Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b82554e9-413a-3c68-b798-487f9419feee.roa
File:                     b82554e9-413a-3c68-b798-487f9419feee.roa (raw, json)
Hash identifier:          gXoW4CEPRF0TDt1JjggIns0cpMVDgnvKB+RWotPJBWM=
Subject key identifier:   C4:A4:1E:F4:0C:DC:EA:D9:A5:6D:7F:23:8E:48:93:AF:E5:05:D1:4F
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584F4972D1FC3DB635CBDBC0C400
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b82554e9-413a-3c68-b798-487f9419feee.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     19905
IP address blocks:        2604:2e8d:fc00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:72:d1:fc:3d:b6:35:cb:db:c0:c4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=eb2de7dc-5f4d-4824-aec8-d25365ec60e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:c7:9c:c3:97:14:74:46:55:35:ff:68:76:fc:
                    cc:37:a2:fc:77:2e:a9:f9:cc:cc:8b:39:bf:9e:56:
                    63:ff:01:28:8d:bf:a1:a0:68:23:e4:d7:5a:fa:1b:
                    18:62:c5:5d:ff:6a:e1:a5:61:08:e6:a9:4a:b0:24:
                    c4:bb:61:a3:b1:23:11:55:fb:3d:0a:ce:fe:e4:92:
                    0d:3e:e3:d3:33:24:d1:18:7c:7b:47:a2:05:86:33:
                    49:2e:08:6e:6f:82:ec:64:6d:7e:59:c2:2e:8e:1c:
                    0f:d1:e3:3c:e0:f0:ea:03:7e:0b:29:2f:e1:22:57:
                    2e:71:21:10:5a:e6:14:35:71:c4:21:53:66:4c:b5:
                    b0:ee:82:33:9c:6a:b3:78:1d:77:67:49:32:2c:8e:
                    56:9e:a1:a8:02:09:ba:16:1f:2b:aa:58:fe:46:78:
                    94:0f:7e:6b:50:bc:87:92:cd:d1:37:2e:27:35:a8:
                    ee:d6:12:bb:ab:15:e3:76:1f:d7:48:27:7d:ba:25:
                    31:4d:30:6d:af:55:5f:a1:e3:49:6f:7a:0b:a6:c6:
                    86:88:82:b2:3f:50:ca:cb:57:ec:c2:07:3f:9c:95:
                    ec:80:63:44:0a:4d:36:9f:4d:93:8e:75:37:1f:94:
                    43:6b:71:90:7a:ad:65:d3:37:8d:7b:a3:73:e7:38:
                    5c:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:A4:1E:F4:0C:DC:EA:D9:A5:6D:7F:23:8E:48:93:AF:E5:05:D1:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b82554e9-413a-3c68-b798-487f9419feee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8d:fc00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:fe:00:55:4a:c2:78:1d:67:85:40:1d:ea:5f:4d:35:94:8d:
         93:98:31:fe:c3:c8:41:6c:2e:8a:17:2f:54:f4:74:d5:8e:63:
         f0:ca:ea:f2:f9:6a:5e:85:96:d2:a7:a8:42:62:19:b0:f9:db:
         2e:a2:43:07:ac:b4:29:62:39:a6:c1:b2:25:33:b0:33:e0:ac:
         4d:38:e6:5d:ef:29:65:a4:79:06:ee:cf:5e:28:a4:09:51:17:
         d7:89:59:d9:7c:43:3c:cf:0b:75:bb:a1:b1:00:7b:ef:e1:94:
         b7:49:3c:02:ae:ad:76:fb:24:fa:5b:d9:61:ee:3d:0b:26:85:
         7f:87:58:7c:f9:e0:10:62:a2:c0:e5:c2:f3:22:03:d9:eb:f9:
         00:53:87:56:cd:10:d1:97:10:3e:16:0d:47:e9:72:ed:7a:a4:
         55:91:50:0a:a2:9a:32:72:74:4a:60:e2:34:ea:39:c5:35:12:
         5a:b2:57:e4:08:fa:62:47:03:42:99:3d:61:fa:42:c2:d8:c4:
         a2:e0:a7:7e:f4:18:8a:6a:4c:43:5e:15:04:55:ac:d5:e7:5b:
         0b:3f:50:80:d8:32:20:6d:04:89:5f:f9:5f:aa:b4:95:a3:95:
         b6:8a:67:32:77:1a:92:aa:ef:96:b2:8a:c4:46:78:2f:fc:a9:
         ed:d2:34:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 03:23:38 2026 by rpki-client