Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8d3429d0-6564-3e17-b58e-5cd968f085af.roa
File:                     8d3429d0-6564-3e17-b58e-5cd968f085af.roa (raw, json)
Hash identifier:          qIpZgRIvrQyq0C5+A1woKYOD1OYMkyj55fLe7cjn9So=
Subject key identifier:   F6:FA:60:C3:D6:0E:73:47:4B:82:F8:94:AE:AE:46:ED:EC:92:62:46
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584DFBD627BA2DC011B750FDC200
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8d3429d0-6564-3e17-b58e-5cd968f085af.roa
Signing time:             Thu 28 May 2026 13:00:12 +0000
ROA not before:           Thu 28 May 2026 13:00:12 +0000
ROA not after:            Wed 26 Aug 2026 13:00:12 +0000
asID:                     19905
IP address blocks:        2604:2e88:ec00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fb:d6:27:ba:2d:c0:11:b7:50:fd:c2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: May 28 13:00:12 2026 GMT
            Not After : Aug 26 13:00:12 2026 GMT
        Subject: CN=65ddbaac-9b41-4b8e-93cc-82830087a7d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:e2:25:58:7d:d4:95:00:13:d8:ad:eb:36:64:
                    2b:f6:da:69:a9:80:05:63:f6:eb:7d:fb:94:fe:70:
                    e7:ba:86:21:75:be:47:32:3e:bd:37:2e:9c:56:ea:
                    13:80:90:fd:f9:f2:5c:19:7e:23:7d:70:ff:ad:6b:
                    f2:04:05:47:39:b5:82:46:4d:20:ba:b7:63:ba:74:
                    00:e2:06:36:81:cd:ff:5c:b7:a7:44:2d:ef:1c:ec:
                    5a:1c:28:6d:22:51:ed:60:c6:07:d6:a6:a3:08:69:
                    39:02:a0:1d:8a:7d:a6:b4:a5:d4:5e:a9:b3:62:e2:
                    e3:78:35:68:15:7b:a4:c2:40:b5:42:9d:38:98:5f:
                    53:73:cd:d3:8f:81:f0:59:66:e1:6f:e1:ad:82:7f:
                    4d:eb:76:1e:d4:91:86:35:1f:be:81:13:90:3f:0b:
                    7e:ac:db:ba:1e:d7:1b:61:14:23:1d:ae:21:2c:02:
                    1a:42:ef:ee:12:62:96:47:ff:75:e6:91:68:d6:9c:
                    0f:59:79:6c:15:6f:ff:89:8f:b3:f4:4c:cd:4a:e2:
                    82:54:c1:94:e6:45:aa:e9:5c:b8:98:e4:59:9f:b3:
                    a7:81:e6:ad:e7:ac:c1:e6:c9:d5:8f:72:a8:59:ed:
                    1e:68:6f:39:6d:60:f0:82:77:24:5e:b5:25:eb:11:
                    e2:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:FA:60:C3:D6:0E:73:47:4B:82:F8:94:AE:AE:46:ED:EC:92:62:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8d3429d0-6564-3e17-b58e-5cd968f085af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e88:ec00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:28:b7:f0:16:4c:56:2f:4f:bf:62:0b:3d:e0:7d:71:17:8c:
         47:58:0a:70:19:c8:b3:59:09:ef:1d:41:85:6c:67:c4:8c:7d:
         13:7a:df:24:81:36:f7:70:3d:64:df:df:81:5e:93:e6:8b:32:
         ab:b5:ca:84:54:6f:21:ef:47:b2:e0:1e:db:66:c7:23:3a:ad:
         d8:90:45:53:3c:52:fc:53:3d:78:d2:3b:ea:47:ce:62:72:a5:
         d8:0c:7b:b1:72:35:2a:9f:32:bf:4e:a9:47:ab:50:e6:b7:0c:
         c4:90:d5:73:35:8b:0b:d6:6f:6e:16:69:c5:59:8d:0e:ee:1b:
         a0:92:9c:52:b6:d7:d4:21:5e:94:4e:fe:5a:69:30:67:e6:65:
         0c:cc:7b:0c:43:2b:58:ad:7b:f5:93:bc:3b:87:b2:cc:67:ab:
         de:b1:05:10:98:49:11:d1:0e:df:e0:44:99:11:79:6d:24:53:
         5a:a3:29:dd:10:e3:20:04:e0:d6:46:5e:1f:48:11:7d:7c:b9:
         29:2b:07:c1:36:b7:c3:99:68:78:36:4f:8d:e1:33:b6:ef:24:
         60:43:78:34:41:e9:e3:dc:f8:71:92:20:d1:ee:30:a7:f5:83:
         ac:e3:84:d2:70:70:e5:24:cb:4e:88:57:48:8c:fe:58:55:e7:
         90:78:0f:7f
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE371ie6LcARt1D9wgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI2MDUyODEzMDAxMloXDTI2MDgyNjEzMDAxMlowLzEtMCsGA1UEAxMk
NjVkZGJhYWMtOWI0MS00YjhlLTkzY2MtODI4MzAwODdhN2Q5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhOIlWH3UlQAT2K3rNmQr9tppqYAFY/brffuU
/nDnuoYhdb5HMj69Ny6cVuoTgJD9+fJcGX4jfXD/rWvyBAVHObWCRk0gurdjunQA
4gY2gc3/XLenRC3vHOxaHChtIlHtYMYH1qajCGk5AqAdin2mtKXUXqmzYuLjeDVo
FXukwkC1Qp04mF9Tc83Tj4HwWWbhb+Gtgn9N63Ye1JGGNR++gROQPwt+rNu6Htcb
YRQjHa4hLAIaQu/uEmKWR/915pFo1pwPWXlsFW//iY+z9EzNSuKCVMGU5kWq6Vy4
mORZn7Ongeat56zB5snVj3KoWe0eaG85bWDwgnckXrUl6xHifQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFPb6YMPWDnNHS4L4lK6uRu3skmJGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvOGQzNDI5ZDAtNjU2NC0z
ZTE3LWI1OGUtNWNkOTY4ZjA4NWFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiOww
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAQCi38BZMVi9Pv2ILPeB9cReMR1gKcBnIs1kJ7x1BhWxnxIx9E3rf
JIE293A9ZN/fgV6T5osyq7XKhFRvIe9HsuAe22bHIzqt2JBFUzxS/FM9eNI76kfO
YnKl2Ax7sXI1Kp8yv06pR6tQ5rcMxJDVczWLC9ZvbhZpxVmNDu4boJKcUrbX1CFe
lE7+WmkwZ+ZlDMx7DEMrWK179ZO8O4eyzGer3rEFEJhJEdEO3+BEmRF5bSRTWqMp
3RDjIATg1kZeH0gRfXy5KSsHwTa3w5loeDZPjeEztu8kYEN4NEHp49z4cZIg0e4w
p/WDrOOE0nBw5STLTohXSIz+WFXnkHgPfw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 10:15:36 2026 by rpki-client