Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/be152db9-cba6-3589-8cf4-d25238d330fe.roa
File:                     be152db9-cba6-3589-8cf4-d25238d330fe.roa (raw, json)
Hash identifier:          rJXLNrnF8kmV7rZVK0/bZzknsHMaMYWlZ0nq2wHCo9w=
Subject key identifier:   01:A1:B8:41:85:A5:38:1D:7C:EB:E5:9F:18:04:9E:C5:54:75:F9:E0
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584F576816D815B3C069C0AF2E10
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/be152db9-cba6-3589-8cf4-d25238d330fe.roa
Signing time:             Wed 30 Sep 2026 01:00:12 +0000
ROA not before:           Wed 30 Sep 2026 01:00:12 +0000
ROA not after:            Tue 29 Dec 2026 02:00:12 +0000
asID:                     19905
IP address blocks:        2604:2e8f:4400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:57:68:16:d8:15:b3:c0:69:c0:af:2e:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Sep 30 01:00:12 2026 GMT
            Not After : Dec 29 02:00:12 2026 GMT
        Subject: CN=76ebdfed-dbe4-4f00-bf94-d7a9ada0ba66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:67:80:11:1b:90:69:d7:b0:91:67:9a:81:4f:
                    3d:68:27:4c:59:01:30:6c:b8:f5:55:e0:9f:ed:09:
                    c1:bc:7d:da:3e:a0:a3:80:d9:24:72:1d:8e:c3:93:
                    fa:47:ce:24:9b:13:c4:8a:e2:f8:dc:45:09:50:0f:
                    6d:36:4e:65:b6:70:83:98:85:93:46:df:56:01:31:
                    4a:e5:07:67:03:c8:c4:ca:84:29:0b:d5:9c:75:35:
                    ca:0a:39:52:17:a6:4c:f2:fc:5f:b6:41:5a:b1:38:
                    c6:c9:88:d4:57:4c:b7:c9:1a:50:d3:b1:db:16:74:
                    d0:0f:4c:f3:c8:2d:52:7d:e5:ac:8b:94:c1:a6:de:
                    43:fe:3a:4d:47:79:3c:40:37:aa:09:c0:6b:62:e6:
                    f0:27:b1:d6:00:d6:57:43:e4:94:71:59:96:56:c6:
                    dd:7c:70:78:21:00:c3:b8:20:2a:86:02:ed:c6:2f:
                    58:1e:54:38:a2:c7:2b:67:8c:87:55:23:f8:6c:93:
                    ac:9d:45:fc:a5:8f:3b:0c:c0:30:b1:dd:91:ac:14:
                    09:43:a8:05:41:c3:cf:ad:9e:e9:e5:80:6a:59:f4:
                    bb:cb:c9:ef:85:ec:2f:e9:d5:b0:68:52:9a:f3:8f:
                    2d:9a:9c:70:a9:6f:9b:78:f3:64:55:d9:a3:01:04:
                    b0:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:A1:B8:41:85:A5:38:1D:7C:EB:E5:9F:18:04:9E:C5:54:75:F9:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/be152db9-cba6-3589-8cf4-d25238d330fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8f:4400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:62:1e:76:16:c4:39:c5:a2:75:2f:e5:25:fb:fd:00:ef:6e:
         8b:1a:1d:24:9a:93:d4:98:bf:97:22:3b:42:23:2c:58:fd:d4:
         6a:41:88:37:43:da:93:79:fe:54:cc:60:26:b6:c9:6b:b4:90:
         71:11:71:ba:01:93:c5:0f:b7:60:86:82:b3:7e:62:b0:16:87:
         51:b1:29:fd:a9:01:bf:83:e6:29:04:2f:20:78:db:db:a8:ff:
         ed:dd:66:f4:da:52:32:3d:c1:02:68:60:1c:8c:55:9b:8e:7f:
         ca:e8:01:7e:cf:e0:08:b8:11:8a:0e:a3:bf:1a:ec:c4:5a:f5:
         fd:83:b8:11:08:f2:11:ff:67:5f:47:02:3e:30:ae:6e:84:9b:
         e1:48:f0:ec:17:f8:c7:af:63:ff:db:fe:c5:b6:1b:d2:9e:76:
         f9:72:82:7b:5b:53:6d:94:52:54:89:58:fb:eb:2f:18:a2:24:
         33:aa:d3:72:c2:1b:94:d6:12:33:35:2e:85:b6:04:33:8d:c6:
         dc:e1:93:aa:ea:d1:92:46:25:85:b8:38:5a:61:40:c3:1e:66:
         2c:fa:4b:a1:83:79:7b:56:bf:df:3b:d0:79:03:f6:c6:bc:24:
         76:5c:8c:8f:e4:8f:dd:9f:1e:40:4a:07:d9:67:f8:55:53:d8:
         36:10:8c:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 17:04:45 2026 by rpki-client