Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/57607f0c-d608-3311-a0be-b2165c459163.roa
File:                     57607f0c-d608-3311-a0be-b2165c459163.roa (raw, json)
Hash identifier:          CLZa05dVJQ1U0dKsfIk+M1MTSx/bN6g9LjObV061qow=
Subject key identifier:   D1:11:46:32:5B:B0:64:1D:B0:F4:17:D0:29:2A:AA:20:D1:50:07:B8
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584F480D62B7F1FEF40A39F11680
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/57607f0c-d608-3311-a0be-b2165c459163.roa
Signing time:             Thu 24 Sep 2026 13:00:12 +0000
ROA not before:           Thu 24 Sep 2026 13:00:12 +0000
ROA not after:            Wed 23 Dec 2026 14:00:12 +0000
asID:                     19905
IP address blocks:        2604:2e8a:2400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:48:0d:62:b7:f1:fe:f4:0a:39:f1:16:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Sep 24 13:00:12 2026 GMT
            Not After : Dec 23 14:00:12 2026 GMT
        Subject: CN=030277be-d6c1-4b45-aeb4-2e1ff89ba4a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:ce:14:af:f7:3a:11:ac:0c:71:9a:0b:e1:98:
                    f6:09:e2:a3:9e:79:02:4e:86:f6:3e:57:65:a8:cd:
                    c8:a5:bd:0d:d2:31:53:d5:a1:d9:8e:c4:2e:4f:08:
                    c6:74:63:67:5b:e1:6b:80:b8:46:4a:bb:59:3d:47:
                    30:04:65:99:4e:55:96:d9:73:f7:56:2f:09:3f:7f:
                    e9:55:d4:1b:8c:f5:cf:3d:75:c3:e2:66:f8:33:db:
                    b0:a0:19:1f:1d:03:e2:c5:06:50:c3:32:49:9a:0e:
                    5f:70:be:6b:61:3d:2c:72:44:68:18:bf:de:45:b5:
                    d6:06:7e:6e:7c:6e:8d:a2:cb:74:37:7f:d9:eb:e6:
                    1a:49:f9:bf:1a:0b:93:30:63:21:34:4a:de:7e:04:
                    6d:f8:62:8f:a6:25:01:80:e3:6e:e3:b9:5e:fc:f8:
                    5d:fb:2d:0b:3b:a0:2c:89:2b:63:18:08:4c:de:c1:
                    52:37:23:c9:82:6e:17:6a:93:6b:b2:19:93:aa:ac:
                    75:38:ac:07:e0:0d:40:9d:e9:44:76:b9:57:da:a9:
                    08:02:93:80:23:7d:62:f8:27:52:4e:0e:1f:00:c6:
                    a2:ab:6e:71:34:5f:73:48:73:d0:b6:23:cb:c5:f9:
                    e3:b8:f4:68:95:a1:f3:ad:45:00:3a:d4:05:59:4f:
                    42:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:11:46:32:5B:B0:64:1D:B0:F4:17:D0:29:2A:AA:20:D1:50:07:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/57607f0c-d608-3311-a0be-b2165c459163.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8a:2400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:8e:bd:c9:39:88:ec:16:ce:75:53:98:52:c2:44:22:7e:12:
         1e:10:58:c9:c3:da:65:43:b5:40:0b:59:27:c0:b2:70:53:9f:
         97:b4:4f:64:90:07:19:62:f0:db:87:df:87:cb:2f:7a:61:d3:
         81:d9:55:f3:3c:a1:64:3f:23:ca:0d:5b:33:5a:cb:33:42:b1:
         6b:05:b6:54:7b:df:f1:27:0c:1c:ae:36:02:d8:c3:7c:e7:75:
         45:95:db:ec:da:f8:98:75:a1:93:4f:41:c7:f8:53:f8:c1:20:
         b7:18:04:78:9a:29:53:b9:ca:33:a4:ad:6b:fa:6b:48:45:7f:
         57:57:75:38:fc:9b:91:f2:e4:c2:7b:7a:9a:e2:da:de:72:7e:
         ec:e4:1b:d4:31:09:20:f7:4c:44:5a:6e:28:46:2b:4a:7c:02:
         6f:28:c8:d7:5f:a5:63:5b:99:f2:79:f9:d1:fc:22:77:34:c5:
         04:dd:e4:31:c8:f1:31:f7:63:05:66:16:ed:1d:76:25:99:42:
         33:b5:c6:a4:b7:2a:96:05:30:25:a5:02:06:ca:68:13:ce:9e:
         3d:fd:de:1d:2f:77:ae:21:b9:25:d6:7f:ab:9c:95:a0:de:0c:
         9d:36:f5:2d:fa:2d:8f:40:9c:da:35:a4:94:ce:1f:cd:50:e8:
         05:4c:42:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 08:44:29 2026 by rpki-client