Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2af0611e-3778-3a6c-b927-d9ace1efa668.roa
File:                     2af0611e-3778-3a6c-b927-d9ace1efa668.roa (raw, json)
Hash identifier:          Uba4ajSfOmPDwQ2PlGnwzlBBgd5CwNsL5Ot1XDQk5Us=
Subject key identifier:   97:FE:19:73:3F:6D:60:9B:33:9B:03:DA:5C:5F:C5:ED:73:2E:A7:1D
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584F5E62DDE2B0D5A9E1FA7CC180
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2af0611e-3778-3a6c-b927-d9ace1efa668.roa
Signing time:             Fri 02 Oct 2026 13:00:13 +0000
ROA not before:           Fri 02 Oct 2026 13:00:13 +0000
ROA not after:            Thu 31 Dec 2026 14:00:13 +0000
asID:                     19905
IP address blocks:        2604:2e88:ac00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5e:62:dd:e2:b0:d5:a9:e1:fa:7c:c1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Oct  2 13:00:13 2026 GMT
            Not After : Dec 31 14:00:13 2026 GMT
        Subject: CN=8fd17d6b-3440-4e05-a046-cb55efbaa4c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f4:fe:8c:fe:ad:cc:89:26:98:78:52:f1:75:
                    39:80:24:5a:e7:21:9f:eb:df:e1:88:60:18:b8:42:
                    15:34:4a:fd:90:45:ed:9b:3f:e0:9c:61:11:a8:83:
                    9c:83:f7:f3:4c:6b:9c:6f:8f:d8:5a:ee:0e:af:65:
                    54:eb:66:08:a6:17:7c:c4:4c:3c:3e:12:d1:87:04:
                    1e:6a:25:e5:79:9c:6c:c1:86:1e:3c:09:29:4f:95:
                    fa:50:0c:0b:cb:e3:2e:66:be:be:cf:34:9d:dd:ff:
                    4b:9e:9a:c9:71:5f:7b:3e:10:5a:9c:b0:d9:84:5e:
                    52:2a:78:e6:6a:8d:13:fd:e1:95:91:4c:68:be:5d:
                    9e:ac:ce:32:32:a9:45:02:35:3e:b7:57:3d:ef:d3:
                    70:37:d8:7d:45:2f:06:7a:ba:ab:b0:f5:2f:34:89:
                    32:2d:9b:b1:56:3f:bf:44:f7:2d:65:b0:a7:d6:cd:
                    bd:1b:b1:b1:1b:25:5a:03:df:48:b1:56:92:95:2e:
                    be:c2:66:60:31:7e:f7:7a:f0:8e:04:e5:ee:8a:6f:
                    d7:fc:4d:0c:5f:55:9a:a0:37:63:96:1d:7c:0e:5d:
                    fa:e3:48:e8:be:6d:7b:af:c0:c1:04:74:4b:d5:36:
                    c5:ee:8c:17:fc:9d:d6:21:d3:e9:7c:62:91:3b:ac:
                    9b:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:FE:19:73:3F:6D:60:9B:33:9B:03:DA:5C:5F:C5:ED:73:2E:A7:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2af0611e-3778-3a6c-b927-d9ace1efa668.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e88:ac00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:79:23:b0:21:8b:88:c3:55:f0:48:4d:9a:e8:54:a5:f1:97:
         4c:3e:c2:bc:bb:af:d3:fd:75:81:b9:d5:b6:71:ab:e2:ad:ac:
         c1:45:2d:a8:35:a0:ab:eb:50:a4:1f:ae:22:e7:f6:26:b2:9b:
         6a:45:a2:99:db:c0:28:4f:c6:36:15:a2:e0:56:7a:f4:12:f8:
         69:d6:87:e3:a4:d4:54:99:93:7c:6b:31:26:df:27:06:16:f1:
         e5:8e:20:18:ed:3d:00:6a:a7:dc:dd:0f:4a:c5:cb:01:a9:79:
         8f:1c:03:e8:5e:98:cd:fb:b1:37:7a:7d:d8:5a:f2:5d:02:00:
         64:c4:8f:e2:f4:70:55:8c:1e:db:c0:f3:01:37:65:3f:3f:eb:
         77:f4:ae:b2:9f:85:59:4b:e4:c9:7b:a9:50:65:a0:e3:c7:91:
         ed:c8:ff:35:1d:38:89:80:ab:7e:c1:4f:d8:9f:af:1e:6b:6c:
         52:ea:ed:61:6c:2c:3f:ca:f2:c3:36:c9:9b:53:df:15:38:e9:
         89:17:52:5e:2e:38:d6:12:02:b8:79:7a:3e:57:99:24:02:15:
         cb:1a:6f:b8:17:b5:88:93:cd:06:cb:c2:51:57:ce:0e:c8:6b:
         dc:1e:be:51:e5:b6:76:31:cc:a0:55:f3:07:c4:3b:ce:2f:4a:
         9e:18:38:88
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9eYt3isNWp4fp8wYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI2MTAwMjEzMDAxM1oXDTI2MTIzMTE0MDAxM1owLzEtMCsGA1UEAxMk
OGZkMTdkNmItMzQ0MC00ZTA1LWEwNDYtY2I1NWVmYmFhNGM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/T+jP6tzIkmmHhS8XU5gCRa5yGf69/hiGAY
uEIVNEr9kEXtmz/gnGERqIOcg/fzTGucb4/YWu4Or2VU62YIphd8xEw8PhLRhwQe
aiXleZxswYYePAkpT5X6UAwLy+MuZr6+zzSd3f9LnprJcV97PhBanLDZhF5SKnjm
ao0T/eGVkUxovl2erM4yMqlFAjU+t1c979NwN9h9RS8GerqrsPUvNIkyLZuxVj+/
RPctZbCn1s29G7GxGyVaA99IsVaSlS6+wmZgMX73evCOBOXuim/X/E0MX1WaoDdj
lh18Dl3640jovm17r8DBBHRL1TbF7owX/J3WIdPpfGKRO6ybiwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFJf+GXM/bWCbM5sD2lxfxe1zLqcdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMmFmMDYxMWUtMzc3OC0z
YTZjLWI5MjctZDlhY2UxZWZhNjY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiKww
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAbXkjsCGLiMNV8EhNmuhUpfGXTD7CvLuv0/11gbnVtnGr4q2swUUt
qDWgq+tQpB+uIuf2JrKbakWimdvAKE/GNhWi4FZ69BL4adaH46TUVJmTfGsxJt8n
Bhbx5Y4gGO09AGqn3N0PSsXLAal5jxwD6F6YzfuxN3p92FryXQIAZMSP4vRwVYwe
28DzATdlPz/rd/Susp+FWUvkyXupUGWg48eR7cj/NR04iYCrfsFP2J+vHmtsUurt
YWwsP8rywzbJm1PfFTjpiRdSXi441hICuHl6PleZJAIVyxpvuBe1iJPNBsvCUVfO
Dshr3B6+UeW2djHMoFXzB8Q7zi9Knhg4iA==
-----END CERTIFICATE-----
Generated at Thu Oct 8 03:38:08 2026 by rpki-client