Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/09550c93-ec8a-316e-9740-a78fdbc839dd.roa
File:                     09550c93-ec8a-316e-9740-a78fdbc839dd.roa (raw, json)
Hash identifier:          H9Zzk2iSd/AdzTPIRmzppHLWj3h8aAokmaXvfdhkiDM=
Subject key identifier:   DD:7E:EA:14:8D:36:1D:01:0D:83:A4:B4:A8:20:FB:BB:C6:08:6D:B0
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584F49743EE435411832F57E9300
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/09550c93-ec8a-316e-9740-a78fdbc839dd.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     30036
IP address blocks:        2604:2e88:f800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:3e:e4:35:41:18:32:f5:7e:93:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=7b9de12f-1d6f-444f-885e-cf255d540976
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:8e:9f:e5:7e:00:8e:f1:53:e0:5e:0c:02:81:
                    cd:28:c4:72:08:05:5b:c9:8f:8c:75:37:bc:54:98:
                    ed:a3:13:84:86:3b:b5:b6:b6:da:86:bd:8e:f1:3b:
                    44:9a:7d:34:19:f3:22:bf:c4:ba:9f:9d:66:64:df:
                    8b:8c:48:3c:3b:81:41:86:0a:a1:9b:f1:08:32:d4:
                    8d:0d:42:cf:24:f0:0d:e4:68:3d:a5:c0:32:00:3f:
                    cc:44:96:c0:f9:4b:82:b2:91:eb:4c:e6:71:2c:d4:
                    c7:4f:7c:d0:43:69:f0:6d:4d:b3:0e:84:9b:d7:56:
                    c6:9e:ae:ca:db:63:96:4e:1d:9d:6a:61:d3:96:c8:
                    ce:6a:7b:e6:a5:d6:85:dc:dd:62:e8:aa:72:96:46:
                    6b:36:13:8f:46:cb:eb:e3:e6:90:01:6d:9c:a8:0b:
                    3d:22:67:a7:af:bb:76:a8:41:23:35:73:88:b9:2a:
                    87:3c:41:0b:22:6f:85:3b:ea:6c:82:04:a5:ae:3a:
                    56:f9:a6:20:f6:c0:64:cf:69:d8:60:5c:72:ea:e1:
                    4d:06:c1:35:b5:8a:66:81:08:0a:55:b4:48:43:6c:
                    84:67:c1:07:82:aa:20:db:90:05:50:8f:89:cd:f9:
                    8b:7b:a6:11:4a:c2:03:ff:70:90:1d:a2:4f:f5:6b:
                    26:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:7E:EA:14:8D:36:1D:01:0D:83:A4:B4:A8:20:FB:BB:C6:08:6D:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/09550c93-ec8a-316e-9740-a78fdbc839dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e88:f800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:fc:a9:99:a4:c4:30:c5:98:a3:e4:06:3c:10:33:07:70:f5:
         d3:54:b2:93:85:90:0c:d6:be:31:2e:68:64:25:ad:df:15:69:
         d7:37:da:e1:51:8b:ee:64:39:61:fe:86:2d:67:11:bd:9e:60:
         86:e2:96:47:10:b5:44:74:60:83:cf:8f:4e:9c:61:a0:0f:4b:
         fe:6f:8b:53:b8:c4:0a:6e:c1:5b:d7:ea:22:12:46:04:9c:d9:
         45:27:b2:30:94:d8:7f:52:37:bd:11:6d:0f:65:c5:d2:48:ff:
         14:e5:78:f2:bb:d3:86:ba:fa:93:48:cf:3e:96:7a:79:63:ee:
         43:a4:c4:c1:4d:de:d1:07:9a:1f:56:0e:55:53:46:2a:d8:e9:
         2a:a1:67:44:9d:7f:77:64:2c:e0:aa:a1:5b:03:17:5a:41:35:
         07:ef:7d:1c:3d:6d:b2:2e:59:6f:1a:94:1d:e5:62:d7:7f:81:
         0f:e4:39:52:1c:1b:50:ab:ed:90:7b:d7:15:07:2d:70:40:37:
         45:1e:66:52:c5:12:6b:a7:92:31:5f:32:da:bd:d3:0c:b3:a8:
         2b:d4:9d:2c:72:de:fe:87:d5:8c:2a:4d:6d:7f:63:c1:c0:bb:
         78:4b:54:2a:cc:19:bb:77:06:8e:31:7e:6c:7a:f0:45:4a:91:
         40:6f:3c:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 03:46:53 2026 by rpki-client