Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c2021cf1-cb0d-30c6-9001-9c124185b64f.roa
File:                     c2021cf1-cb0d-30c6-9001-9c124185b64f.roa (raw, json)
Hash identifier:          uDZRqKRcR0mifkFNk/oQIntwKc/m/5AX6AQYK/qn0ro=
Subject key identifier:   90:8D:8F:EF:F1:29:35:4A:CA:05:86:89:6E:3B:FD:61:17:5E:0B:29
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584EEEB74CAB558D041633D75A00
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c2021cf1-cb0d-30c6-9001-9c124185b64f.roa
Signing time:             Sun 23 Aug 2026 13:00:12 +0000
ROA not before:           Sun 23 Aug 2026 13:00:12 +0000
ROA not after:            Sat 21 Nov 2026 14:00:12 +0000
asID:                     19905
IP address blocks:        2604:2e8f:6000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ee:b7:4c:ab:55:8d:04:16:33:d7:5a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Aug 23 13:00:12 2026 GMT
            Not After : Nov 21 14:00:12 2026 GMT
        Subject: CN=c0152e65-d77a-4149-82e7-507e03e92895
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:bf:b2:92:b8:e2:86:15:42:11:05:66:dd:5a:
                    67:30:54:12:be:0d:78:d3:36:a4:c3:4c:86:c7:b4:
                    83:5d:15:55:5b:3c:78:77:2c:46:12:92:20:cd:9d:
                    eb:4e:26:76:08:e5:e7:be:62:2b:17:b6:a7:9c:9a:
                    16:f6:fa:df:4e:1e:29:9e:18:06:09:a1:53:1b:15:
                    5b:84:fa:c5:4f:3a:df:9e:e5:0c:e5:ce:d6:d9:94:
                    0b:01:a7:2c:20:42:1d:16:64:ab:93:2f:30:c1:f6:
                    0d:44:15:f8:2d:ea:08:66:3e:22:ea:49:45:92:e6:
                    9d:61:ba:ba:f4:a7:7e:43:7a:21:ad:d3:93:27:a1:
                    90:ce:aa:09:f5:13:4a:97:3e:06:2f:dd:21:74:90:
                    18:80:5a:ef:22:81:91:bf:92:1a:dc:fd:e2:32:3e:
                    ff:94:30:09:61:94:1e:ff:d6:c2:e9:a2:24:d4:9d:
                    7d:dd:8b:92:80:c3:2c:44:6f:e7:ce:ee:1b:15:12:
                    58:7f:f3:9a:b0:8b:6b:a4:05:26:e2:d5:b8:7e:2e:
                    e6:31:c7:a1:4a:f6:30:ef:a3:b5:9b:f0:0e:dd:9c:
                    6b:2c:fd:14:31:fb:09:6c:93:82:82:ed:00:85:18:
                    20:e9:19:5e:c4:38:de:f3:27:5d:6a:f3:be:0c:91:
                    31:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:8D:8F:EF:F1:29:35:4A:CA:05:86:89:6E:3B:FD:61:17:5E:0B:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c2021cf1-cb0d-30c6-9001-9c124185b64f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8f:6000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:81:37:b4:5b:44:b8:05:69:37:32:4c:c7:f9:24:ff:98:cb:
         75:2a:25:16:42:26:1e:66:cc:3c:9d:bb:44:3f:0e:9f:88:4a:
         05:7c:ca:e2:81:1c:3c:c7:df:14:c6:8a:6b:5a:dd:59:75:fe:
         36:c2:96:fd:84:d1:15:2e:73:cf:b8:79:bd:d7:78:27:6c:fa:
         27:0c:92:82:ce:f1:22:b5:f6:68:3e:d6:19:08:b3:28:d9:3b:
         9c:f2:de:19:da:ed:60:2d:f8:d9:1e:eb:5b:e5:81:31:23:6f:
         b0:18:f3:f8:08:90:84:92:fd:01:0e:4c:b3:9c:03:0a:3d:52:
         19:42:33:7a:c6:76:a6:9e:26:7d:74:59:ba:71:82:96:b1:1b:
         fa:3c:63:bd:a7:6a:76:6a:96:43:0b:ca:80:2b:5a:53:89:08:
         89:cc:76:a2:c2:c3:c5:5e:e6:0b:b5:c0:35:e4:4a:3b:d6:6c:
         ed:75:12:9c:a4:33:b4:08:2a:76:c3:56:bf:72:17:b6:ca:7c:
         b1:de:ab:9e:db:00:00:23:cc:37:e4:63:6a:c8:be:39:ac:3b:
         8b:f3:92:82:6e:82:78:cd:f3:9b:5f:9e:a7:b3:a6:e2:dc:5f:
         27:ed:2f:d3:b4:e6:cf:20:f6:0d:ac:4a:19:eb:0d:d0:d1:04:
         55:16:77:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 07:00:48 2026 by rpki-client