Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/7a4df6c4-8621-3318-ac65-457055010e28.roa
File:                     7a4df6c4-8621-3318-ac65-457055010e28.roa (raw, json)
Hash identifier:          Wunk1iw2EIESCmNHywRQjuT+/IWIdUIUno18kcAmibM=
Subject key identifier:   C1:13:EC:5F:22:31:72:9C:D1:3E:04:13:6A:16:D5:02:45:87:EE:75
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584F331D2F2A20F3D4F0E80C3D40
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/7a4df6c4-8621-3318-ac65-457055010e28.roa
Signing time:             Thu 17 Sep 2026 01:00:11 +0000
ROA not before:           Thu 17 Sep 2026 01:00:11 +0000
ROA not after:            Wed 16 Dec 2026 02:00:11 +0000
asID:                     19905
IP address blocks:        2604:2e88:a000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:33:1d:2f:2a:20:f3:d4:f0:e8:0c:3d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Sep 17 01:00:11 2026 GMT
            Not After : Dec 16 02:00:11 2026 GMT
        Subject: CN=571c6876-297c-4807-8fb3-29c87db3e5b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:6c:47:32:4a:c5:ad:26:5d:ab:d1:65:39:ff:
                    e5:76:d3:8c:d6:8d:4c:76:52:d5:34:94:3c:5b:b9:
                    f9:12:dd:e9:6e:27:3f:d3:c7:0a:5a:58:5a:f8:ad:
                    8e:fa:c4:62:54:d7:76:e5:b9:3d:2e:5f:3a:1e:ee:
                    7c:25:76:a5:47:67:51:96:48:e4:2e:3a:50:53:64:
                    cc:49:b4:da:7c:83:c1:4d:a5:e1:54:ae:24:ab:ac:
                    55:cd:dc:1f:a5:07:7b:36:85:87:10:17:64:a2:db:
                    91:54:e1:4f:0b:d7:97:58:24:58:56:dc:16:1f:f1:
                    53:90:66:cd:be:62:c7:12:3a:01:c0:9f:c6:41:12:
                    67:df:79:68:1a:5f:f0:9a:96:87:d3:2c:83:aa:aa:
                    bd:00:5a:5e:de:00:14:ee:fa:c3:da:eb:82:dc:73:
                    01:66:30:dc:17:bf:dd:cb:af:49:19:fb:6b:0d:30:
                    7d:f4:81:8f:c6:15:29:9c:db:3b:17:07:4f:c5:93:
                    66:01:d2:f9:7a:de:ed:4d:de:65:23:a6:af:84:25:
                    7a:58:2d:c5:ec:3d:58:44:01:f8:6c:d6:2d:06:fb:
                    13:9c:68:ab:f9:e2:14:f0:aa:35:72:2a:68:33:c2:
                    89:af:cf:a8:6f:2c:a2:bc:e8:c5:6b:3b:0d:4f:fa:
                    e8:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:13:EC:5F:22:31:72:9C:D1:3E:04:13:6A:16:D5:02:45:87:EE:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/7a4df6c4-8621-3318-ac65-457055010e28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e88:a000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:63:52:73:44:89:61:a3:02:72:2e:2d:03:cf:43:4a:f6:a6:
         e4:06:8b:6b:40:81:73:76:ca:d4:b2:7e:f5:ab:10:ea:92:e9:
         b6:f9:8d:74:65:cc:54:45:79:26:87:11:a4:45:a8:e0:f9:4e:
         70:c3:c6:24:e6:44:ab:a7:3d:1d:ca:02:fc:79:98:22:d1:28:
         bc:dd:ae:a3:34:69:3b:5e:c1:af:90:90:e1:fb:e3:10:ee:36:
         d7:20:b1:e9:54:ef:3e:79:55:fa:d4:8c:f7:1f:19:63:f7:4e:
         b3:ab:8c:40:c2:a7:82:74:bf:85:a9:81:e6:cc:11:4a:3a:f2:
         81:a0:55:9a:7e:50:28:88:8b:28:8e:c7:98:49:ff:dc:4b:5e:
         c6:e7:c5:0d:b7:e3:3f:0e:85:aa:0e:81:36:96:3d:0f:f6:5b:
         e9:c3:20:d8:25:ce:02:20:9e:63:21:7a:b5:54:c4:12:11:1c:
         87:18:2c:77:e0:fd:36:1f:f7:84:fe:12:b0:ed:c1:63:8b:6f:
         f3:c6:be:14:1b:19:01:85:e5:26:da:3b:80:21:da:f8:88:1a:
         00:33:75:9e:c1:26:34:f1:57:2c:2e:c4:dc:48:46:4f:30:d5:
         8a:0c:d5:1f:8b:ce:f3:e2:43:58:40:d8:b9:44:18:06:ac:e5:
         e8:cd:a1:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 23:25:55 2026 by rpki-client