Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b886511b-9a77-36d0-bc7a-04e126114b34.roa
File:                     b886511b-9a77-36d0-bc7a-04e126114b34.roa (raw, json)
Hash identifier:          pdEDhZ119v6vhUNs6vdVdNxy/BVUw5cQmCKoBfSYj8Q=
Subject key identifier:   E2:12:3C:19:24:C4:78:59:CA:C4:F0:89:10:45:F7:3E:D1:D8:B8:7C
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584B5C6CB2B63FF42BA31F775FC0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b886511b-9a77-36d0-bc7a-04e126114b34.roa
Signing time:             Tue 30 Sep 2025 01:00:31 +0000
ROA not before:           Tue 30 Sep 2025 01:00:31 +0000
ROA not after:            Mon 29 Dec 2025 02:00:31 +0000
asID:                     19905
IP address blocks:        2604:2e88:dc00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5c:6c:b2:b6:3f:f4:2b:a3:1f:77:5f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Sep 30 01:00:31 2025 GMT
            Not After : Dec 29 02:00:31 2025 GMT
        Subject: CN=9eb78c3e-9571-40ce-9975-7986f61a3f7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:80:12:b5:61:a6:0c:8e:43:e1:0e:f0:77:a4:
                    7b:26:05:45:54:6c:4d:d6:46:e2:53:36:b5:3d:ad:
                    94:db:65:46:48:c2:9b:87:f6:2c:8c:29:80:23:47:
                    10:31:8c:ad:b7:59:8f:ba:ca:42:6d:95:66:ca:fb:
                    b7:a9:e1:1e:c0:bb:a4:85:e2:42:bf:92:60:b5:fb:
                    ad:b1:d5:b4:51:d8:14:e8:0c:6b:cf:f9:43:a6:82:
                    e2:50:35:16:b2:f6:d4:71:d9:a3:9f:b7:50:d3:a8:
                    dc:bf:08:38:b3:cb:fd:f8:a8:20:4e:e3:a1:c9:bf:
                    00:65:76:c8:6e:7b:19:85:5b:fb:4d:47:fd:12:87:
                    c0:78:76:17:5f:cb:79:30:b2:37:74:4f:7b:07:f4:
                    5f:fe:39:64:d3:12:14:3c:db:ae:7d:8e:fe:cb:5a:
                    4b:90:0f:82:0f:4c:68:27:7a:9b:81:68:6a:41:2b:
                    cc:cb:90:ec:81:d3:ff:2f:7d:b2:cc:9d:98:d0:0c:
                    42:a7:da:12:f9:1e:e4:52:97:2e:b1:e9:4b:42:f0:
                    07:29:b6:3e:e7:3e:43:68:67:5d:3a:f3:ef:91:26:
                    d9:7b:cc:9f:54:2b:05:72:7b:e0:22:0e:60:03:f8:
                    3c:07:ea:05:b1:d1:1d:f6:d6:3a:7f:e5:4a:15:08:
                    66:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:12:3C:19:24:C4:78:59:CA:C4:F0:89:10:45:F7:3E:D1:D8:B8:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b886511b-9a77-36d0-bc7a-04e126114b34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e88:dc00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:6b:c0:cd:cb:00:bb:f0:d2:10:55:03:ad:b3:6e:af:df:61:
         01:c5:89:14:e3:1f:35:86:13:de:d0:fc:19:cf:c8:bb:46:43:
         eb:86:67:62:50:f5:a7:65:59:c2:1a:2f:2c:ed:53:2e:a2:f9:
         da:7a:79:e6:15:1d:bc:ab:16:8a:26:9b:c7:c8:5a:a8:11:21:
         2b:ce:d0:01:cd:ee:55:e4:d2:7c:5f:ec:10:7c:ad:c2:f1:24:
         d8:d5:ea:bc:c0:8c:cb:1d:c1:03:eb:d4:9d:17:20:7e:74:16:
         ee:f0:fc:c0:f3:6b:25:6c:ed:a6:e7:5f:61:d7:97:40:e2:f7:
         46:a1:6e:b9:a5:5f:93:54:78:38:4e:f0:f1:d2:9d:0b:db:24:
         11:aa:c7:6e:4d:ad:7c:e2:47:c1:26:c3:69:6f:5d:2e:db:20:
         ba:bd:1a:7c:c8:f3:aa:bc:04:b1:6e:4e:bd:ce:cb:d3:a5:81:
         3d:fd:5b:5a:e1:ed:ef:1a:46:54:fb:d3:8e:39:5d:4f:7a:04:
         02:4c:50:91:d3:4e:f9:9c:16:f7:8f:d0:c7:c7:28:31:df:17:
         94:4e:cc:d1:38:30:e9:e9:62:95:a5:c9:cc:88:ba:34:43:68:
         84:87:76:bb:b7:38:8b:a6:76:ac:ed:c8:7d:b1:61:b8:cd:46:
         15:62:f2:1d
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEtcbLK2P/Qrox93X8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI1MDkzMDAxMDAzMVoXDTI1MTIyOTAyMDAzMVowLzEtMCsGA1UEAxMk
OWViNzhjM2UtOTU3MS00MGNlLTk5NzUtNzk4NmY2MWEzZjdjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhYAStWGmDI5D4Q7wd6R7JgVFVGxN1kbiUza1
Pa2U22VGSMKbh/YsjCmAI0cQMYytt1mPuspCbZVmyvu3qeEewLukheJCv5Jgtfut
sdW0UdgU6Axrz/lDpoLiUDUWsvbUcdmjn7dQ06jcvwg4s8v9+KggTuOhyb8AZXbI
bnsZhVv7TUf9EofAeHYXX8t5MLI3dE97B/Rf/jlk0xIUPNuufY7+y1pLkA+CD0xo
J3qbgWhqQSvMy5DsgdP/L32yzJ2Y0AxCp9oS+R7kUpcuselLQvAHKbY+5z5DaGdd
OvPvkSbZe8yfVCsFcnvgIg5gA/g8B+oFsdEd9tY6f+VKFQhmJwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFOISPBkkxHhZysTwiRBF9z7R2Lh8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYjg4NjUxMWItOWE3Ny0z
NmQwLWJjN2EtMDRlMTI2MTE0YjM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiNww
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAR2vAzcsAu/DSEFUDrbNur99hAcWJFOMfNYYT3tD8Gc/Iu0ZD64Zn
YlD1p2VZwhovLO1TLqL52np55hUdvKsWiiabx8haqBEhK87QAc3uVeTSfF/sEHyt
wvEk2NXqvMCMyx3BA+vUnRcgfnQW7vD8wPNrJWztpudfYdeXQOL3RqFuuaVfk1R4
OE7w8dKdC9skEarHbk2tfOJHwSbDaW9dLtsgur0afMjzqrwEsW5Ovc7L06WBPf1b
WuHt7xpGVPvTjjldT3oEAkxQkdNO+ZwW94/Qx8coMd8XlE7M0Tgw6elilaXJzIi6
NENohId2u7c4i6Z2rO3IfbFhuM1GFWLyHQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 05:36:48 2025 by rpki-client