Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bbe72348-659c-3eb0-97c4-9cdd57d17889.roa
File:                     bbe72348-659c-3eb0-97c4-9cdd57d17889.roa (raw, json)
Hash identifier:          1tBeACvqGhwi9+Z3OI6hYiBbAjCNn3jp1ofJaSVKEmA=
Subject key identifier:   94:2C:D9:6D:57:3F:C1:AC:7F:F9:65:8C:32:54:1E:CD:10:1B:A8:1E
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584F4974154A9907350BB88A3160
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bbe72348-659c-3eb0-97c4-9cdd57d17889.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     19905
IP address blocks:        2604:2e8d:1c00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:15:4a:99:07:35:0b:b8:8a:31:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=a9f9132a-a7f0-46a4-a79c-1104c41020fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:69:70:e5:6d:40:24:38:83:b5:20:eb:59:b5:
                    11:13:64:36:7e:9e:eb:f0:f1:c9:fd:9e:45:a4:64:
                    d8:04:56:6d:74:87:85:4f:e1:c0:43:0f:b1:19:f1:
                    dc:31:2f:ea:6d:88:39:c3:d5:73:dc:03:ee:6c:28:
                    91:66:c9:94:11:77:26:14:19:6f:42:4c:54:92:ca:
                    74:63:0c:8f:45:ca:ad:50:0e:41:de:d1:d2:52:4b:
                    ff:af:29:ec:b8:36:4b:df:95:d5:d3:2f:71:7f:b2:
                    97:2b:a7:3d:64:78:c7:dd:52:25:5b:40:fd:22:47:
                    a4:9a:50:d3:f0:16:d6:7d:42:35:b3:8b:de:0f:53:
                    7e:3e:29:dd:e7:9d:a6:e1:67:48:45:53:a0:9c:67:
                    89:ee:10:22:bc:38:ac:fd:e5:e1:d6:40:cf:4d:00:
                    91:a4:ef:fb:72:ab:9d:0f:ef:72:ea:84:09:b6:82:
                    79:fe:7b:3f:1b:ec:b7:ae:66:bd:26:b3:12:c4:eb:
                    d1:41:6e:8c:78:7a:19:33:66:3e:1c:82:ce:49:82:
                    91:b9:b4:07:47:b4:4e:54:0e:14:02:87:1b:df:46:
                    10:be:de:db:8c:e4:f8:e9:24:7a:60:23:15:1f:28:
                    2a:4c:1b:b9:e4:2e:8b:5e:f7:eb:36:a2:5e:07:23:
                    20:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:2C:D9:6D:57:3F:C1:AC:7F:F9:65:8C:32:54:1E:CD:10:1B:A8:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bbe72348-659c-3eb0-97c4-9cdd57d17889.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8d:1c00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:27:8a:53:a7:23:c3:95:57:2e:7a:36:a7:c2:c4:40:cb:a1:
         48:f2:20:97:2f:74:d7:60:7d:5f:e6:4f:9b:63:c7:06:11:d9:
         0d:70:0e:ad:c7:91:f5:cb:df:7f:2a:8e:a2:6e:bd:09:f8:c3:
         5c:bd:3e:a2:d8:be:24:10:ed:26:07:93:92:71:0d:f6:70:00:
         54:cc:eb:5d:f6:21:13:28:23:ea:d3:1f:85:81:1e:98:b9:3c:
         34:10:2f:8b:73:ab:82:6d:70:1d:0d:ae:04:e6:81:52:49:d2:
         5a:db:be:ea:f3:7f:6f:b4:14:46:10:8e:d4:26:77:dc:fb:55:
         5e:6f:d7:5a:12:da:e8:26:65:4b:37:76:fa:ba:ac:04:31:c2:
         a6:28:5c:d5:9e:04:5e:6f:d1:6f:91:8e:81:ee:99:62:42:bf:
         bf:60:f5:89:60:6f:34:39:aa:df:7a:24:20:bd:e6:68:eb:b8:
         86:ea:a7:13:c7:e0:5a:18:2c:a2:63:fd:f0:c2:67:f9:d7:53:
         d3:0c:04:49:8b:7d:6c:ec:44:5f:20:33:c7:1c:06:a0:e0:53:
         9e:21:5f:fe:be:2d:8c:db:11:92:a6:a2:e2:3d:60:11:da:d0:
         d6:55:c7:e1:d8:19:c7:e0:dc:6a:25:67:0f:50:e6:79:95:0c:
         82:55:de:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:53:51 2026 by rpki-client