Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9e2faa81-45b7-3e1f-bbe0-0b95a02a99b3.roa
File:                     9e2faa81-45b7-3e1f-bbe0-0b95a02a99b3.roa (raw, json)
Hash identifier:          07jtSiMBEuXZ6wU4JYw683nypyYk+1oGpgMXO4IkBwo=
Subject key identifier:   A5:33:34:88:EC:EB:BA:AA:DF:2E:A3:5E:0C:3B:EB:AE:48:B3:8C:62
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584F49742C9A0BE73F8DA4D2FF00
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9e2faa81-45b7-3e1f-bbe0-0b95a02a99b3.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     30036
IP address blocks:        2604:2e87:f000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:2c:9a:0b:e7:3f:8d:a4:d2:ff:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=0ef956cc-b628-4ff1-85e6-2d54fa97ae40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ad:b1:a9:87:0d:45:31:8c:58:cb:ac:39:94:
                    af:eb:02:8d:b1:96:fe:85:c0:45:6a:3d:92:7b:a6:
                    85:85:5c:fa:9d:ff:ac:36:97:71:2c:99:22:ed:5c:
                    9d:32:a6:92:92:01:29:ed:e2:f0:e1:b9:10:23:10:
                    ef:9b:f0:bc:3f:18:51:d0:eb:e9:3e:90:78:10:00:
                    ac:46:92:c3:4a:f5:58:13:46:61:3d:fb:b6:0c:0d:
                    65:f0:81:f8:05:e4:7d:2b:0f:b6:ff:50:00:81:c1:
                    57:cc:fc:98:60:d6:d5:39:82:8b:24:1e:da:a2:82:
                    e1:fb:66:e0:19:67:21:25:0d:bf:df:c8:37:d6:d0:
                    54:70:90:39:89:38:fa:39:95:24:fb:67:51:64:14:
                    4a:4a:cb:e2:a0:be:cd:59:da:81:36:d3:4b:01:78:
                    5d:8e:33:30:b7:39:d8:01:5f:75:cf:9a:d3:43:17:
                    86:e4:42:13:ba:9a:19:b6:74:eb:9a:61:c6:e1:d0:
                    6b:df:dc:69:4c:01:9d:ed:be:a7:6f:79:88:6f:38:
                    80:2e:39:bd:15:74:0b:66:b0:22:1a:b9:19:cd:a7:
                    58:45:2c:e5:18:c8:c5:1e:2d:76:01:34:38:8f:f3:
                    8e:bf:24:33:b0:46:6c:01:94:59:9a:a3:55:7b:f0:
                    04:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:33:34:88:EC:EB:BA:AA:DF:2E:A3:5E:0C:3B:EB:AE:48:B3:8C:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9e2faa81-45b7-3e1f-bbe0-0b95a02a99b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e87:f000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:4a:f5:bd:9c:40:f8:bf:2f:98:4d:c7:0c:af:29:6b:d0:03:
         f1:ff:f4:39:c4:cd:ad:3e:aa:93:82:15:00:fa:43:e1:4c:ed:
         e9:d6:86:bf:c8:38:36:f5:b7:b1:25:97:fa:7a:dd:35:df:b0:
         2c:da:1c:28:64:ef:b0:f4:75:e6:6c:c5:5c:12:49:6e:58:af:
         d6:29:57:58:f5:54:5b:56:f1:ad:3f:1d:31:b2:88:a0:08:f1:
         c3:9b:b6:aa:a1:f0:97:6c:a4:55:37:ec:dc:1d:ba:9b:c0:31:
         7c:31:21:47:da:75:fd:9f:2d:be:3e:58:8c:27:c3:3b:5f:74:
         f9:72:04:ce:8b:81:28:a8:99:f4:99:87:f0:49:d8:f0:23:50:
         c0:8d:95:a9:71:b6:64:e3:b4:f3:2f:90:9a:b6:39:cd:67:02:
         c3:26:da:2a:02:75:5d:9b:b2:a9:96:7d:30:0d:70:68:d8:09:
         24:b9:e6:a7:ff:af:6d:16:e5:77:0a:eb:fe:1c:fa:a0:b7:2f:
         a0:13:e6:38:cd:65:8b:8a:7d:08:00:1c:da:8e:1a:37:53:23:
         9a:71:d9:cb:0a:69:af:24:a1:a1:bc:0c:2f:4a:12:5b:3d:81:
         39:58:09:2a:44:f0:2d:d0:2a:a3:38:6a:ca:fc:d9:7c:86:bb:
         4b:12:08:dd
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9JdCyaC+c/jaTS/wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
MGVmOTU2Y2MtYjYyOC00ZmYxLTg1ZTYtMmQ1NGZhOTdhZTQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAva2xqYcNRTGMWMusOZSv6wKNsZb+hcBFaj2S
e6aFhVz6nf+sNpdxLJki7VydMqaSkgEp7eLw4bkQIxDvm/C8PxhR0OvpPpB4EACs
RpLDSvVYE0ZhPfu2DA1l8IH4BeR9Kw+2/1AAgcFXzPyYYNbVOYKLJB7aooLh+2bg
GWchJQ2/38g31tBUcJA5iTj6OZUk+2dRZBRKSsvioL7NWdqBNtNLAXhdjjMwtznY
AV91z5rTQxeG5EITupoZtnTrmmHG4dBr39xpTAGd7b6nb3mIbziALjm9FXQLZrAi
GrkZzadYRSzlGMjFHi12ATQ4j/OOvyQzsEZsAZRZmqNVe/AE/wIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFKUzNIjs67qq3y6jXgw7665Is4xiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvOWUyZmFhODEtNDViNy0z
ZTFmLWJiZTAtMGI5NWEwMmE5OWIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuh/Aw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEABEr1vZxA+L8vmE3HDK8pa9AD8f/0OcTNrT6qk4IVAPpD4Uzt6daG
v8g4NvW3sSWX+nrdNd+wLNocKGTvsPR15mzFXBJJbliv1ilXWPVUW1bxrT8dMbKI
oAjxw5u2qqHwl2ykVTfs3B26m8AxfDEhR9p1/Z8tvj5YjCfDO190+XIEzouBKKiZ
9JmH8EnY8CNQwI2VqXG2ZOO08y+QmrY5zWcCwybaKgJ1XZuyqZZ9MA1waNgJJLnm
p/+vbRbldwrr/hz6oLcvoBPmOM1li4p9CAAc2o4aN1MjmnHZywppryShobwML0oS
Wz2BOVgJKkTwLdAqozhqyvzZfIa7SxII3Q==
-----END CERTIFICATE-----
Generated at Sat Sep 26 12:33:07 2026 by rpki-client