Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f2094f96-87f1-3e22-ae9f-c785b5ba1354.roa
File:                     f2094f96-87f1-3e22-ae9f-c785b5ba1354.roa (raw, json)
Hash identifier:          7N8iNafHmbvXyF+V5X47EkxSs6/glSURte9ZxNf4owU=
Subject key identifier:   6F:79:A0:F2:C2:DA:BC:46:CE:D9:CF:7E:63:06:F7:3F:7E:47:7C:96
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584F71ED7B5AF8C7CB25FE853640
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f2094f96-87f1-3e22-ae9f-c785b5ba1354.roa
Signing time:             Fri 09 Oct 2026 13:00:13 +0000
ROA not before:           Fri 09 Oct 2026 13:00:13 +0000
ROA not after:            Thu 07 Jan 2027 14:00:13 +0000
asID:                     19905
IP address blocks:        2604:2e8f:9000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:71:ed:7b:5a:f8:c7:cb:25:fe:85:36:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Oct  9 13:00:13 2026 GMT
            Not After : Jan  7 14:00:13 2027 GMT
        Subject: CN=7ff41287-57d3-4dae-b603-3d3f48ac911e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:25:e1:49:85:45:69:c5:28:3b:69:48:06:66:
                    0a:8f:58:9d:83:1a:5a:e3:60:e1:f0:e0:f3:9c:90:
                    a0:80:67:82:a5:0e:df:a4:b1:c0:72:02:3b:df:e6:
                    6b:85:ce:0d:cc:48:7d:0a:bb:4a:65:87:2b:7f:65:
                    40:d1:9a:6e:ca:c7:42:b0:9b:73:92:28:01:5c:67:
                    e9:3d:f0:45:91:03:2b:65:8f:c4:24:62:73:7e:20:
                    08:36:f6:67:44:5e:c7:c6:6c:1e:4d:c3:da:8e:5f:
                    6e:ce:13:fb:df:a3:6f:12:4b:d5:72:4f:5f:1f:d3:
                    92:72:8e:c9:19:80:70:ec:2d:94:a7:e3:f5:4e:75:
                    1f:b8:df:3d:eb:6d:f7:78:c4:a3:a9:3c:34:5b:d5:
                    33:ed:bd:f4:b3:de:c9:b0:3a:52:f2:6c:59:3b:e5:
                    3d:16:91:1d:92:60:ab:63:6b:82:20:ed:8e:de:e6:
                    52:bc:8a:41:cd:ad:fe:ee:50:80:3f:5d:2c:df:f2:
                    96:67:5b:7a:4f:7a:c9:1e:64:d6:87:74:20:fb:0d:
                    e9:30:91:87:8a:32:fb:d4:ad:f0:a7:ba:9f:62:89:
                    db:cb:a7:18:4d:22:90:03:b1:17:0c:52:c3:20:52:
                    cf:de:d5:c6:25:39:c9:1c:bf:b7:fa:d2:39:b7:0d:
                    be:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:79:A0:F2:C2:DA:BC:46:CE:D9:CF:7E:63:06:F7:3F:7E:47:7C:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f2094f96-87f1-3e22-ae9f-c785b5ba1354.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8f:9000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:dd:a1:0f:98:53:cf:1d:b1:59:27:51:9c:de:a4:db:59:5b:
         93:bb:d1:5b:e5:2d:86:0c:44:fd:1d:ed:08:9c:ea:e0:a1:91:
         12:3c:c5:af:a9:4b:05:eb:d9:2a:12:ac:4d:d1:f6:86:fa:e1:
         d6:74:b8:86:e0:f1:dd:03:1d:6c:49:ca:63:2a:bd:74:1a:3d:
         5e:39:c0:84:3e:82:2e:41:1c:a6:e9:b7:0b:a1:5f:ef:bd:4a:
         4c:75:88:7f:62:d7:23:10:78:88:53:00:f4:fb:23:58:9b:b4:
         ea:b2:e5:13:62:89:b1:07:68:8e:14:4c:00:01:58:0b:e0:9b:
         28:94:58:84:ac:76:1c:b7:e3:36:a0:04:ef:9c:0a:e1:fe:76:
         f0:ee:8f:82:8d:46:da:63:a9:9c:c0:ea:04:17:55:30:7f:70:
         0e:5a:aa:d6:68:63:22:7b:b4:57:91:1d:da:65:7c:0a:0a:ed:
         c5:e0:b2:26:0d:cb:65:5f:99:a0:b0:b3:01:d3:15:bc:a6:27:
         42:63:bc:e6:54:be:06:f1:88:fc:cc:05:e8:36:01:35:cb:81:
         4c:50:2f:9a:c8:66:b3:8d:12:0d:61:b4:52:25:36:15:de:ae:
         d9:b6:18:ac:e1:b6:5c:86:4f:2c:81:22:ac:42:9c:1f:85:a4:
         09:5d:73:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 15:59:30 2026 by rpki-client