Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/022d468a-f0eb-3a44-a651-a24a7943f41f.roa
File:                     022d468a-f0eb-3a44-a651-a24a7943f41f.roa (raw, json)
Hash identifier:          hrQfP7xgoUFiO/DLvMA65Ac3hKo7zICMDldKxW6kRms=
Subject key identifier:   8A:F3:AB:B4:DA:CB:82:59:57:A9:F1:14:5E:3A:CE:F8:D6:CC:A5:85
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584F331D295160F35C81FD59CFA0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/022d468a-f0eb-3a44-a651-a24a7943f41f.roa
Signing time:             Thu 17 Sep 2026 01:00:11 +0000
ROA not before:           Thu 17 Sep 2026 01:00:11 +0000
ROA not after:            Wed 16 Dec 2026 02:00:11 +0000
asID:                     19905
IP address blocks:        2604:2e8e:c400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:33:1d:29:51:60:f3:5c:81:fd:59:cf:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Sep 17 01:00:11 2026 GMT
            Not After : Dec 16 02:00:11 2026 GMT
        Subject: CN=73de7f64-7b8c-41ee-b2bf-84310869027a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:3b:73:f3:06:c4:27:6f:1a:2c:06:6e:3d:9b:
                    fb:ea:25:53:90:6f:f8:b7:1c:9a:88:cb:2a:ea:82:
                    03:e5:25:71:58:f8:de:48:01:a3:20:d1:15:5f:31:
                    1c:af:04:cf:ec:62:07:6d:0b:ee:11:42:6f:41:5e:
                    4a:88:2b:2f:9d:35:24:fd:c7:07:7b:9d:dc:40:4b:
                    04:fd:cf:f9:ac:10:32:6d:fe:08:86:29:34:4c:22:
                    38:c9:91:56:84:66:ee:39:18:22:af:03:bb:09:6d:
                    04:26:30:40:95:b9:81:0f:02:de:8c:f6:54:98:77:
                    f9:ed:1c:4b:c2:d3:77:24:d9:b5:d4:31:fa:b3:b0:
                    54:09:cd:9a:08:e3:ef:78:74:86:8e:e6:ca:1f:4a:
                    f8:3f:e2:9e:8e:22:9e:94:f1:43:7b:35:54:fc:83:
                    a9:34:74:e6:52:7d:c4:bc:94:c8:8c:6c:36:f6:f0:
                    a4:99:66:be:01:eb:8f:3a:1d:3f:d5:9d:26:93:fd:
                    73:ab:86:1b:c7:f6:78:6a:b4:7c:a2:65:e0:2c:54:
                    d2:f7:f1:6f:d9:78:5a:a5:60:d5:85:a1:c3:cf:b3:
                    88:d0:cb:88:7b:1d:12:cb:a5:50:ad:02:76:09:96:
                    0e:91:89:dc:ea:2e:d0:f6:40:13:5e:34:f2:a1:6d:
                    35:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:F3:AB:B4:DA:CB:82:59:57:A9:F1:14:5E:3A:CE:F8:D6:CC:A5:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/022d468a-f0eb-3a44-a651-a24a7943f41f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8e:c400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:95:d2:0f:41:b5:c4:2f:c8:00:8e:db:9c:55:dc:4d:7d:f1:
         1b:4a:e0:4d:fd:20:c8:03:bd:28:cc:10:ab:c5:2e:18:8f:a5:
         08:69:62:ff:dc:3e:7a:06:79:05:01:fd:f6:71:fc:68:b7:1b:
         39:fc:57:a4:21:4a:a0:f6:d5:30:4d:ce:94:e4:93:49:31:42:
         a6:05:a4:1f:cb:25:71:6b:2f:5d:9c:54:50:9a:bd:7d:b5:15:
         1b:fb:25:f4:14:ff:19:74:2a:eb:52:63:4d:57:4f:19:84:5a:
         b8:fa:bc:87:aa:97:19:69:6c:b4:ad:7b:7e:5c:6b:ab:42:9b:
         45:fc:13:7f:6d:e0:be:11:21:f3:a5:7a:00:48:19:e4:5d:96:
         b1:81:2d:18:c3:a4:a3:10:13:f1:f1:8e:34:23:d8:c6:fa:3b:
         0a:84:88:46:35:dd:9b:f6:75:d4:3d:2f:02:6f:38:dc:4c:6f:
         93:af:38:f7:35:a7:f0:eb:bd:b8:d8:56:9b:bc:d4:58:a5:de:
         60:3d:16:33:07:1a:55:2b:66:f8:1f:01:3e:3c:e3:1f:bc:08:
         da:e3:24:2d:33:d1:c3:15:37:3c:25:92:bd:80:4d:69:87:eb:
         0a:e6:73:15:93:35:f4:c0:fa:43:2e:7f:6e:65:c2:99:fc:b0:
         01:42:53:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 11:34:31 2026 by rpki-client