Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cb24b9d9-05a6-346b-81b2-9e41b55f5592.roa
File:                     cb24b9d9-05a6-346b-81b2-9e41b55f5592.roa (raw, json)
Hash identifier:          k9DnBz5nzoDoxesZo2zalgJKXdujirIIs1l++9BWKFI=
Subject key identifier:   39:E6:04:DA:F4:C4:F1:CE:34:06:04:41:4E:C2:97:C2:FD:C5:FB:96
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584F5E62F18CA82E005F0E046C80
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cb24b9d9-05a6-346b-81b2-9e41b55f5592.roa
Signing time:             Fri 02 Oct 2026 13:00:13 +0000
ROA not before:           Fri 02 Oct 2026 13:00:13 +0000
ROA not after:            Thu 31 Dec 2026 14:00:13 +0000
asID:                     19905
IP address blocks:        2604:2e8c:2800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5e:62:f1:8c:a8:2e:00:5f:0e:04:6c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Oct  2 13:00:13 2026 GMT
            Not After : Dec 31 14:00:13 2026 GMT
        Subject: CN=d6f6c45f-021e-43ff-8acb-c5f093bb07ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:ca:c5:f9:f0:c6:ce:6f:b5:f3:5e:50:9c:6b:
                    d1:6a:b8:a8:ac:34:a4:57:67:27:d2:b3:7a:66:e2:
                    89:7d:b1:f7:d2:ba:ef:0c:14:4e:9e:af:07:d4:a6:
                    2b:81:44:9b:91:12:64:c5:7b:f9:23:e7:a1:ef:77:
                    2e:91:6e:09:45:1d:c9:48:8c:b7:a8:c9:20:6a:1f:
                    84:c2:0a:01:7c:64:2c:2c:dd:63:31:eb:58:f9:00:
                    da:72:b0:69:e5:dd:c8:43:3d:7b:be:ee:c5:60:e6:
                    19:b8:28:ee:ec:2c:35:c6:06:ab:a5:2a:0b:a0:2f:
                    a6:4a:dc:4b:9c:90:20:f9:85:b8:3f:78:c3:60:c2:
                    fb:ce:ce:20:33:71:3f:9f:68:13:c6:ee:4e:8f:5d:
                    9c:44:7b:e6:dd:46:26:9e:b2:89:e4:7f:74:85:6b:
                    41:c7:5e:06:a6:72:ca:ed:a1:c9:2d:52:cf:04:e9:
                    cf:44:35:e3:e0:b2:42:13:3d:1a:48:7f:1a:21:40:
                    28:88:8f:68:5d:85:79:28:32:6e:eb:44:d3:6b:64:
                    77:d6:4d:61:f1:f2:7d:82:88:15:43:1b:05:1c:a2:
                    11:3c:97:88:15:5e:0f:02:1e:c4:98:c0:5b:db:37:
                    5f:4a:99:a4:5a:7f:eb:18:5d:76:a1:90:d3:dc:ef:
                    37:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:E6:04:DA:F4:C4:F1:CE:34:06:04:41:4E:C2:97:C2:FD:C5:FB:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cb24b9d9-05a6-346b-81b2-9e41b55f5592.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8c:2800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:71:bf:dd:fe:40:a6:05:c4:40:c1:29:47:37:c3:47:32:fa:
         16:d0:5e:0f:df:93:68:d5:27:f5:a3:9c:e4:f7:76:76:79:8b:
         c8:44:d7:7a:41:30:a0:28:ee:3f:ab:bd:09:d5:fe:8a:de:81:
         ae:0b:a3:9f:6d:95:bb:59:d2:d3:ff:92:4c:8a:55:4f:c1:ee:
         e5:06:d5:7f:15:9d:7f:d5:89:84:6c:b1:02:b4:83:11:d3:ea:
         98:a3:b8:bf:a7:28:7b:f5:16:ed:9e:84:4f:41:45:2b:7b:51:
         5d:58:ed:fc:78:c1:04:73:bc:a1:0b:ef:03:36:ce:00:8f:d6:
         b8:f7:42:de:6a:a8:31:d5:ef:fc:d3:4e:d8:a9:cc:7b:bb:f4:
         40:ba:de:bb:8f:d6:56:66:cb:fd:bd:b2:76:e6:e5:a8:ae:59:
         c5:f7:0a:af:79:c7:2d:62:5e:fd:c5:b4:cf:a7:6a:23:1b:ac:
         f0:d0:64:a0:52:b7:7e:39:9f:28:bb:7d:0f:64:62:ea:f1:1d:
         94:49:c8:45:7f:ac:bd:43:66:92:f3:0c:69:58:8c:88:95:bd:
         91:8e:23:ac:7f:53:e5:10:02:dd:80:85:28:d0:84:9f:ac:3c:
         3b:58:57:27:ab:d2:6d:40:29:74:8f:42:f9:13:93:f7:02:37:
         1a:3b:ba:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 17:53:41 2026 by rpki-client