Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/00c58ad7-2853-3868-bc67-8becb647013d.roa
File:                     00c58ad7-2853-3868-bc67-8becb647013d.roa (raw, json)
Hash identifier:          iBRkEXTxUABr5zDh6uZ5m1J5fDIJolAufLW543m6TDE=
Subject key identifier:   4E:B7:6C:95:35:DB:69:58:03:55:F9:45:78:2C:12:12:EB:1C:91:31
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584F49746B8014E3C9CAEEA1C6C0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/00c58ad7-2853-3868-bc67-8becb647013d.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     19905
IP address blocks:        2604:2e88:4000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:6b:80:14:e3:c9:ca:ee:a1:c6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=83a527bf-736c-4870-bce0-4b407700da47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:51:c5:1b:d2:da:49:93:ba:19:74:ac:d9:f8:
                    0f:45:41:ea:12:28:3a:b8:2b:fd:d9:9e:41:6f:4f:
                    0c:c2:23:ed:71:06:98:1c:8c:ac:6a:ce:94:32:d6:
                    54:fc:aa:f6:b6:5e:c1:2d:e0:ca:d8:db:64:0d:2e:
                    f1:3e:68:a7:06:15:84:e5:b1:48:1a:ef:35:31:34:
                    08:06:5f:19:55:88:06:16:33:ac:03:85:95:de:65:
                    ac:b0:3a:3e:57:66:e7:68:6a:65:43:a4:1c:16:d3:
                    dc:35:65:22:c8:85:28:de:75:92:04:b0:85:c2:c3:
                    b1:b9:16:75:b3:37:d3:d5:14:26:04:b7:e7:9a:7e:
                    aa:49:43:d5:14:98:3f:f8:d9:e0:66:7a:ac:26:f9:
                    7f:b5:d8:ac:3f:d5:f7:a4:bb:f6:0c:a9:c7:da:52:
                    bf:05:24:7f:a1:d4:48:c9:8a:c2:c8:b2:01:4b:7f:
                    e0:b5:b9:da:30:59:12:c7:bd:e8:35:bd:3f:09:4a:
                    75:1f:7d:d7:dd:7c:aa:03:7e:87:19:b7:30:89:55:
                    52:80:a5:ce:03:5d:7c:76:22:d8:f7:4e:49:f8:dd:
                    f0:fb:ea:f5:ed:83:68:4c:2c:70:c5:53:50:04:6d:
                    91:49:1c:8e:86:53:a6:fd:53:d5:83:8f:1b:c1:ca:
                    fe:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:B7:6C:95:35:DB:69:58:03:55:F9:45:78:2C:12:12:EB:1C:91:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/00c58ad7-2853-3868-bc67-8becb647013d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e88:4000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:92:a5:18:fe:7a:52:1b:0a:04:ec:9e:19:ce:06:f7:11:db:
         e4:7e:47:ce:bb:14:35:97:ce:51:d8:43:4c:8b:f4:f5:4a:3a:
         3a:a3:ca:e5:47:c4:c9:36:6b:15:ac:b5:26:5e:18:d9:d3:cb:
         b5:32:82:ba:04:89:6b:d5:5f:2c:e1:94:57:3c:c0:30:99:96:
         ec:ba:f6:16:13:4b:c8:2e:93:d7:44:45:5c:99:b5:e3:ac:31:
         9a:20:04:44:ab:de:c2:8e:5a:ba:15:81:90:0c:75:c8:a1:2f:
         39:b1:56:0d:fd:54:26:90:14:fc:37:28:da:0d:6d:3a:76:de:
         df:49:15:f2:db:c7:b3:ec:35:96:7a:81:a5:a5:9c:7d:c9:ef:
         5e:32:d6:43:01:93:72:5f:af:f5:ad:c0:13:aa:e9:b6:cd:b3:
         f6:28:bd:56:42:e0:bc:e2:ac:fb:b8:e0:d2:02:31:62:b3:25:
         88:9a:be:1f:3b:f7:fd:c7:55:d5:96:78:00:30:c1:f6:29:b3:
         8b:6a:fd:a1:e9:dd:64:72:ca:8c:4e:e0:98:aa:97:3a:f8:5e:
         f0:5e:c9:cb:f8:17:c0:af:31:38:34:22:bd:16:b5:70:a8:5f:
         e3:6b:37:f4:60:0a:d0:0b:65:83:ae:7d:b3:c1:fb:e5:51:9e:
         a6:5b:5d:ff
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9JdGuAFOPJyu6hxsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
ODNhNTI3YmYtNzM2Yy00ODcwLWJjZTAtNGI0MDc3MDBkYTQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVHFG9LaSZO6GXSs2fgPRUHqEig6uCv92Z5B
b08MwiPtcQaYHIysas6UMtZU/Kr2tl7BLeDK2NtkDS7xPminBhWE5bFIGu81MTQI
Bl8ZVYgGFjOsA4WV3mWssDo+V2bnaGplQ6QcFtPcNWUiyIUo3nWSBLCFwsOxuRZ1
szfT1RQmBLfnmn6qSUPVFJg/+NngZnqsJvl/tdisP9X3pLv2DKnH2lK/BSR/odRI
yYrCyLIBS3/gtbnaMFkSx73oNb0/CUp1H33X3XyqA36HGbcwiVVSgKXOA118diLY
905J+N3w++r17YNoTCxwxVNQBG2RSRyOhlOm/VPVg48bwcr+fQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFE63bJU122lYA1X5RXgsEhLrHJExMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMDBjNThhZDctMjg1My0z
ODY4LWJjNjctOGJlY2I2NDcwMTNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiEAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAhJKlGP56UhsKBOyeGc4G9xHb5H5HzrsUNZfOUdhDTIv09Uo6OqPK
5UfEyTZrFay1Jl4Y2dPLtTKCugSJa9VfLOGUVzzAMJmW7Lr2FhNLyC6T10RFXJm1
46wxmiAERKvewo5auhWBkAx1yKEvObFWDf1UJpAU/Dco2g1tOnbe30kV8tvHs+w1
lnqBpaWcfcnvXjLWQwGTcl+v9a3AE6rpts2z9ii9VkLgvOKs+7jg0gIxYrMliJq+
Hzv3/cdV1ZZ4ADDB9imzi2r9oendZHLKjE7gmKqXOvhe8F7Jy/gXwK8xODQivRa1
cKhf42s39GAK0Atlg659s8H75VGepltd/w==
-----END CERTIFICATE-----
Generated at Thu Oct 8 08:43:06 2026 by rpki-client