Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/98c605ec-62cc-3025-9948-3874552d5e4f.roa
File:                     98c605ec-62cc-3025-9948-3874552d5e4f.roa (raw, json)
Hash identifier:          OG1jbPINv2p0+O5xNMlb0vmyvAiGIv0NC0pefvAT6bM=
Subject key identifier:   00:74:1D:D9:DF:06:8C:9D:CF:4B:68:73:9E:34:4B:0B:5D:0E:F6:11
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584F19FD022A937BFC9623B88C40
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/98c605ec-62cc-3025-9948-3874552d5e4f.roa
Signing time:             Tue 08 Sep 2026 01:00:12 +0000
ROA not before:           Tue 08 Sep 2026 01:00:12 +0000
ROA not after:            Mon 07 Dec 2026 02:00:12 +0000
asID:                     19905
IP address blocks:        2604:2e87:4800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:19:fd:02:2a:93:7b:fc:96:23:b8:8c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Sep  8 01:00:12 2026 GMT
            Not After : Dec  7 02:00:12 2026 GMT
        Subject: CN=05cd1f82-6ed3-4aff-8192-d036657febe6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:8b:a9:c7:f0:2b:1d:ea:aa:29:0d:3f:8c:bf:
                    56:76:c1:90:50:a1:23:47:fa:22:17:39:9b:c2:b6:
                    5b:9c:ff:e8:8e:82:6f:b0:86:83:4f:a8:b7:79:45:
                    6d:86:f5:cb:56:e9:1a:03:a2:c1:51:ac:8e:c2:8f:
                    f6:39:fe:7e:98:ec:03:75:48:0a:4e:61:17:fb:cd:
                    42:68:98:f4:7f:1c:8f:3f:d0:2e:9c:dc:83:2d:66:
                    a5:a2:32:36:99:c5:08:39:88:2d:20:bc:4e:56:ec:
                    06:d2:a8:53:85:15:7d:60:89:e0:53:cf:9a:6b:9c:
                    60:a0:2c:8b:04:c4:70:c6:f9:23:67:e7:1d:47:6b:
                    3b:57:a5:71:f0:75:da:13:24:36:8f:20:ac:30:a5:
                    54:6e:b8:1d:c5:03:34:cf:3c:cf:aa:20:fb:67:13:
                    c0:6c:68:84:a4:98:85:75:02:4e:ca:a3:cd:d4:f0:
                    25:04:46:9e:38:51:f1:86:ae:0e:49:5f:d1:d2:43:
                    4b:61:69:22:af:e1:0b:c0:14:b6:84:8f:00:96:dd:
                    d8:8a:f9:7e:18:0c:1e:5f:5a:4d:3c:64:06:4b:10:
                    59:38:3e:1f:2f:ae:2a:aa:01:65:66:9a:b7:50:35:
                    08:41:95:68:64:42:48:3b:aa:09:67:01:52:b1:9f:
                    44:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:74:1D:D9:DF:06:8C:9D:CF:4B:68:73:9E:34:4B:0B:5D:0E:F6:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/98c605ec-62cc-3025-9948-3874552d5e4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e87:4800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:28:bf:bc:c5:e2:e2:9c:34:fd:a9:50:49:37:e0:97:e4:7f:
         0f:3e:4f:d8:14:49:c4:9a:d4:85:dd:4c:a1:78:59:61:94:4a:
         e7:01:48:fc:d2:1b:1c:13:69:5f:69:0f:53:a5:cc:f3:99:fa:
         7c:86:1a:24:41:b4:6b:51:4b:bf:a5:b5:64:aa:28:e9:7e:ee:
         ef:00:42:fd:ba:48:7a:c2:a0:a0:d3:e8:4c:52:e9:43:76:23:
         28:e7:e6:81:47:5c:99:20:84:c5:a8:3a:6c:fa:a9:1c:4f:a4:
         0c:6d:a8:39:54:98:ba:ed:af:5a:b5:d9:8f:17:b8:1b:47:8d:
         2e:6b:95:e9:d5:6a:ac:26:9d:b4:23:4a:df:63:38:b5:32:32:
         8d:96:c6:f7:c1:63:39:22:5a:54:a2:1b:62:0d:08:c6:40:37:
         4f:07:2a:9f:3d:c2:c2:6e:8e:59:71:58:de:e3:12:06:e3:30:
         b9:64:60:2e:6e:8b:55:e5:f8:28:ac:42:a9:76:7e:aa:bb:7c:
         41:63:57:47:d9:df:ae:74:95:41:d5:3f:d6:bf:7a:82:7b:ea:
         7e:3b:c1:ec:21:a1:26:7c:6b:20:41:bf:9c:42:1b:cb:13:a0:
         80:90:5a:0e:f5:af:b3:e3:a4:a0:25:8d:95:94:1d:8d:02:39:
         2a:2c:5e:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 07:17:28 2026 by rpki-client