+ds6kOPJgFe9AGp
g7jSonAv+pchEoWx86kGQShhf35pSu2wcyX7WnOv/HF9BWS5mYOVuUAeLa5C/vP3
/bUJVYIqzCk2iM65xWfwIn/8khpcGtrHEQpcQmvtwIJ7leqGRihRWGHv2Ov07yWn
6CACg6PryoLPhGzT+I76rizJIer8CHmCqUiTQTGrzgjkoqURBbiw8IASNtDZWuqj
Qo2cOBkfGPruwyAq5Cf8rfpI5NZT0OFP4uI0PKEJRv6vIeBUCQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFHiz1v+XTGCl+K7ialIrFBctD5SSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvOTgwM2JhZjEtYTZmMy0z
NmRjLThkMDYtZTYzMTVjZGRiMmIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujKgw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAoc07wX0wiAVIR98naIW/uq7E5Oexbl9pWQlZJLK3ODFY0KL1giwV
e4DKe0K+eHq/2PGyF+lrr1QhlzMuZURchPz7cVVinu7k6gqVQ4Cgy41VPXX+AbQv
sPLUavW27BwrIc+eSSWPAZS1sMTqKaI3wXK21gjm6TIqgssHIc5w5rGX30Inv6y3
FxxxphoBjkMP2erhBYylkGZ8BgNT7T9+yYZK1ufQWmxZWqy5mg0JrymY3hWemYEH
lCR0XpoKPnvyFvWgGp9OWMVbkwBrizCs3ePTmGqdbK1Uyj6Qz95RxbmIxXpWBVF8
f+VdZIfPSHDExiIQ04MYQ2KySFNFauEgoQ==
-----END CERTIFICATE-----
Generated at Sat Sep 26 02:26:28 2026 by rpki-client