Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8199ee4e-48f9-3da6-a153-ca4a8e91f371.roa
File:                     8199ee4e-48f9-3da6-a153-ca4a8e91f371.roa (raw, json)
Hash identifier:          /FJV0UBx4vJVGnhuc+1Er3CJPtV+0PEmGuFH8tXzsiE=
Subject key identifier:   2B:F4:E8:E0:4A:56:9E:07:D7:5B:7B:93:75:AC:07:C5:FE:01:1C:EB
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584F3A17DC0E5408BA28ABC46180
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8199ee4e-48f9-3da6-a153-ca4a8e91f371.roa
Signing time:             Sat 19 Sep 2026 13:00:12 +0000
ROA not before:           Sat 19 Sep 2026 13:00:12 +0000
ROA not after:            Fri 18 Dec 2026 14:00:12 +0000
asID:                     19905
IP address blocks:        2604:2e88:f000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3a:17:dc:0e:54:08:ba:28:ab:c4:61:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Sep 19 13:00:12 2026 GMT
            Not After : Dec 18 14:00:12 2026 GMT
        Subject: CN=d667ac29-f81d-4545-be31-94a12807b682
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:70:42:e8:22:ac:35:99:6d:b9:26:99:f1:a5:
                    0c:5b:a7:b1:ae:8c:bc:00:8f:ee:cf:f8:4f:8e:69:
                    59:7a:5d:f2:24:6c:14:30:fd:7d:55:c1:67:f3:1c:
                    2d:7d:f3:da:4f:90:12:19:6c:75:da:06:e9:07:7e:
                    74:ab:cd:b3:76:fe:9a:f7:c6:e3:40:07:e6:f5:05:
                    2e:b7:74:fa:54:b9:94:75:3e:32:b1:61:07:dd:3c:
                    25:b5:4f:cd:b6:f0:95:e4:d8:59:6a:e1:8a:e1:0d:
                    c9:b9:58:a0:67:03:fb:7c:13:6d:78:e3:4d:9f:56:
                    ed:bb:c0:ff:14:96:3a:ee:2d:98:ef:ca:79:75:c6:
                    1f:56:f2:a6:40:f3:3b:a7:0e:ec:d4:07:a1:ac:05:
                    b4:ad:85:d6:1f:80:b1:be:1d:67:80:6e:bd:95:ad:
                    0a:c6:2a:f3:70:4f:46:93:6f:d0:d4:16:cb:29:b9:
                    1a:a9:19:ca:86:68:95:70:e0:f7:db:8a:31:73:0e:
                    0c:2c:11:0e:d8:d1:90:c3:ac:b4:6a:b2:c5:b3:e7:
                    72:51:ab:56:de:13:7e:fa:94:ba:6a:44:7c:d2:c1:
                    b4:52:21:de:9f:86:a3:61:19:e1:6f:ad:77:cd:05:
                    d9:d3:df:26:25:fc:cb:52:ba:b8:37:1c:ee:21:13:
                    bb:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:F4:E8:E0:4A:56:9E:07:D7:5B:7B:93:75:AC:07:C5:FE:01:1C:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8199ee4e-48f9-3da6-a153-ca4a8e91f371.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e88:f000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:83:1d:92:6a:38:06:4d:0d:27:e4:2b:a1:1c:c8:a5:aa:8c:
         e9:fe:e2:82:5b:c4:f5:c1:40:e9:fa:32:05:9a:cf:eb:11:ed:
         08:72:27:0a:4b:d9:61:d3:70:38:ea:51:61:03:b3:d4:c5:50:
         b6:c6:e8:96:02:ec:f6:2d:63:93:f7:ed:2d:5d:fe:f3:c9:46:
         6b:ce:22:fc:38:1f:fd:8a:56:ab:17:d7:7b:ee:8e:10:f7:73:
         99:b4:ee:dd:c6:ff:4c:f4:83:23:55:2a:b5:34:a5:1c:b8:c8:
         88:b8:1f:2c:12:23:53:b8:68:5e:39:d5:46:a5:36:8a:5a:27:
         a3:32:0e:eb:dd:5e:e1:c1:1e:d2:55:85:32:4d:f9:eb:57:3d:
         4d:33:88:b3:41:56:c0:ef:f5:1a:f8:58:08:d6:b4:b8:c3:8f:
         12:91:07:a4:3f:10:d5:ba:63:27:87:66:ea:ca:ef:0a:6f:98:
         b0:12:36:6d:46:7e:26:1f:45:ef:b3:12:85:35:4f:18:cc:91:
         40:86:25:2a:a5:53:e1:ab:2d:70:2f:13:dc:c4:f3:52:e0:a7:
         33:5e:6e:b3:b7:ef:2f:42:22:e5:a3:5b:ea:cf:fe:66:5a:71:
         3f:cf:57:23:2f:70:8e:3e:cc:c8:96:53:df:10:24:b8:e6:0c:
         1e:dd:6e:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 07:42:49 2026 by rpki-client