Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4156435b-c5b6-3bae-b56d-31eeb6ca0c9a.roa
File:                     4156435b-c5b6-3bae-b56d-31eeb6ca0c9a.roa (raw, json)
Hash identifier:          ynQKjq82W0kReG+A2lLW2Vla00PuJHrrqJ2GmdD6VxI=
Subject key identifier:   F9:D3:27:71:D5:E4:74:99:26:98:6E:5B:B5:F3:3A:EF:8B:9D:D3:F4
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584F4986D216723E9A19855A0C00
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4156435b-c5b6-3bae-b56d-31eeb6ca0c9a.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     19905
IP address blocks:        2604:2e8e:1800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:86:d2:16:72:3e:9a:19:85:5a:0c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=e52dfff1-f5d6-4b7f-95c7-a54a3d0d2866
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:45:7a:20:18:84:f7:61:44:cf:37:ed:82:ac:
                    47:01:29:d2:55:9c:13:c0:26:60:68:5e:35:fa:12:
                    c4:20:f3:dc:19:65:92:67:fa:67:7b:ea:28:88:1a:
                    3c:b0:83:7a:02:d1:01:0b:85:cf:9d:bb:c5:f2:68:
                    b7:0c:37:a6:95:5e:78:18:b5:d7:eb:93:ef:74:ca:
                    ab:35:79:31:66:3a:47:38:20:f4:ed:77:82:08:a6:
                    e6:4e:7c:cc:ac:27:0f:09:5d:da:e6:f5:1e:f8:f0:
                    aa:68:dc:80:1b:b1:e7:32:15:46:04:14:00:c5:b2:
                    1c:27:b1:93:0f:d5:b3:5b:27:31:45:6f:80:e2:22:
                    0d:43:b0:de:36:48:61:35:9d:4a:e3:e1:59:16:2b:
                    0f:d7:b5:1e:4b:6f:8f:d2:0a:97:9f:d1:8d:8a:ec:
                    7c:44:81:0b:f4:bd:c1:6d:d6:25:b4:91:ba:93:93:
                    35:14:7f:9f:83:80:fc:72:2b:96:28:69:00:17:fe:
                    9b:99:5b:fd:13:64:c6:33:64:f3:0f:cf:37:2e:57:
                    72:48:a3:32:6a:c2:2b:93:54:93:96:99:c0:c0:f1:
                    05:99:ef:d9:8e:71:7c:e4:77:a6:73:9d:a9:e9:c8:
                    ba:26:a8:01:00:7c:61:6c:a5:cb:d9:27:2c:01:11:
                    f5:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:D3:27:71:D5:E4:74:99:26:98:6E:5B:B5:F3:3A:EF:8B:9D:D3:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4156435b-c5b6-3bae-b56d-31eeb6ca0c9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8e:1800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:6d:4a:d7:7b:a5:3d:b2:18:32:e6:90:92:37:30:34:44:96:
         f5:bd:01:db:e3:0c:d3:a2:8a:47:a9:85:69:23:c3:36:5a:bc:
         68:e6:c3:c1:22:50:a3:d9:af:41:82:5d:64:c5:53:44:cb:56:
         3b:5d:3b:43:62:aa:47:11:f2:66:90:a0:fe:67:24:07:7b:d0:
         04:8c:a6:8e:fe:d1:82:64:a8:af:11:10:b2:92:26:f4:03:cc:
         df:60:d0:3a:4e:a6:09:27:a8:57:be:3c:c1:d4:cd:6e:fb:17:
         b9:1d:f1:11:fe:d6:43:5a:2a:81:d2:92:a4:ba:bf:3f:38:13:
         4f:1b:f6:48:5c:b4:77:90:cf:50:c3:70:10:24:85:e9:ae:29:
         37:27:19:59:e8:df:60:e1:02:86:9a:ab:9d:c4:b5:1b:e7:27:
         4c:55:f0:3c:ad:6a:d7:c6:4a:1c:ee:33:08:05:d4:53:e7:2f:
         8f:e8:fe:06:7c:6b:d3:2d:ae:63:9b:d4:77:92:f5:da:05:23:
         13:58:1c:e6:34:c6:9c:c2:3b:60:fc:96:1b:9a:01:be:26:be:
         29:11:d7:83:75:2a:3a:d7:36:f8:6b:db:ea:11:5e:b6:7b:cd:
         3a:1c:46:8d:b2:c6:dd:58:9a:10:f8:dc:01:8d:9a:01:5c:c0:
         44:af:01:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 23:13:14 2026 by rpki-client