Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b26d6b84-8a61-4533-a922-5e09436bf519/298d9e74-c1df-37ff-9d61-74c5b58c8faf.roa
File:                     298d9e74-c1df-37ff-9d61-74c5b58c8faf.roa (raw, json)
Hash identifier:          wMJJNKprSrAX96jjeldM3jmcqcCyiCbfzjSEh1uR6yE=
Subject key identifier:   52:78:F6:04:D8:18:A5:69:50:A8:FD:33:18:48:85:88:D7:16:0D:8D
Certificate issuer:       /CN=b26d6b84-8a61-4533-a922-5e09436bf519
Certificate serial:       010D0C9F4328584F4973A47AB7EA5DEC51216140
Authority key identifier: 64:C6:3F:3C:C1:2A:F9:FB:C9:4B:1A:5A:6B:90:92:5E:51:51:6D:4E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b26d6b84-8a61-4533-a922-5e09436bf519.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b26d6b84-8a61-4533-a922-5e09436bf519/298d9e74-c1df-37ff-9d61-74c5b58c8faf.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     32281
IP address blocks:        2604:2340::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b26d6b84-8a61-4533-a922-5e09436bf519/b26d6b84-8a61-4533-a922-5e09436bf519.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b26d6b84-8a61-4533-a922-5e09436bf519/b26d6b84-8a61-4533-a922-5e09436bf519.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b26d6b84-8a61-4533-a922-5e09436bf519.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:a4:7a:b7:ea:5d:ec:51:21:61:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b26d6b84-8a61-4533-a922-5e09436bf519
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=812f86e8-ef05-444c-a04b-8bf421cdbbe0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d8:06:84:c2:33:41:2e:88:a5:20:10:1a:e8:
                    79:ea:63:ac:87:36:c3:43:89:46:d4:df:29:b2:c1:
                    09:69:77:e8:c4:1c:11:07:1f:6a:10:46:73:43:27:
                    b5:67:36:d3:27:30:d9:1f:83:19:1a:8f:22:88:1b:
                    63:b1:10:61:48:6e:b8:5a:8f:a6:9b:a3:53:83:b3:
                    00:a8:3a:da:50:ad:64:a3:e7:5e:77:7f:ff:da:6a:
                    2d:6b:c5:cd:f3:88:ad:3d:33:6b:1d:9f:54:63:22:
                    22:63:45:ff:85:6d:b6:68:52:dc:b9:db:35:e6:bc:
                    a4:d1:1e:6d:98:82:ee:6e:11:c7:70:5e:5c:3c:b1:
                    08:5c:5d:59:33:08:30:47:e9:0e:a2:a8:8d:ef:5d:
                    cc:0b:20:bc:18:9b:67:81:0b:34:d2:e7:bf:87:28:
                    16:14:a2:6b:88:a2:c1:ff:0f:0f:4b:ae:a2:b6:b8:
                    ff:ca:90:72:a0:94:f7:34:b3:94:d5:63:11:06:69:
                    b2:59:34:c0:1e:3e:09:0e:b0:d9:ae:5f:70:c0:02:
                    76:79:e3:70:e8:63:06:01:cf:b2:e1:f7:2b:76:16:
                    a1:40:64:02:16:c5:5f:6e:80:7a:96:e6:26:46:1e:
                    81:91:3e:6d:b3:c2:52:de:c5:2b:79:38:aa:f2:2a:
                    19:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:78:F6:04:D8:18:A5:69:50:A8:FD:33:18:48:85:88:D7:16:0D:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b26d6b84-8a61-4533-a922-5e09436bf519/298d9e74-c1df-37ff-9d61-74c5b58c8faf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b26d6b84-8a61-4533-a922-5e09436bf519/b26d6b84-8a61-4533-a922-5e09436bf519.crl

            X509v3 Authority Key Identifier:
                keyid:64:C6:3F:3C:C1:2A:F9:FB:C9:4B:1A:5A:6B:90:92:5E:51:51:6D:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b26d6b84-8a61-4533-a922-5e09436bf519.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2340::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:60:a6:49:d2:cb:d1:71:7c:24:00:61:4b:03:9d:f3:b6:90:
         72:69:a9:79:09:c8:65:a5:e9:4a:a3:49:38:0a:87:65:f6:a5:
         3f:a1:62:91:e7:4f:74:d4:74:6b:8a:27:f8:9b:97:57:b8:3f:
         e5:fd:95:1a:50:ab:8f:6b:23:05:f7:c7:58:95:84:4f:c9:e8:
         a4:d9:be:bc:49:5e:63:6e:81:a2:cb:a7:ae:c3:cb:06:45:89:
         0a:5c:88:a8:69:86:a4:c6:b7:0c:ee:a6:cb:55:38:2e:11:df:
         06:b2:97:94:35:fc:8b:07:37:5a:81:31:4d:fc:ea:78:c4:5b:
         e2:cf:61:e7:29:b5:58:3d:00:4c:be:6a:86:67:a0:e9:f3:45:
         73:e2:fb:60:63:27:8a:ef:c5:04:9f:5d:3d:d1:0c:76:6a:bc:
         a5:af:74:00:51:7b:52:7f:d5:11:5f:a5:10:99:8f:4f:e3:2a:
         fa:ee:71:17:05:8c:e7:ff:7a:ad:46:73:d8:96:dd:c1:17:5d:
         a5:48:ab:ac:02:5a:2b:f1:56:e6:d2:68:96:b2:96:10:b6:1a:
         57:64:42:e4:e2:ec:4b:7d:ed:4c:d3:ae:32:4a:e6:ce:f3:41:
         b7:d0:40:1a:99:9f:51:77:d9:6e:8f:d4:32:93:b0:35:5b:48:
         fc:a4:ef:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 11:03:37 2026 by rpki-client