Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c528c11f-9870-3c8c-8416-6c8a696e290f.roa
File:                     c528c11f-9870-3c8c-8416-6c8a696e290f.roa (raw, json)
Hash identifier:          l/EQtbiSwvr2XwpNS6311NhpmSBVl2dwzCO6Bx1XmbQ=
Subject key identifier:   BE:06:2B:55:93:80:F4:55:E1:2B:94:93:02:C6:3A:F7:2E:20:4B:01
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584EA795BC9D39BA23E4A0279900
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c528c11f-9870-3c8c-8416-6c8a696e290f.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     19905
IP address blocks:        2604:2e8e:2000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:95:bc:9d:39:ba:23:e4:a0:27:99:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=f28740c9-69d7-428d-ac10-6b5ea00ce9f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:c8:c3:80:e7:06:48:bb:9c:a4:9e:87:a0:11:
                    29:57:aa:a2:23:d9:9a:e1:65:5b:e8:02:3e:7e:45:
                    97:8b:4f:95:70:5e:ca:1a:f8:6a:5d:14:d6:0f:63:
                    85:98:9f:91:35:be:4a:5e:d9:28:04:d0:70:95:83:
                    8e:17:0f:dc:ae:91:f0:da:61:06:e3:b5:a0:a6:c3:
                    72:5c:1e:0a:b7:e1:6f:36:4f:4b:7a:72:a3:01:a4:
                    63:fb:30:2c:b3:9f:76:98:fc:0c:2f:45:f5:8e:f9:
                    c1:45:63:c9:12:53:b6:24:6b:52:94:15:c3:05:ce:
                    83:85:22:f5:21:2b:66:e5:25:50:fe:17:e1:31:24:
                    13:00:df:37:07:81:8f:f0:06:66:35:69:3d:60:95:
                    02:be:b5:ce:01:b3:fc:37:b6:bc:9e:f6:40:47:1e:
                    93:7f:d3:7b:41:72:a1:c3:95:82:ea:eb:76:73:0c:
                    00:79:74:2c:63:e0:c5:c1:1c:d4:c3:85:b1:15:d4:
                    5f:90:72:4a:05:8a:7d:49:3a:44:22:5a:44:ac:6e:
                    62:e6:5b:88:fb:f6:38:43:c7:df:a7:09:13:41:8c:
                    88:96:03:ca:c9:23:be:d5:e5:1f:1b:d7:89:17:d4:
                    a1:d0:6b:4d:bc:02:1e:1b:8c:13:b0:d6:15:27:45:
                    21:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:06:2B:55:93:80:F4:55:E1:2B:94:93:02:C6:3A:F7:2E:20:4B:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c528c11f-9870-3c8c-8416-6c8a696e290f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8e:2000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:c0:47:97:9d:b0:1a:19:b6:f7:cc:ed:59:18:d6:43:dc:54:
         72:2f:15:cf:d8:6d:69:f8:f5:85:03:19:eb:dd:3b:dc:e6:03:
         1b:52:5c:38:68:33:43:a6:9b:b7:a6:e6:a4:b5:1c:1f:a6:12:
         92:ec:c6:64:72:49:52:42:5c:59:f5:25:c6:b8:f6:ce:94:77:
         83:81:16:04:8f:1b:a8:3e:f3:32:90:4b:51:e1:03:b0:96:55:
         9a:ad:af:30:13:fa:e9:78:52:ba:4a:a1:f1:ab:2b:1e:c5:b5:
         eb:b1:45:07:b8:41:af:73:de:9d:c9:5e:c6:90:80:9e:5f:7b:
         61:09:16:98:b8:8c:53:ac:26:52:df:1e:bd:47:d8:2d:46:51:
         2d:2b:c3:b3:6c:ca:e5:f0:92:47:ba:31:84:4c:08:6d:07:75:
         94:50:c6:68:2a:b6:35:b7:ca:a6:a8:04:b9:11:46:32:44:ac:
         6a:f5:4f:88:d5:86:1c:42:04:a9:a4:c6:24:1d:49:68:5b:bc:
         05:5a:4a:cc:82:dc:8a:47:e5:8c:d5:ae:6d:55:2a:96:eb:19:
         8a:49:d1:4d:f9:64:8e:bc:ec:00:3c:46:12:f1:a1:b8:e6:26:
         9e:0b:a3:0d:b8:4f:10:a3:95:b1:12:b3:a6:0b:f1:0c:fd:70:
         58:f6:bc:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:04:23 2026 by rpki-client