Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f5125852-191f-31e1-9372-544e090a4099.roa
File:                     f5125852-191f-31e1-9372-544e090a4099.roa (raw, json)
Hash identifier:          AKQ4cHq+q3UFoUfnOrxVJfqwONuI48vxRCi0AdPZgc8=
Subject key identifier:   A0:61:F1:B9:C0:85:D6:C2:1B:A7:31:05:E2:9C:BE:B5:9C:75:D5:83
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584E1A143E70F4BE13ECFCC0F420
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f5125852-191f-31e1-9372-544e090a4099.roa
Signing time:             Mon 08 Jun 2026 09:00:12 +0000
ROA not before:           Mon 08 Jun 2026 09:00:12 +0000
ROA not after:            Sun 06 Sep 2026 09:00:12 +0000
asID:                     19905
IP address blocks:        2604:2e8b:6c00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1a:14:3e:70:f4:be:13:ec:fc:c0:f4:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jun  8 09:00:12 2026 GMT
            Not After : Sep  6 09:00:12 2026 GMT
        Subject: CN=c5750fa4-0ecd-41ef-8055-2e973e976e26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5e:15:d7:9a:10:17:eb:0b:a5:b0:5a:50:7f:
                    90:a5:76:b5:10:53:40:19:2b:08:d1:f7:89:14:81:
                    76:d4:00:fa:30:49:8e:e1:0a:64:f8:46:e9:fd:2d:
                    d8:84:83:61:80:33:ee:18:0c:0d:99:51:e8:bc:aa:
                    72:b0:97:e5:b3:93:2c:bd:d2:33:c2:5f:27:0d:db:
                    60:58:33:a0:7c:c2:a6:33:c7:26:79:27:77:46:9a:
                    71:4d:2e:56:1d:f6:1a:6e:62:cc:f2:ed:fd:f7:0f:
                    04:4c:36:96:4c:5e:6e:fc:46:8a:f5:4e:ae:4b:77:
                    82:b4:38:c2:1a:77:bf:b8:c3:52:d9:61:fc:52:f7:
                    bc:69:63:55:6c:72:d2:da:8e:10:9f:af:2f:9a:bc:
                    24:38:31:49:84:1a:2f:0a:98:cc:fd:de:88:57:f4:
                    8f:05:bd:6a:38:35:0b:5a:40:f3:d9:bb:48:ab:f8:
                    fc:60:da:5a:9e:70:29:c6:e4:8f:60:aa:ab:eb:84:
                    5b:36:3b:26:8d:35:63:c1:33:05:b6:db:79:8b:e4:
                    64:aa:8b:a7:af:ed:e1:88:08:30:3a:63:ec:59:41:
                    38:30:dc:0f:1b:9e:b9:6e:15:16:42:32:05:25:65:
                    5d:c5:94:d1:45:3d:3e:fc:ea:9a:6e:d1:55:47:4d:
                    05:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:61:F1:B9:C0:85:D6:C2:1B:A7:31:05:E2:9C:BE:B5:9C:75:D5:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f5125852-191f-31e1-9372-544e090a4099.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8b:6c00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:d7:0c:ad:df:5e:86:2b:8c:85:e4:f3:0f:b6:9b:e0:52:05:
         b9:5f:f5:78:d4:51:51:1f:9e:a5:b9:28:10:0d:d8:1b:88:de:
         66:86:f6:0b:ab:64:ed:aa:94:88:d9:2f:15:56:8d:83:51:d1:
         09:fa:87:56:cc:20:d0:4c:6f:51:dd:29:80:a7:85:aa:e7:71:
         a2:fb:17:08:f3:6f:54:78:ea:78:61:72:af:82:75:a3:35:99:
         a8:89:a8:c6:ff:ea:f4:f0:ee:cd:dc:47:9a:67:e8:78:90:41:
         1d:33:99:37:c2:fa:36:93:20:2c:c3:b9:5e:30:d6:b7:b1:6d:
         e5:43:4b:6e:b7:f2:1c:66:d0:e3:2b:46:e2:f6:21:71:96:2e:
         7a:ec:fc:61:2c:0b:b6:66:2f:c8:d3:98:92:eb:e9:40:86:d4:
         a9:1b:10:1d:f4:69:3f:17:84:bd:af:5d:0e:dc:ed:ef:fa:85:
         bd:54:c5:1d:43:c0:35:c4:42:98:01:5e:0c:47:4b:1c:c0:14:
         c9:59:a1:c2:0e:db:69:15:a3:ed:ce:f7:c8:f0:f8:c5:ed:ba:
         e1:4c:29:62:05:00:25:d7:6c:05:2c:4e:be:47:57:73:0f:72:
         2e:02:17:45:ee:df:de:dd:6e:ae:ad:06:8f:f0:fa:33:3d:d8:
         7d:cc:73:c3
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE4aFD5w9L4T7PzA9CAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI2MDYwODA5MDAxMloXDTI2MDkwNjA5MDAxMlowLzEtMCsGA1UEAxMk
YzU3NTBmYTQtMGVjZC00MWVmLTgwNTUtMmU5NzNlOTc2ZTI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv14V15oQF+sLpbBaUH+QpXa1EFNAGSsI0feJ
FIF21AD6MEmO4Qpk+Ebp/S3YhINhgDPuGAwNmVHovKpysJfls5MsvdIzwl8nDdtg
WDOgfMKmM8cmeSd3RppxTS5WHfYabmLM8u399w8ETDaWTF5u/EaK9U6uS3eCtDjC
Gne/uMNS2WH8Uve8aWNVbHLS2o4Qn68vmrwkODFJhBovCpjM/d6IV/SPBb1qODUL
WkDz2btIq/j8YNpannApxuSPYKqr64RbNjsmjTVjwTMFttt5i+Rkqounr+3hiAgw
OmPsWUE4MNwPG565bhUWQjIFJWVdxZTRRT0+/OqabtFVR00FoQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFKBh8bnAhdbCG6cxBeKcvrWcddWDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvZjUxMjU4NTItMTkxZi0z
MWUxLTkzNzItNTQ0ZTA5MGE0MDk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQui2ww
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAk9cMrd9ehiuMheTzD7ab4FIFuV/1eNRRUR+epbkoEA3YG4jeZob2
C6tk7aqUiNkvFVaNg1HRCfqHVswg0ExvUd0pgKeFqudxovsXCPNvVHjqeGFyr4J1
ozWZqImoxv/q9PDuzdxHmmfoeJBBHTOZN8L6NpMgLMO5XjDWt7Ft5UNLbrfyHGbQ
4ytG4vYhcZYueuz8YSwLtmYvyNOYkuvpQIbUqRsQHfRpPxeEva9dDtzt7/qFvVTF
HUPANcRCmAFeDEdLHMAUyVmhwg7baRWj7c73yPD4xe264UwpYgUAJddsBSxOvkdX
cw9yLgIXRe7f3t1urq0Gj/D6Mz3Yfcxzww==
-----END CERTIFICATE-----
Generated at Sun Jun 14 01:03:46 2026 by rpki-client