Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d9542cbb-8188-3987-860c-369000e4a715.roa
File:                     d9542cbb-8188-3987-860c-369000e4a715.roa (raw, json)
Hash identifier:          XMTvzKvQlMe9kAtw1ISmPntU/E5EehhV20+1K2REatI=
Subject key identifier:   30:A5:AC:14:E0:7B:4C:C6:E4:A6:2F:C6:A2:FD:D4:99:37:F9:E4:CF
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584CD6D1FD003F508E44DCF84B80
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d9542cbb-8188-3987-860c-369000e4a715.roa
Signing time:             Thu 12 Feb 2026 14:00:40 +0000
ROA not before:           Thu 12 Feb 2026 14:00:40 +0000
ROA not after:            Wed 13 May 2026 13:00:40 +0000
asID:                     19905
IP address blocks:        2604:2e87:e400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d6:d1:fd:00:3f:50:8e:44:dc:f8:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Feb 12 14:00:40 2026 GMT
            Not After : May 13 13:00:40 2026 GMT
        Subject: CN=62d8cd28-f0ef-4a17-9a1d-192c26836d98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:50:31:8a:b6:70:b6:1f:80:4a:89:19:f8:ad:
                    08:e9:1f:3d:7a:d9:99:10:a6:36:90:8c:3a:39:94:
                    ca:79:3f:33:5c:fd:97:6a:cb:88:8d:8e:39:5d:da:
                    62:57:31:2f:fe:ac:23:fe:1e:00:af:b6:c1:d5:7e:
                    11:1b:63:9c:c3:d2:c1:e9:6f:e6:9c:f6:4f:fb:23:
                    a4:04:82:37:8f:db:2b:5d:2c:0d:6c:e2:81:1f:27:
                    69:ac:b2:28:f6:96:31:01:9a:dd:14:26:b5:43:cb:
                    b9:46:5d:af:e0:d2:2a:68:a6:20:f9:ea:e0:0d:f2:
                    96:21:3b:71:86:96:54:3f:8e:a2:b6:22:e1:2e:82:
                    d3:e5:8a:93:ca:9d:16:02:27:2c:1c:db:84:12:17:
                    e4:68:9d:b7:fe:20:e9:55:08:9a:fa:95:0f:65:3a:
                    3f:6a:28:f2:c6:c7:b6:c6:60:df:eb:da:4f:43:72:
                    12:1a:6f:67:f8:bc:20:88:5f:7a:ce:3c:16:00:f3:
                    7e:3f:b2:a8:32:6e:c0:10:fe:e0:31:79:db:3f:94:
                    98:4c:09:8b:3b:bb:95:57:82:ae:d9:a2:09:d2:29:
                    10:dd:8a:b1:52:ad:b4:b2:f0:ad:67:40:98:c9:d1:
                    1a:b2:59:a3:6a:ab:f2:bb:5c:8e:b9:28:f1:56:04:
                    37:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:A5:AC:14:E0:7B:4C:C6:E4:A6:2F:C6:A2:FD:D4:99:37:F9:E4:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d9542cbb-8188-3987-860c-369000e4a715.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e87:e400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:f5:26:e1:76:b1:cb:f4:f6:b2:40:7f:1e:ef:a2:59:70:3e:
         81:a0:5d:66:29:e5:ea:c0:89:f7:4a:f9:9d:3d:ba:d0:06:d3:
         89:f0:7e:e7:5d:c3:0a:38:37:0a:31:dc:16:26:59:c5:6a:fb:
         84:6f:41:d8:29:bb:8f:08:9f:83:77:00:ee:63:cf:3b:11:1f:
         65:e8:78:eb:76:2c:7d:9e:1e:05:91:86:ae:25:fb:f8:e7:7a:
         16:25:84:92:68:49:5e:84:e7:ca:46:ea:b9:7f:af:a5:ea:ce:
         77:0c:82:fa:37:eb:39:a3:c8:0f:b7:05:81:78:5b:36:db:c7:
         78:88:61:7d:90:34:64:58:e8:bb:38:6d:87:e6:37:99:e0:2c:
         b1:2d:47:31:00:62:b7:32:d6:32:ab:23:b3:cd:b5:48:00:05:
         5a:5c:47:db:21:52:f0:7e:3d:97:7b:d7:ff:45:2e:cf:2e:e9:
         c1:e8:a8:94:87:06:73:ad:5d:6c:00:c2:b2:9c:7b:23:fe:a8:
         3d:13:ae:0d:d5:93:45:0e:db:f8:0b:0c:e4:bb:1a:ea:d3:06:
         93:63:41:44:dc:62:71:80:11:c0:2c:66:21:ac:34:58:fe:7a:
         50:d9:57:f1:bd:a5:0c:f3:e5:6f:2b:b9:38:3e:b9:23:64:10:
         22:d0:5e:b7
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEzW0f0AP1CORNz4S4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI2MDIxMjE0MDA0MFoXDTI2MDUxMzEzMDA0MFowLzEtMCsGA1UEAxMk
NjJkOGNkMjgtZjBlZi00YTE3LTlhMWQtMTkyYzI2ODM2ZDk4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy1AxirZwth+ASokZ+K0I6R89etmZEKY2kIw6
OZTKeT8zXP2XasuIjY45XdpiVzEv/qwj/h4Ar7bB1X4RG2Ocw9LB6W/mnPZP+yOk
BII3j9srXSwNbOKBHydprLIo9pYxAZrdFCa1Q8u5Rl2v4NIqaKYg+ergDfKWITtx
hpZUP46itiLhLoLT5YqTyp0WAicsHNuEEhfkaJ23/iDpVQia+pUPZTo/aijyxse2
xmDf69pPQ3ISGm9n+LwgiF96zjwWAPN+P7KoMm7AEP7gMXnbP5SYTAmLO7uVV4Ku
2aIJ0ikQ3YqxUq20svCtZ0CYydEaslmjaqvyu1yOuSjxVgQ3XwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFDClrBTge0zG5KYvxqL91Jk3+eTPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvZDk1NDJjYmItODE4OC0z
OTg3LTg2MGMtMzY5MDAwZTRhNzE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuh+Qw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAZfUm4Xaxy/T2skB/Hu+iWXA+gaBdZinl6sCJ90r5nT260AbTifB+
513DCjg3CjHcFiZZxWr7hG9B2Cm7jwifg3cA7mPPOxEfZeh463YsfZ4eBZGGriX7
+Od6FiWEkmhJXoTnykbquX+vperOdwyC+jfrOaPID7cFgXhbNtvHeIhhfZA0ZFjo
uzhth+Y3meAssS1HMQBitzLWMqsjs821SAAFWlxH2yFS8H49l3vX/0Uuzy7pweio
lIcGc61dbADCspx7I/6oPROuDdWTRQ7b+AsM5Lsa6tMGk2NBRNxicYARwCxmIaw0
WP56UNlX8b2lDPPlbyu5OD65I2QQItBetw==
-----END CERTIFICATE-----
Generated at Sun Mar 1 21:10:26 2026 by rpki-client