Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/837bcb82-113d-3db9-8669-9532fb2f8254.roa
File:                     837bcb82-113d-3db9-8669-9532fb2f8254.roa (raw, json)
Hash identifier:          ZVzk9bjZScBrewMLJcK0Z9cK9hKE4e4EUQ8voPl4BkQ=
Subject key identifier:   07:7C:24:0C:B8:16:5F:1A:4C:C2:69:44:AA:2A:80:92:E7:D2:50:E8
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584F480D65E62CFDEF641757F8E0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/837bcb82-113d-3db9-8669-9532fb2f8254.roa
Signing time:             Thu 24 Sep 2026 13:00:12 +0000
ROA not before:           Thu 24 Sep 2026 13:00:12 +0000
ROA not after:            Wed 23 Dec 2026 14:00:12 +0000
asID:                     19905
IP address blocks:        2604:2e8d:c800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:48:0d:65:e6:2c:fd:ef:64:17:57:f8:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Sep 24 13:00:12 2026 GMT
            Not After : Dec 23 14:00:12 2026 GMT
        Subject: CN=dfa36635-d5b7-4339-a686-04a1748f0cb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:7c:46:ef:73:e1:f4:2a:f1:06:70:b6:d2:11:
                    a2:97:ea:f4:75:ae:a6:e8:85:04:71:d1:b6:00:cc:
                    5e:66:7c:f5:a1:ce:fe:62:17:2e:89:ca:9d:d6:e2:
                    3a:15:46:93:db:73:28:7a:3a:ae:44:38:34:58:ad:
                    06:5b:07:cc:97:84:48:6d:ce:15:76:d4:3b:da:96:
                    0b:7e:a4:e3:07:85:0a:b1:2a:a8:8c:93:70:de:02:
                    1c:d4:b5:e0:91:86:1a:db:d4:ce:2a:91:c1:90:a7:
                    91:f0:25:af:6b:07:92:2b:ac:18:25:bf:3e:38:3d:
                    25:40:71:b2:62:1c:d3:40:43:44:3f:32:05:48:ce:
                    a1:75:af:39:9c:8f:58:5c:d3:83:3d:b2:88:17:ee:
                    b2:30:e3:f5:08:ab:88:bb:cf:84:86:e1:a5:53:ea:
                    cd:f1:5e:d6:50:44:08:70:c0:bd:04:45:2b:09:41:
                    4c:64:4d:b7:34:01:19:d2:39:80:92:f2:9b:45:60:
                    1e:e1:65:1c:16:2c:a2:75:eb:34:ea:19:23:cb:76:
                    3e:aa:ff:90:de:ec:a5:3f:ff:11:67:e0:40:1b:70:
                    3e:9f:26:ac:63:39:99:7d:09:9b:e4:98:fa:0b:af:
                    49:15:00:b2:b8:8f:26:69:60:8a:cd:f1:12:17:5a:
                    71:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:7C:24:0C:B8:16:5F:1A:4C:C2:69:44:AA:2A:80:92:E7:D2:50:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/837bcb82-113d-3db9-8669-9532fb2f8254.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8d:c800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:de:5d:2e:40:2f:5c:91:86:4e:a3:b8:f2:f6:9d:b8:82:00:
         d5:ed:82:3f:6a:90:9f:b7:d7:1f:ee:e9:bf:22:aa:df:a9:79:
         3f:96:cf:f3:f6:78:b7:3f:d5:e1:f3:c7:03:bf:7d:1b:ed:91:
         83:34:b9:b2:26:e6:5d:81:86:73:78:a0:a2:25:94:1c:4d:c2:
         04:d9:1e:db:ec:52:c4:30:9b:b5:cd:30:1f:ee:1a:0e:42:3c:
         3c:19:fe:ec:fc:96:fc:84:2d:3c:09:8b:39:65:1f:f9:ca:7e:
         5a:9b:2f:d1:86:f6:d6:e6:2b:0d:5d:e4:2b:8e:e6:31:69:3d:
         cb:0a:0e:63:7d:49:5b:48:d9:6e:93:5b:9c:2c:f2:db:db:cd:
         43:62:cc:a4:80:96:86:02:01:73:d7:a3:60:4d:52:6d:57:ee:
         92:9f:e2:9c:c2:f2:51:66:c5:6e:05:70:ed:19:ab:e3:5c:f3:
         58:15:ef:8a:16:6d:a9:42:e3:76:b1:ba:84:a2:87:59:39:15:
         7f:0e:d9:c9:e7:7e:83:15:2e:61:de:a2:d0:8d:b5:c0:a5:1e:
         10:20:94:47:cf:c2:8b:bf:7a:f8:d6:35:83:7a:83:da:ce:5b:
         d4:bf:44:07:79:52:1b:25:23:57:51:62:f1:ae:25:38:03:bb:
         ab:51:5e:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 23:51:50 2026 by rpki-client