Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/25e70741-b5f3-324a-aea0-8a74994173d3.roa
File:                     25e70741-b5f3-324a-aea0-8a74994173d3.roa (raw, json)
Hash identifier:          pc0FWTjvultCU+9RQfw9Hkqh+npR9hcAEFCsKFrcEBA=
Subject key identifier:   1B:EE:C5:33:D3:9C:97:A0:63:3E:01:88:A7:A8:EF:66:3A:CF:36:D6
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584F62931421C2250C50DF3A56C0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/25e70741-b5f3-324a-aea0-8a74994173d3.roa
Signing time:             Sun 04 Oct 2026 01:00:13 +0000
ROA not before:           Sun 04 Oct 2026 01:00:13 +0000
ROA not after:            Sat 02 Jan 2027 02:00:13 +0000
asID:                     19905
IP address blocks:        2604:2e87:7000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:62:93:14:21:c2:25:0c:50:df:3a:56:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Oct  4 01:00:13 2026 GMT
            Not After : Jan  2 02:00:13 2027 GMT
        Subject: CN=2813378d-c3ec-4dc9-b0fc-356864a82821
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f6:72:eb:4f:66:b3:83:a5:45:b2:74:8f:1f:
                    2a:e8:86:85:92:3a:92:0e:0c:d5:c7:2f:84:d8:d4:
                    b6:7d:ef:51:b0:ec:5f:3a:68:f2:08:ac:1e:84:c5:
                    3f:00:7b:06:6a:62:27:cf:72:89:98:45:b4:54:74:
                    91:03:25:03:e7:b6:42:70:c5:44:a1:ab:dc:5f:d3:
                    66:58:ea:be:56:8e:50:5b:83:cc:cc:44:44:11:d3:
                    37:4a:57:10:39:99:9b:57:83:a3:e4:75:b9:33:bd:
                    5e:c2:d5:4a:6d:1f:ab:4c:e7:bc:b8:52:2a:ae:99:
                    31:53:b0:64:04:65:c6:c7:5e:08:2d:4c:b9:32:16:
                    51:9b:b3:b2:31:10:0f:ff:7e:6b:fc:70:20:6e:5f:
                    92:cb:01:c2:28:5b:8b:3d:e2:09:24:1e:b4:e7:02:
                    88:76:bb:81:be:5e:cc:1d:2b:bf:55:1f:1a:11:11:
                    0e:04:38:fa:df:9d:e5:f2:53:e6:b5:38:5c:d5:f3:
                    58:ce:f8:e4:03:40:87:47:29:08:ff:73:6e:e8:50:
                    b1:74:91:7e:ab:ec:9f:61:71:22:69:c5:67:28:1d:
                    13:25:fd:c1:ad:29:eb:0e:c6:03:ec:b7:0e:9f:b3:
                    60:63:f3:da:cf:b8:dd:19:25:04:bc:44:ed:bd:2f:
                    c9:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:EE:C5:33:D3:9C:97:A0:63:3E:01:88:A7:A8:EF:66:3A:CF:36:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/25e70741-b5f3-324a-aea0-8a74994173d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e87:7000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:30:5c:3e:f5:f6:eb:90:66:61:dd:2f:8a:53:aa:97:50:bd:
         8c:e9:60:1c:7c:55:0a:54:ed:4a:19:a5:52:4f:41:59:a2:93:
         44:2c:5b:20:03:57:4a:e3:09:fa:2c:90:e6:99:38:60:3b:06:
         0b:d7:12:41:8e:bf:6b:7a:26:62:04:f6:51:65:9f:7e:00:cf:
         00:70:1e:fd:ee:ae:2e:aa:6a:66:99:4a:04:b9:64:ef:25:1e:
         c0:2b:b3:86:4c:b3:8e:dc:c2:4c:60:bc:e6:77:51:57:e6:f5:
         33:82:35:c2:27:b3:7b:60:f0:a9:01:30:1e:6d:f8:86:d3:4a:
         ae:6a:a7:52:7d:18:33:bc:d2:8f:b3:e7:22:78:98:c7:3d:de:
         0f:64:e9:90:c9:fb:a4:35:f8:b2:7d:6f:ea:46:4c:75:81:83:
         0e:f2:ee:ec:18:83:51:89:04:42:7c:d3:80:1d:d3:27:c4:ee:
         1d:9e:7c:04:96:27:b7:8f:0f:9c:b5:7a:c7:06:73:de:7f:dd:
         59:17:70:fb:6b:d9:c4:71:94:b2:e5:96:63:94:85:7f:2a:a9:
         83:3b:26:bb:be:b7:2d:bd:d9:ad:75:d0:48:7a:2c:13:a8:96:
         18:7c:4e:cb:64:a5:2e:35:cf:af:75:3f:49:4b:6e:a2:8c:c2:
         58:2a:96:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 05:14:00 2026 by rpki-client