Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3c0d34a5-ce00-31b8-b08d-5668f27f6278.roa
File:                     3c0d34a5-ce00-31b8-b08d-5668f27f6278.roa (raw, json)
Hash identifier:          bBWPPguwE46FnSNPzKur3753GxhCwLQZoJ22Rj+2oCw=
Subject key identifier:   67:E3:4D:94:08:3D:C5:1E:84:A5:18:17:C9:F2:41:E7:B9:63:0D:5F
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584F498916FC2B7CDDE085282180
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3c0d34a5-ce00-31b8-b08d-5668f27f6278.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     19905
IP address blocks:        2604:2e87:6000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:89:16:fc:2b:7c:dd:e0:85:28:21:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=f75822ea-58f5-4b73-828a-724285011bba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:5a:9a:7b:79:4e:9c:cb:52:90:cd:ae:41:d4:
                    ae:ad:bc:67:f5:d9:b3:92:48:a2:3a:c7:7d:ad:c2:
                    85:e2:d6:05:d1:70:51:5d:d1:b9:56:8b:4f:ff:64:
                    76:ef:26:4c:22:2e:b0:79:fd:62:25:92:fa:90:cc:
                    7d:fe:52:66:8a:ac:42:6a:b2:2e:1a:f3:e6:2d:e2:
                    fe:df:63:80:8d:35:35:89:9d:d8:9f:19:16:6a:83:
                    f0:01:ed:82:43:d3:fb:f0:9a:c3:2d:07:a8:1f:f0:
                    8b:d6:17:f8:80:80:77:2d:61:88:7a:47:94:4e:05:
                    92:87:db:af:90:d1:0a:74:17:17:3c:1c:05:92:0f:
                    fd:21:ff:bb:16:a0:08:f6:65:f3:c9:89:f6:08:02:
                    ad:f0:8d:86:d9:f2:dd:4e:76:c9:f7:95:5e:6c:b2:
                    55:6c:39:c7:c1:c6:fe:73:7f:bc:0c:cc:69:56:b5:
                    04:64:03:d5:9f:3c:40:f7:c5:83:57:69:3b:4a:7e:
                    8a:ac:f8:3e:59:fe:01:18:4e:af:3b:2c:83:e8:f5:
                    d6:2d:39:40:5b:13:6d:5d:9c:03:7d:87:f6:10:4c:
                    ed:e2:f5:6e:5d:09:ad:76:8d:33:35:17:bf:a5:ae:
                    28:43:41:32:a9:6c:71:ef:c2:70:4f:a2:12:12:5c:
                    39:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:E3:4D:94:08:3D:C5:1E:84:A5:18:17:C9:F2:41:E7:B9:63:0D:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3c0d34a5-ce00-31b8-b08d-5668f27f6278.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e87:6000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:7d:c0:f1:d4:b7:d2:0d:ee:52:e3:3d:bd:b5:3e:6b:9f:c0:
         1a:0d:99:5c:58:4a:90:d8:76:d1:36:6a:e3:71:bc:c5:c8:8f:
         34:0e:0e:9a:28:ca:79:e3:e5:92:29:48:17:12:74:a2:52:54:
         72:1d:d2:5d:49:b9:21:0c:f1:7b:12:3f:f5:23:4b:22:df:84:
         b8:f6:91:9b:2a:31:9a:d0:23:4a:10:54:de:ce:79:b8:2b:0e:
         42:8b:c1:cd:c3:97:e2:d2:08:39:40:74:ca:c1:ae:91:6e:b7:
         d8:59:9b:94:1d:ce:65:81:9e:9c:cd:80:84:bc:51:4e:75:ae:
         9a:3b:ef:ea:76:d8:49:6c:b5:73:9b:37:2d:0d:02:a7:57:4b:
         5e:8d:6b:c2:d1:23:6b:96:57:36:73:47:d6:98:d0:b7:05:85:
         42:61:3c:23:9a:3e:b3:4f:6d:9a:8e:b1:61:4b:35:6a:fa:b1:
         79:00:a5:e9:16:c2:17:66:c6:18:32:e9:31:3b:13:65:70:96:
         af:bc:c6:8c:23:3e:f3:34:21:ae:7a:46:37:08:e1:74:5b:52:
         e9:07:68:d5:91:c3:da:36:b2:73:86:14:ea:7a:ca:49:51:69:
         f6:a3:56:91:53:1c:b1:8b:bd:b6:ed:76:71:ae:dc:a9:19:8f:
         b9:28:27:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 20:41:45 2026 by rpki-client