Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9eedbce7-fcfd-3f75-9ae1-1c9547aa0166.roa
File:                     9eedbce7-fcfd-3f75-9ae1-1c9547aa0166.roa (raw, json)
Hash identifier:          JqKhBsZlPriCT5S0TqgQtG5ZMLF+OQIGM4cG18VfzoQ=
Subject key identifier:   2E:D2:A0:FE:42:67:60:50:0B:D1:4E:58:E5:F9:EE:D8:42:07:AE:F1
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584DC565C7FD5B389431DBA07980
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9eedbce7-fcfd-3f75-9ae1-1c9547aa0166.roa
Signing time:             Sat 09 May 2026 01:00:25 +0000
ROA not before:           Sat 09 May 2026 01:00:25 +0000
ROA not after:            Fri 07 Aug 2026 01:00:25 +0000
asID:                     19905
IP address blocks:        2604:2e8d:c000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c5:65:c7:fd:5b:38:94:31:db:a0:79:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: May  9 01:00:25 2026 GMT
            Not After : Aug  7 01:00:25 2026 GMT
        Subject: CN=18f6be5a-a8f3-4d1f-b42f-b824be75abdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:48:f2:f5:2f:d8:3f:1b:e2:a2:e7:3b:36:a4:
                    24:7a:84:ea:ac:f6:49:54:05:93:89:2c:21:06:25:
                    13:12:15:5d:88:50:78:ad:06:94:56:0b:b6:2b:88:
                    76:22:d3:f9:10:c2:87:01:1f:1d:a4:61:46:91:7c:
                    35:e8:a9:92:0a:67:f5:a8:f7:db:bd:35:18:0f:eb:
                    ef:7d:bb:ee:f9:6c:e1:51:ab:91:4c:42:00:8a:9c:
                    2e:29:11:cc:f8:6b:1f:a1:4f:ce:0d:cc:4a:13:ad:
                    80:bb:0d:be:1f:c0:ec:d2:22:a9:05:8d:87:f5:ce:
                    e7:4f:7c:f5:36:d0:e8:ec:bf:40:7b:92:13:65:e7:
                    ec:f5:bd:e3:61:42:18:51:20:4a:7e:56:8d:93:c2:
                    2a:5d:ea:49:b2:21:77:0b:e3:e1:8c:94:43:4d:67:
                    09:9e:78:39:dc:a7:43:8c:be:1f:f4:91:37:7b:33:
                    bc:cb:52:7c:50:f0:a9:73:ea:5e:9a:be:c7:bb:df:
                    f5:f7:75:60:05:c6:12:78:6f:9f:a1:92:cf:72:60:
                    79:30:8b:b6:45:6f:ed:20:37:36:1b:be:38:21:00:
                    6d:8a:29:7e:87:34:ce:7f:65:b4:52:de:5f:1c:dc:
                    00:86:02:3a:ec:ae:3f:79:6c:0a:b6:16:1f:30:1d:
                    7f:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:D2:A0:FE:42:67:60:50:0B:D1:4E:58:E5:F9:EE:D8:42:07:AE:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9eedbce7-fcfd-3f75-9ae1-1c9547aa0166.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8d:c000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:0c:36:60:10:b3:9f:eb:53:43:ec:2f:6e:5b:67:ce:a6:00:
         fa:19:23:f4:88:d7:0e:02:81:1e:92:9d:4f:3d:6d:0a:3d:da:
         5c:b2:89:27:42:f5:30:b9:f5:ff:22:98:0d:32:48:16:38:d9:
         a4:00:b7:61:48:2f:87:65:8e:a0:22:ad:33:c3:19:a4:e5:2e:
         18:d0:f1:e4:c0:11:7a:6c:69:b6:e9:26:01:03:c0:6d:b2:8f:
         ae:0b:6e:76:c0:f3:7e:dc:2c:81:3d:79:cf:d8:9b:87:b7:e0:
         8d:a6:78:7c:09:d9:64:f2:b1:29:4b:4e:a4:87:5b:1d:cb:55:
         33:a6:3a:b7:bd:9e:1d:41:4e:16:c7:4c:f7:01:be:68:55:2d:
         2d:c9:30:ab:65:f5:54:66:23:a7:71:88:b5:cd:9b:de:ca:79:
         a9:43:b9:2d:14:42:61:37:c4:03:f6:40:88:3e:d2:28:58:59:
         f5:78:ae:26:29:fa:5d:0e:f2:dd:0b:85:1b:b4:c2:a5:c1:3b:
         b9:b9:6c:d6:68:c3:f0:34:2b:fe:93:24:3f:81:d7:95:77:2c:
         68:38:3c:6c:76:8e:3b:58:0e:e4:ed:b1:9b:c2:3b:84:a7:7b:
         1f:b3:4c:81:f7:a3:ac:00:32:a6:d9:8d:26:b9:aa:3a:6f:95:
         15:da:9d:ec
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE3FZcf9WziUMdugeYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI2MDUwOTAxMDAyNVoXDTI2MDgwNzAxMDAyNVowLzEtMCsGA1UEAxMk
MThmNmJlNWEtYThmMy00ZDFmLWI0MmYtYjgyNGJlNzVhYmRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0jy9S/YPxviouc7NqQkeoTqrPZJVAWTiSwh
BiUTEhVdiFB4rQaUVgu2K4h2ItP5EMKHAR8dpGFGkXw16KmSCmf1qPfbvTUYD+vv
fbvu+WzhUauRTEIAipwuKRHM+GsfoU/ODcxKE62Auw2+H8Ds0iKpBY2H9c7nT3z1
NtDo7L9Ae5ITZefs9b3jYUIYUSBKflaNk8IqXepJsiF3C+PhjJRDTWcJnng53KdD
jL4f9JE3ezO8y1J8UPCpc+pemr7Hu9/193VgBcYSeG+foZLPcmB5MIu2RW/tIDc2
G744IQBtiil+hzTOf2W0Ut5fHNwAhgI67K4/eWwKthYfMB1/HQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFC7SoP5CZ2BQC9FOWOX57thCB67xMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvOWVlZGJjZTctZmNmZC0z
Zjc1LTlhZTEtMWM5NTQ3YWEwMTY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujcAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAHgw2YBCzn+tTQ+wvbltnzqYA+hkj9IjXDgKBHpKdTz1tCj3aXLKJ
J0L1MLn1/yKYDTJIFjjZpAC3YUgvh2WOoCKtM8MZpOUuGNDx5MARemxptukmAQPA
bbKPrgtudsDzftwsgT15z9ibh7fgjaZ4fAnZZPKxKUtOpIdbHctVM6Y6t72eHUFO
FsdM9wG+aFUtLckwq2X1VGYjp3GItc2b3sp5qUO5LRRCYTfEA/ZAiD7SKFhZ9Xiu
Jin6XQ7y3QuFG7TCpcE7ubls1mjD8DQr/pMkP4HXlXcsaDg8bHaOO1gO5O2xm8I7
hKd7H7NMgfejrAAyptmNJrmqOm+VFdqd7A==
-----END CERTIFICATE-----
Generated at Wed May 13 13:13:27 2026 by rpki-client