Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/69aa10df-70d0-336f-b07d-97d3391ddbda.roa
File:                     69aa10df-70d0-336f-b07d-97d3391ddbda.roa (raw, json)
Hash identifier:          2s5IzKmdabvbz/vFSFeHp9nxn4NCMsPOtd0rv19fEDo=
Subject key identifier:   CE:3D:0A:A6:02:2B:B4:DE:EA:92:81:AD:89:3F:CF:4D:E8:B2:0A:BE
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584EE921F31588B9D0967C054800
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/69aa10df-70d0-336f-b07d-97d3391ddbda.roa
Signing time:             Fri 21 Aug 2026 13:00:11 +0000
ROA not before:           Fri 21 Aug 2026 13:00:11 +0000
ROA not after:            Thu 19 Nov 2026 14:00:11 +0000
asID:                     19905
IP address blocks:        2604:2e8f:800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e9:21:f3:15:88:b9:d0:96:7c:05:48:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Aug 21 13:00:11 2026 GMT
            Not After : Nov 19 14:00:11 2026 GMT
        Subject: CN=2e41e1ea-34e1-4432-8031-fa12415f234e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:0d:a3:47:bf:89:f2:74:c5:82:82:e9:30:7b:
                    6a:b0:48:84:bf:e6:c2:51:bf:3c:0c:c8:b5:42:94:
                    60:2c:81:81:7d:70:5b:51:90:12:e4:76:e2:ac:b0:
                    9c:bc:74:c4:0b:5f:0a:9f:ea:14:7b:56:c5:1e:ad:
                    13:09:40:32:af:2d:1c:55:2d:2b:e8:e8:e2:40:b1:
                    88:57:60:8d:61:81:82:47:50:b7:40:56:a6:2a:58:
                    b6:ec:94:83:af:d6:3d:33:4c:39:4e:f1:52:36:ef:
                    b7:0f:57:0d:ac:21:da:dd:37:fa:5b:b7:03:87:88:
                    34:e3:ad:85:a3:c8:6d:d0:77:59:5c:00:b2:f8:ef:
                    01:0f:c9:1c:eb:e4:78:c8:55:62:f9:17:c4:54:a3:
                    42:28:86:70:32:14:9d:aa:fb:76:90:a3:c0:d3:8f:
                    54:be:82:4b:bd:b0:b8:5b:6c:50:43:15:70:73:d0:
                    2b:ea:e9:9d:e7:0d:c8:3f:3c:4a:eb:3d:a2:ca:51:
                    ce:b0:3d:48:70:c1:af:b5:45:35:23:23:0a:ea:86:
                    08:2c:a4:54:18:32:f0:5c:64:81:c4:22:11:04:91:
                    f8:eb:16:50:e2:ef:49:16:ee:5d:81:e5:bd:72:85:
                    da:75:3f:59:0b:6c:26:c7:1a:b3:ff:38:73:54:05:
                    05:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:3D:0A:A6:02:2B:B4:DE:EA:92:81:AD:89:3F:CF:4D:E8:B2:0A:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/69aa10df-70d0-336f-b07d-97d3391ddbda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8f:800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:15:28:86:10:aa:5d:5c:07:6c:ae:27:91:94:87:88:c4:7e:
         de:98:2e:18:87:1a:8a:99:19:6c:ca:63:4d:63:a8:2a:b3:b1:
         37:62:06:a5:03:6d:5d:24:67:4a:ca:f2:fd:b0:fe:ce:cf:72:
         95:8a:29:09:80:0c:b1:34:f7:ef:70:c4:1b:b5:3d:be:de:ed:
         40:a0:fd:6b:79:76:d1:14:9a:35:ed:2f:5a:59:74:57:22:c5:
         3c:00:9e:ee:86:7f:c6:65:b1:cf:2e:de:cf:dd:bf:9e:90:3a:
         e9:2e:6f:9a:9c:45:f4:af:8f:f5:6f:b6:74:88:76:29:0e:f9:
         56:6b:eb:ac:5c:fd:db:6e:7e:24:82:3b:d3:d8:18:f2:23:c9:
         1a:62:08:6d:89:09:61:c2:34:3f:4f:65:42:22:f3:29:53:e4:
         b4:01:32:79:ed:e2:ba:07:b7:19:6f:b6:2e:7e:eb:4b:9c:0c:
         ed:be:3e:ee:56:3e:32:0f:73:cf:99:de:28:38:c7:a2:b1:89:
         e8:c6:53:0f:31:04:8a:1c:b5:8c:2a:4e:60:ef:1c:58:6d:e9:
         01:3a:de:e8:c1:f7:5a:21:e9:17:55:f8:27:05:b7:3f:47:ba:
         89:3f:d9:d3:f2:18:fd:94:b8:81:80:dd:18:76:30:4c:27:92:
         eb:94:b5:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 20:21:15 2026 by rpki-client