Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a2015884-e184-3346-b711-59bf5b67b492.roa
File:                     a2015884-e184-3346-b711-59bf5b67b492.roa (raw, json)
Hash identifier:          limh3weFZVwYdxXqksOItVdZCV81ZHkdOz8rFNo6Y+E=
Subject key identifier:   F0:A5:DD:DF:C1:26:39:48:E6:94:BA:A1:2C:42:A7:5E:BF:72:28:18
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584F498B2F84E1184D7D3A347240
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a2015884-e184-3346-b711-59bf5b67b492.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     19905
IP address blocks:        2604:2e88:f800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8b:2f:84:e1:18:4d:7d:3a:34:72:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=ef4a0ba6-a5cb-4a8a-bd94-17878b71da38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:24:da:8c:56:c3:57:c3:c9:ac:94:bf:8f:e7:
                    a2:12:7b:e9:e0:c1:d9:75:46:d3:00:08:44:7c:a3:
                    7e:ea:a1:e1:ee:02:c3:11:cd:fe:61:f6:98:07:8c:
                    b6:15:ea:ce:98:d3:fe:b3:11:75:29:5d:d8:50:6a:
                    15:12:2a:ca:64:01:c1:a0:4c:b8:39:6d:4c:35:26:
                    db:4f:e2:02:0c:9a:24:fd:84:ff:f2:47:ee:8b:1a:
                    33:01:c4:40:49:ff:cc:9e:5f:83:b9:4d:19:70:f7:
                    92:90:42:8d:e0:a9:7d:54:71:cb:70:4a:f7:79:bd:
                    a0:27:96:2c:b5:18:0f:a7:37:47:10:a6:a1:33:b9:
                    02:5a:9c:95:b9:c8:5d:e0:3d:c6:8f:d4:70:54:67:
                    8c:92:7f:a2:82:cc:19:04:29:27:3e:30:a7:c1:f6:
                    7e:56:4f:ad:3f:73:f9:e1:a4:11:b6:0a:92:55:e9:
                    b4:68:57:b4:79:0f:19:11:a8:47:37:5b:93:41:af:
                    c4:78:15:60:fb:8a:b9:05:f4:86:99:3e:77:12:90:
                    e5:ae:92:8b:f9:9c:5e:b8:11:62:62:52:f8:3c:1e:
                    b7:51:33:38:12:af:00:37:85:d4:c2:31:72:af:51:
                    f9:ac:b5:1a:67:44:d6:56:d1:75:85:40:fb:08:28:
                    0a:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:A5:DD:DF:C1:26:39:48:E6:94:BA:A1:2C:42:A7:5E:BF:72:28:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a2015884-e184-3346-b711-59bf5b67b492.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e88:f800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:62:ec:8a:36:46:21:86:9d:e8:66:57:1e:8e:17:16:10:70:
         a4:bb:04:ee:5a:1e:4f:3a:d4:ae:90:6b:f4:d8:f6:13:48:a2:
         c9:ff:dd:22:0a:69:9e:36:77:39:e3:fd:1e:0f:6c:3d:76:0b:
         46:4f:1b:22:af:23:57:b2:17:7b:f6:00:36:6e:a6:01:15:ce:
         da:fe:72:ea:b1:8d:4e:ce:e5:52:90:ad:9c:49:77:3e:d2:3b:
         4a:5c:68:ae:e5:1d:96:14:55:38:ef:2e:de:91:c9:56:0c:94:
         b3:55:e2:b1:73:07:b2:65:fb:09:b0:d7:27:d3:19:7b:e7:5e:
         52:87:15:11:b6:f4:4c:e0:50:5d:70:c1:9b:92:ab:15:79:9f:
         50:ae:69:b7:ce:a2:0e:ec:ae:6d:44:40:6e:20:ef:c0:de:da:
         93:8d:b6:d6:b6:6b:20:c2:63:05:8a:ac:91:7c:6c:e8:48:a9:
         11:b1:a5:df:da:47:96:f8:be:75:12:1c:2b:4e:30:e1:e1:a8:
         f0:f3:49:8e:37:f3:a6:e5:54:87:3c:0b:4e:09:90:89:31:75:
         72:88:5f:ca:de:49:2f:8e:45:50:6d:b2:9c:1f:52:52:15:c9:
         02:84:4d:08:36:98:a5:85:8f:7a:c8:97:4c:26:dc:6d:e4:9f:
         30:c1:4e:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 13:18:54 2026 by rpki-client