Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/68c68e79-1c47-3078-9917-47c5d37abb24.roa
File:                     68c68e79-1c47-3078-9917-47c5d37abb24.roa (raw, json)
Hash identifier:          ZpDv0M7EBceVtKAhcjUbfraAp3Ob0Yko9YeZdf8RGfw=
Subject key identifier:   A1:7E:C4:D1:08:30:75:04:74:2C:A2:B7:4A:DF:FC:95:A3:A6:BE:CB
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584F49746E21EE6B98653B7463C0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/68c68e79-1c47-3078-9917-47c5d37abb24.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     19905
IP address blocks:        2604:2e89:f000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:6e:21:ee:6b:98:65:3b:74:63:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=0e921114-c851-426e-b118-a16985cb132b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:27:08:34:76:eb:e9:3a:f7:c0:72:71:87:a9:
                    38:9d:14:3b:de:ed:30:71:5f:22:fb:ad:55:66:8b:
                    0d:2b:e6:c1:9c:e2:54:8e:cd:54:ac:ec:f1:6b:76:
                    fc:fc:a2:f8:37:e9:5c:68:a4:10:59:e2:c1:ca:e2:
                    d5:5c:01:5b:e6:39:9f:93:72:ba:a8:8e:37:e2:3f:
                    65:f1:6f:be:fd:2e:93:24:d5:ff:53:50:53:82:2a:
                    97:f3:bd:59:fc:53:83:4f:88:1e:10:88:48:a0:6b:
                    03:19:21:18:b3:51:5f:12:0a:49:ec:f3:63:ca:05:
                    10:96:03:ea:6d:07:83:71:89:ff:27:bf:14:12:cb:
                    ed:80:c9:c3:0d:71:d9:3e:ad:c3:1b:3f:72:6f:6a:
                    35:10:9f:b1:29:ec:fe:d1:72:2f:b6:61:54:1a:da:
                    46:b3:0c:cf:6f:1e:76:5b:28:1c:e8:51:d7:e2:9a:
                    38:5b:88:dd:2c:62:29:1c:37:bf:0a:58:81:c3:6f:
                    1a:1d:28:4a:2b:59:ee:76:9c:2c:30:67:c0:e1:11:
                    c8:0f:82:07:9a:ad:c3:3e:61:08:b5:47:64:23:73:
                    62:cd:37:5d:6b:3b:26:aa:89:72:78:c1:8e:26:fd:
                    72:7f:ae:42:fd:65:8c:c8:99:b1:cf:c5:59:cf:5d:
                    58:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:7E:C4:D1:08:30:75:04:74:2C:A2:B7:4A:DF:FC:95:A3:A6:BE:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/68c68e79-1c47-3078-9917-47c5d37abb24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e89:f000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:7b:31:f6:1e:b6:08:90:77:29:35:29:54:5e:c4:31:6a:c1:
         41:03:d1:04:87:ba:36:17:0c:78:96:15:3f:16:48:af:55:06:
         ad:72:07:5a:a7:1d:70:f8:25:87:95:9f:34:25:6e:31:6e:3c:
         71:bd:d3:ec:e3:a3:82:3e:ad:5a:4d:1f:7e:bd:8f:09:5a:2f:
         6d:3b:99:4f:23:4a:e2:ae:9d:7c:ff:1b:5c:7c:8e:9f:a0:a1:
         67:72:b9:64:30:62:83:8e:82:94:66:e7:6f:c1:46:46:4c:5c:
         72:dc:02:0c:70:fb:75:0a:a2:69:2a:c7:f0:46:02:21:3f:94:
         cf:60:f4:33:2f:0e:d2:2c:57:01:9f:68:d8:9a:b5:4c:e3:1b:
         71:1f:19:5f:35:64:b4:1e:59:f8:0b:f3:00:da:7e:8c:f8:12:
         c3:09:b3:c4:cb:86:55:e0:a7:f8:10:4b:de:bd:7a:42:d5:5e:
         8a:55:46:3d:9d:c1:16:dc:29:e0:1a:1f:5e:ad:7d:ff:b9:ef:
         3c:10:bf:cd:02:29:3b:92:bf:fa:5d:a5:ca:6a:54:a3:87:03:
         69:c3:91:6a:aa:c9:80:a4:61:32:22:c9:92:6f:12:58:27:4c:
         d0:dd:b9:e3:12:08:77:59:9f:e1:23:6e:57:35:a5:29:ae:cc:
         42:1d:15:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 07:54:17 2026 by rpki-client