Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/28804792-6804-35df-9693-e6b5e2c627ae.roa
File:                     28804792-6804-35df-9693-e6b5e2c627ae.roa (raw, json)
Hash identifier:          Dcc75JYyb23R4zbrpT3XF0a6ZQxae6RTXln9bakfcxE=
Subject key identifier:   8A:CC:74:67:06:FB:0E:C0:EE:BB:12:12:CF:5F:BD:61:6A:B5:EF:B5
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584EE921F270B8FC5565765D72C0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/28804792-6804-35df-9693-e6b5e2c627ae.roa
Signing time:             Fri 21 Aug 2026 13:00:11 +0000
ROA not before:           Fri 21 Aug 2026 13:00:11 +0000
ROA not after:            Thu 19 Nov 2026 14:00:11 +0000
asID:                     30036
IP address blocks:        2604:2e8f:800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e9:21:f2:70:b8:fc:55:65:76:5d:72:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Aug 21 13:00:11 2026 GMT
            Not After : Nov 19 14:00:11 2026 GMT
        Subject: CN=290d2c7c-9aca-4840-b3d5-65ec6e110051
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:09:af:25:da:31:81:78:f0:ba:a2:b8:20:ff:
                    84:04:ec:40:e5:d5:87:53:55:39:61:a8:0d:0c:55:
                    ef:8d:19:d8:ca:e6:1e:2d:e4:e3:a9:b4:b1:ff:d6:
                    21:b0:25:2a:f7:9a:83:eb:ab:e0:85:45:b5:50:89:
                    12:fb:38:77:89:bc:c2:e7:c9:b4:3c:d2:0c:06:e3:
                    28:3e:2d:91:94:bf:a3:59:81:72:55:0b:f7:7b:5b:
                    fe:de:17:5f:ce:5e:07:69:48:71:6d:ee:f8:55:c1:
                    36:05:33:d7:6d:35:68:24:35:cf:08:d4:8c:8d:69:
                    b1:e0:07:f2:9f:0d:eb:bd:33:be:e3:53:2b:30:33:
                    8e:e0:d2:28:56:0e:8c:bb:c0:a9:68:45:5f:44:31:
                    1c:42:15:9c:61:72:a9:eb:83:e0:14:c6:ad:b2:e2:
                    c4:53:31:f2:45:69:e3:29:6c:5e:37:af:bd:2b:69:
                    3f:13:ce:88:9c:33:2a:d0:b4:ce:0b:43:7c:ad:a2:
                    a3:25:d4:6a:4e:8d:34:cd:17:ab:96:cd:88:fb:41:
                    aa:17:50:2f:5b:c3:5b:b7:48:98:0c:9e:49:12:e6:
                    94:47:97:ff:ff:b3:74:cf:79:ba:bf:2d:58:f2:25:
                    fa:96:fe:7c:e1:93:1d:a2:cd:12:3a:02:d4:69:9c:
                    81:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:CC:74:67:06:FB:0E:C0:EE:BB:12:12:CF:5F:BD:61:6A:B5:EF:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/28804792-6804-35df-9693-e6b5e2c627ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8f:800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:7c:84:b3:6e:9a:42:59:b0:7f:ce:0a:4f:f2:09:70:ee:c9:
         04:73:76:82:a1:ad:db:7a:f2:3e:74:7d:38:2f:94:66:c9:ef:
         89:b7:40:0c:62:a9:35:24:07:07:1b:ac:e4:b9:23:84:a0:0c:
         54:f9:ac:dc:a6:c8:e7:52:de:90:b3:20:a9:72:a3:82:28:6e:
         9f:90:38:e5:b6:31:13:c5:c0:15:85:53:1d:c6:a6:eb:7a:a9:
         d4:4e:b7:82:82:ed:4b:c2:b9:8d:d8:05:ab:51:3c:8b:f9:34:
         5d:88:40:1c:a1:02:c9:91:bb:6e:3f:85:af:14:e3:32:37:ef:
         b1:28:30:c1:29:c4:50:7e:d2:4a:e2:ce:bf:e7:22:95:4b:b2:
         f7:f8:86:17:36:25:02:14:ba:16:9c:ec:e1:59:c1:0a:c5:46:
         2f:a9:cd:80:d7:63:a9:3a:90:8c:3e:af:69:1a:c3:21:ce:5e:
         f2:4c:d2:6f:81:7c:35:2a:f3:40:a4:38:0b:13:3c:a8:b5:bd:
         87:81:59:65:fb:00:2a:3d:af:c4:65:f1:c0:9b:85:b3:cb:10:
         19:ae:63:fa:2d:6a:77:ef:70:e8:45:25:c9:c6:bc:ad:33:7d:
         43:7e:67:64:a5:84:46:4d:86:ac:2e:3d:d4:be:a2:3f:c9:63:
         61:0e:d2:eb
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE7pIfJwuPxVZXZdcsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI2MDgyMTEzMDAxMVoXDTI2MTExOTE0MDAxMVowLzEtMCsGA1UEAxMk
MjkwZDJjN2MtOWFjYS00ODQwLWIzZDUtNjVlYzZlMTEwMDUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjgmvJdoxgXjwuqK4IP+EBOxA5dWHU1U5YagN
DFXvjRnYyuYeLeTjqbSx/9YhsCUq95qD66vghUW1UIkS+zh3ibzC58m0PNIMBuMo
Pi2RlL+jWYFyVQv3e1v+3hdfzl4HaUhxbe74VcE2BTPXbTVoJDXPCNSMjWmx4Afy
nw3rvTO+41MrMDOO4NIoVg6Mu8CpaEVfRDEcQhWcYXKp64PgFMatsuLEUzHyRWnj
KWxeN6+9K2k/E86InDMq0LTOC0N8raKjJdRqTo00zRerls2I+0GqF1AvW8Nbt0iY
DJ5JEuaUR5f//7N0z3m6vy1Y8iX6lv584ZMdos0SOgLUaZyBqwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFIrMdGcG+w7A7rsSEs9fvWFqte+1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMjg4MDQ3OTItNjgwNC0z
NWRmLTk2OTMtZTZiNWUyYzYyN2FlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujwgw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAMHyEs26aQlmwf84KT/IJcO7JBHN2gqGt23ryPnR9OC+UZsnvibdA
DGKpNSQHBxus5LkjhKAMVPms3KbI51LekLMgqXKjgihun5A45bYxE8XAFYVTHcam
63qp1E63goLtS8K5jdgFq1E8i/k0XYhAHKECyZG7bj+FrxTjMjfvsSgwwSnEUH7S
SuLOv+cilUuy9/iGFzYlAhS6Fpzs4VnBCsVGL6nNgNdjqTqQjD6vaRrDIc5e8kzS
b4F8NSrzQKQ4CxM8qLW9h4FZZfsAKj2vxGXxwJuFs8sQGa5j+i1qd+9w6EUlyca8
rTN9Q35nZKWERk2GrC491L6iP8ljYQ7S6w==
-----END CERTIFICATE-----
Generated at Tue Sep 22 04:31:00 2026 by rpki-client