Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a150822d-c7e4-350c-a8b7-bc98b7930af7.roa
File:                     a150822d-c7e4-350c-a8b7-bc98b7930af7.roa (raw, json)
Hash identifier:          P+TlMEsUXjlYDwdqNY7UJLzHPSwKptBi8uskPF3tQu4=
Subject key identifier:   FB:5F:FD:24:48:6F:43:59:70:19:FD:22:6D:B7:8C:CB:F5:54:7B:5B
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584DC565C72B86F3E496B0D903E0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a150822d-c7e4-350c-a8b7-bc98b7930af7.roa
Signing time:             Sat 09 May 2026 01:00:25 +0000
ROA not before:           Sat 09 May 2026 01:00:25 +0000
ROA not after:            Fri 07 Aug 2026 01:00:25 +0000
asID:                     19905
IP address blocks:        2604:2e8a:3400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c5:65:c7:2b:86:f3:e4:96:b0:d9:03:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: May  9 01:00:25 2026 GMT
            Not After : Aug  7 01:00:25 2026 GMT
        Subject: CN=ef935a2b-92f9-4173-8193-ad837c5a716e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:2d:8d:62:df:e1:20:f7:0d:88:71:bf:cb:d0:
                    43:92:66:43:50:bc:f5:02:dd:78:e3:3d:a5:1b:2b:
                    8e:ce:ef:96:cd:c1:a2:69:de:c0:8a:b1:14:05:d3:
                    65:5d:23:bd:c4:07:f3:de:88:cc:82:29:5c:06:d2:
                    aa:76:9e:52:a4:72:43:88:b1:7d:57:1a:20:44:a3:
                    dc:6e:57:e1:d3:53:f4:c5:f9:79:70:45:16:b1:8c:
                    ec:dd:db:ea:67:67:c2:e9:79:68:c0:10:83:b1:f4:
                    b1:06:c1:0f:07:2a:53:66:68:fd:73:56:ed:72:a6:
                    c4:fe:82:cf:df:b7:c2:be:52:8f:da:88:c9:23:9e:
                    7f:cf:84:17:a0:b9:e1:d7:18:e9:dc:d8:cb:76:7d:
                    34:92:bd:e6:8b:91:09:7d:06:f5:87:3b:6f:63:56:
                    32:fe:7f:e4:66:76:ff:22:19:3a:55:4c:17:28:65:
                    2c:57:ae:e3:f6:7c:d3:ae:35:f1:76:d0:30:b2:9b:
                    21:da:01:49:9a:ab:7c:b1:0b:ba:a0:51:d6:2a:37:
                    9a:1f:6f:0e:06:d0:68:6f:d3:86:6d:2f:24:1d:ed:
                    72:34:93:a8:19:e1:81:30:bb:ed:39:4b:b1:66:0f:
                    f9:6d:f6:7a:14:69:16:a4:7c:14:6c:80:a5:1a:7a:
                    9c:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:5F:FD:24:48:6F:43:59:70:19:FD:22:6D:B7:8C:CB:F5:54:7B:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a150822d-c7e4-350c-a8b7-bc98b7930af7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8a:3400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:47:25:7d:45:2d:aa:d6:d7:70:6d:89:65:9c:2c:ef:95:ec:
         dc:4c:05:84:50:69:6f:59:05:4b:51:0b:7b:0e:90:06:fa:25:
         89:9e:ba:f8:27:4e:eb:a7:e0:c2:be:27:3f:80:76:fa:b5:50:
         a0:54:f1:bf:ac:32:c1:a3:ac:01:9a:e2:8c:4c:38:c8:43:10:
         55:a1:51:ce:f9:01:7a:8c:3b:e6:a0:f6:dd:6d:e9:fd:c6:a8:
         b6:3d:ba:bf:98:fa:83:67:f7:2f:8a:88:cc:55:8a:1a:f3:5d:
         1e:ad:05:32:ee:ee:19:50:d1:c5:23:bd:62:4e:be:6b:e7:84:
         a8:40:65:a1:ed:39:9b:8a:77:de:3a:4a:71:e7:79:09:43:16:
         d9:a7:f9:76:06:59:b8:2a:20:4a:6b:c4:41:64:b2:59:ad:4b:
         04:83:71:1f:f1:04:d1:2c:59:74:ad:c0:5c:e4:f2:0a:3f:1b:
         20:6a:7f:8b:5c:ce:67:33:d3:77:e8:25:21:ea:ab:9b:a0:6e:
         db:0e:8f:7b:22:10:e5:41:7c:c0:82:3e:89:bb:f8:de:e4:d0:
         00:c2:4a:98:7f:04:47:37:47:79:16:d9:a3:9a:45:01:48:6a:
         7f:1e:11:1a:9b:d0:06:37:0b:16:4e:9e:ed:d2:79:8d:24:42:
         25:21:e6:f4
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE3FZccrhvPklrDZA+AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI2MDUwOTAxMDAyNVoXDTI2MDgwNzAxMDAyNVowLzEtMCsGA1UEAxMk
ZWY5MzVhMmItOTJmOS00MTczLTgxOTMtYWQ4MzdjNWE3MTZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAii2NYt/hIPcNiHG/y9BDkmZDULz1At144z2l
GyuOzu+WzcGiad7AirEUBdNlXSO9xAfz3ojMgilcBtKqdp5SpHJDiLF9VxogRKPc
blfh01P0xfl5cEUWsYzs3dvqZ2fC6XlowBCDsfSxBsEPBypTZmj9c1btcqbE/oLP
37fCvlKP2ojJI55/z4QXoLnh1xjp3NjLdn00kr3mi5EJfQb1hztvY1Yy/n/kZnb/
Ihk6VUwXKGUsV67j9nzTrjXxdtAwspsh2gFJmqt8sQu6oFHWKjeaH28OBtBob9OG
bS8kHe1yNJOoGeGBMLvtOUuxZg/5bfZ6FGkWpHwUbIClGnqcNwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFPtf/SRIb0NZcBn9Im23jMv1VHtbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYTE1MDgyMmQtYzdlNC0z
NTBjLWE4YjctYmM5OGI3OTMwYWY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuijQw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEACUclfUUtqtbXcG2JZZws75Xs3EwFhFBpb1kFS1ELew6QBvoliZ66
+CdO66fgwr4nP4B2+rVQoFTxv6wywaOsAZrijEw4yEMQVaFRzvkBeow75qD23W3p
/caotj26v5j6g2f3L4qIzFWKGvNdHq0FMu7uGVDRxSO9Yk6+a+eEqEBloe05m4p3
3jpKced5CUMW2af5dgZZuCogSmvEQWSyWa1LBINxH/EE0SxZdK3AXOTyCj8bIGp/
i1zOZzPTd+glIeqrm6Bu2w6PeyIQ5UF8wII+ibv43uTQAMJKmH8ERzdHeRbZo5pF
AUhqfx4RGpvQBjcLFk6e7dJ5jSRCJSHm9A==
-----END CERTIFICATE-----
Generated at Wed May 13 10:28:40 2026 by rpki-client