Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bacf42f5-7dd1-355c-a59d-50c8e40c4a7b.roa
File:                     bacf42f5-7dd1-355c-a59d-50c8e40c4a7b.roa (raw, json)
Hash identifier:          KN+vuUHnb12beY/ATy6wB+OnlRDQWy17Yj2YfJayGOA=
Subject key identifier:   E4:D7:5B:40:C2:A9:89:5A:AC:ED:6A:69:61:59:BB:12:5B:1D:37:71
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584DCDC5D66B5B390C9B6819C080
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bacf42f5-7dd1-355c-a59d-50c8e40c4a7b.roa
Signing time:             Tue 12 May 2026 01:00:24 +0000
ROA not before:           Tue 12 May 2026 01:00:24 +0000
ROA not after:            Mon 10 Aug 2026 01:00:24 +0000
asID:                     19905
IP address blocks:        2604:2e89:c00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cd:c5:d6:6b:5b:39:0c:9b:68:19:c0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: May 12 01:00:24 2026 GMT
            Not After : Aug 10 01:00:24 2026 GMT
        Subject: CN=794b21ea-5893-4070-bc52-dd99cf30c012
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:82:2b:48:d5:6a:ff:57:c3:1e:b6:7a:33:6e:
                    bc:c7:86:58:02:16:0d:c0:5c:52:c2:3a:6c:1a:17:
                    ca:e1:51:c5:2f:f2:0c:08:b8:77:64:ae:82:b7:9c:
                    92:47:7b:e8:b1:94:88:b4:ae:c4:d5:51:cb:fd:14:
                    c1:7d:81:9b:d0:4e:ba:e7:c7:f3:58:fc:b4:66:0a:
                    cd:6c:d1:0a:a7:4f:a1:12:e3:c9:26:6a:8f:e1:b8:
                    13:c9:5a:c5:0a:23:18:b6:01:2e:9d:89:49:08:2c:
                    00:f1:50:be:3f:f2:94:62:f7:db:e2:24:a6:16:06:
                    3f:1b:f9:74:34:ca:b5:2d:7a:f7:a6:07:f0:55:db:
                    96:1c:3c:17:32:76:60:11:94:a3:28:d7:02:6e:35:
                    8b:b7:de:8c:50:a4:2c:63:ac:63:33:d6:14:1c:d0:
                    ae:b5:7c:5b:5c:f2:40:e8:04:91:8d:3c:3b:79:46:
                    b4:91:22:16:5a:84:69:ba:bc:f6:6b:4c:2a:2b:d1:
                    ed:5b:8e:ee:c8:7d:e6:c4:bf:43:b6:01:01:0c:16:
                    4c:da:0b:39:44:36:55:62:ac:1d:44:ad:c1:66:26:
                    8d:75:69:da:5d:e3:a2:79:ce:1e:ed:4c:e5:56:60:
                    b2:84:f9:ec:c0:33:b3:84:4a:44:80:b8:db:2a:6a:
                    e2:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:D7:5B:40:C2:A9:89:5A:AC:ED:6A:69:61:59:BB:12:5B:1D:37:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bacf42f5-7dd1-355c-a59d-50c8e40c4a7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e89:c00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:e8:2d:86:86:67:c4:56:b2:47:e2:fe:7d:de:ac:62:b9:da:
         c0:1c:12:9b:a3:f8:7b:c5:a2:93:31:80:8f:ce:7c:f6:ae:de:
         7c:57:30:ae:e0:d1:a2:df:7c:23:c7:8f:a1:e5:a8:2c:d3:12:
         2f:23:c1:eb:ac:2e:58:32:e2:f2:f4:01:91:07:19:dc:23:1d:
         78:81:c9:7a:0d:1a:08:2a:04:d6:47:d9:be:dd:8b:76:21:a1:
         6f:67:80:df:d6:b1:3c:ac:24:ee:b0:84:20:ea:d0:17:09:ae:
         7e:84:4a:5f:cd:39:b3:81:fc:c2:86:3d:1d:f8:28:6d:69:40:
         21:ea:31:55:81:8a:52:71:c9:d3:62:3f:29:fa:c7:ed:6c:a2:
         d5:2a:ed:8c:6e:e3:0d:db:f1:49:58:6a:22:74:00:35:29:d3:
         7a:34:b7:da:43:d3:c4:1b:f5:4f:65:0b:c1:50:e3:71:b5:5b:
         c0:fa:74:0c:ad:aa:b0:81:72:e1:23:6d:30:fe:17:4f:b0:13:
         54:8c:cb:ee:7e:df:e0:25:ee:27:ba:5c:14:5f:24:2f:c8:56:
         e7:97:e4:47:24:dd:09:30:22:19:b8:cb:4f:3a:65:e9:8c:2e:
         39:6d:7c:12:ff:6e:38:52:74:c4:4a:42:78:e1:d3:78:61:64:
         1e:79:3a:8f
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE3NxdZrWzkMm2gZwIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI2MDUxMjAxMDAyNFoXDTI2MDgxMDAxMDAyNFowLzEtMCsGA1UEAxMk
Nzk0YjIxZWEtNTg5My00MDcwLWJjNTItZGQ5OWNmMzBjMDEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4IrSNVq/1fDHrZ6M268x4ZYAhYNwFxSwjps
GhfK4VHFL/IMCLh3ZK6Ct5ySR3vosZSItK7E1VHL/RTBfYGb0E6658fzWPy0ZgrN
bNEKp0+hEuPJJmqP4bgTyVrFCiMYtgEunYlJCCwA8VC+P/KUYvfb4iSmFgY/G/l0
NMq1LXr3pgfwVduWHDwXMnZgEZSjKNcCbjWLt96MUKQsY6xjM9YUHNCutXxbXPJA
6ASRjTw7eUa0kSIWWoRpurz2a0wqK9HtW47uyH3mxL9DtgEBDBZM2gs5RDZVYqwd
RK3BZiaNdWnaXeOiec4e7UzlVmCyhPnswDOzhEpEgLjbKmriEwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFOTXW0DCqYlarO1qaWFZuxJbHTdxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYmFjZjQyZjUtN2RkMS0z
NTVjLWE1OWQtNTBjOGU0MGM0YTdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiQww
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAnugthoZnxFayR+L+fd6sYrnawBwSm6P4e8WikzGAj8589q7efFcw
ruDRot98I8ePoeWoLNMSLyPB66wuWDLi8vQBkQcZ3CMdeIHJeg0aCCoE1kfZvt2L
diGhb2eA39axPKwk7rCEIOrQFwmufoRKX805s4H8woY9HfgobWlAIeoxVYGKUnHJ
02I/KfrH7Wyi1SrtjG7jDdvxSVhqInQANSnTejS32kPTxBv1T2ULwVDjcbVbwPp0
DK2qsIFy4SNtMP4XT7ATVIzL7n7f4CXuJ7pcFF8kL8hW55fkRyTdCTAiGbjLTzpl
6YwuOW18Ev9uOFJ0xEpCeOHTeGFkHnk6jw==
-----END CERTIFICATE-----
Generated at Wed May 13 06:31:37 2026 by rpki-client