Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/7ceed3f1-5911-3136-91b4-cab6a0ec5b3f.roa
File:                     7ceed3f1-5911-3136-91b4-cab6a0ec5b3f.roa (raw, json)
Hash identifier:          7tvgl4u2pouyc2i70Bo9+ISQT/Rm+jNiXuWmY6x4K+E=
Subject key identifier:   9B:8F:D9:82:97:28:26:2A:CE:74:19:33:25:2D:4A:FE:12:77:CF:00
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584F49744401EC2F099A62F80700
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/7ceed3f1-5911-3136-91b4-cab6a0ec5b3f.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     19905
IP address blocks:        2604:2e8e:bc00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:44:01:ec:2f:09:9a:62:f8:07:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=695f3a3e-55d5-4847-98d9-e7fd1ff49e63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:63:84:a3:77:cb:9c:72:12:97:44:56:d9:3f:
                    0f:f1:a4:88:9f:dc:cd:e6:62:bc:86:ff:e5:de:83:
                    3d:e1:c1:66:02:ce:a0:90:f0:50:84:b1:76:3c:23:
                    5c:ac:35:12:e4:ea:d9:6d:d8:ea:af:e1:ef:0f:6a:
                    7a:c4:07:7a:71:48:84:4d:40:34:3d:57:03:a3:34:
                    a7:b9:8d:ba:a1:74:a3:0e:9d:74:9a:b9:86:d5:a7:
                    01:4d:01:62:4b:18:67:3f:e3:30:cd:54:0b:42:74:
                    c1:eb:0c:5a:9f:c0:58:31:ed:d8:29:d7:95:2b:aa:
                    d2:ff:4d:2e:f4:cc:45:1f:41:ed:69:90:b3:5c:4a:
                    f5:86:37:19:31:60:67:fe:0d:80:0a:93:6a:4b:f3:
                    9a:aa:82:64:44:b4:23:5c:ae:8a:6a:90:7f:85:73:
                    d9:94:98:0a:10:ec:f8:03:ff:29:27:47:b0:29:2c:
                    d8:29:b6:82:62:8d:38:e0:6e:d8:9d:06:bb:2f:d5:
                    3d:ff:d9:a6:63:b0:dc:1f:8c:5e:f6:7c:cf:88:50:
                    03:dc:8b:64:50:7c:da:d7:bd:d6:31:cb:52:0f:24:
                    e1:f8:1f:54:94:63:a8:03:ef:bd:83:4c:54:c4:d7:
                    99:5e:c9:63:9b:99:5b:61:84:ac:61:cf:03:38:53:
                    d0:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:8F:D9:82:97:28:26:2A:CE:74:19:33:25:2D:4A:FE:12:77:CF:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/7ceed3f1-5911-3136-91b4-cab6a0ec5b3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8e:bc00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:11:3e:23:a7:c2:15:be:5d:39:8d:9b:ef:bc:27:68:7d:d1:
         35:91:a4:cb:a6:70:fa:2d:70:5a:49:b6:ac:ae:88:7b:a3:d4:
         49:34:13:16:cb:16:96:a5:32:62:66:ee:1c:77:fb:c6:9d:cc:
         ed:f2:07:0e:1b:9a:b9:b1:18:83:05:17:f7:10:a9:57:36:6d:
         c9:9e:24:ff:16:7c:b6:3c:3f:68:43:45:03:ac:ba:6f:80:6d:
         49:f1:77:ae:37:1e:de:fa:83:da:0f:6f:b5:2b:f9:37:17:98:
         f1:ec:ee:2f:9c:93:7c:8f:d0:ed:cf:f9:65:7d:64:4b:6c:34:
         83:c5:1c:83:2b:b2:1e:cc:ce:51:0f:bc:18:82:c6:ea:67:08:
         16:3b:0c:6d:40:60:92:dd:57:58:f8:51:9d:e5:b7:d5:1e:fa:
         13:62:fd:9d:fb:a3:7c:5a:29:cf:dd:bf:e2:07:4b:26:21:ea:
         03:3a:44:69:69:1a:47:8a:7a:26:5c:ab:b4:11:6c:b4:77:e8:
         b4:08:c1:24:01:5d:d8:6a:f2:59:37:41:8e:05:83:4d:78:9c:
         f5:21:36:ae:e1:59:9f:b7:2a:f4:0c:18:6f:3b:ab:8b:5a:5d:
         3f:63:9b:36:d6:47:ac:dd:48:51:3d:c7:50:fb:1a:c9:27:19:
         d4:0f:cc:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 14:15:01 2026 by rpki-client