Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c596d349-eeb9-33bb-aa88-6e1d984c28fe.roa
File:                     c596d349-eeb9-33bb-aa88-6e1d984c28fe.roa (raw, json)
Hash identifier:          tzYk7TcDwGUuxcufjzOYGs87wz8BnSvdHT3Aqy1Ep48=
Subject key identifier:   FD:21:0A:94:B2:33:2B:F9:FE:C8:D6:ED:B2:71:87:DE:AD:BF:22:99
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584F480D3FE7D83CED9D144CD200
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c596d349-eeb9-33bb-aa88-6e1d984c28fe.roa
Signing time:             Thu 24 Sep 2026 13:00:12 +0000
ROA not before:           Thu 24 Sep 2026 13:00:12 +0000
ROA not after:            Wed 23 Dec 2026 14:00:12 +0000
asID:                     19905
IP address blocks:        2604:2e8a:3000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:48:0d:3f:e7:d8:3c:ed:9d:14:4c:d2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Sep 24 13:00:12 2026 GMT
            Not After : Dec 23 14:00:12 2026 GMT
        Subject: CN=aa570a7f-67e8-40f9-b122-c2dc6053d626
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:0f:83:2e:81:4a:38:a3:e6:12:99:ce:f0:e4:
                    b0:54:4b:d0:9d:30:54:ce:61:7a:85:78:8e:0f:9f:
                    c4:59:c3:ed:d8:4c:5f:a1:d6:c3:9d:c9:95:07:2d:
                    db:84:17:6e:a6:b3:83:c8:e4:37:2f:c1:7d:39:20:
                    e1:b5:03:b5:22:5b:42:5f:9c:52:b6:34:aa:9c:55:
                    0e:d7:fa:0e:db:8b:ff:00:de:f4:b7:7e:9e:1a:ab:
                    0d:9d:2f:bc:34:a9:68:e1:52:c9:54:7d:82:97:58:
                    f8:75:67:70:c7:1e:c5:95:0a:51:d1:29:a7:bf:99:
                    8e:9e:f8:c9:73:f4:2b:ee:12:51:f0:8d:07:8e:d2:
                    2d:37:86:c4:d2:66:49:39:77:6b:96:41:0f:aa:c2:
                    19:da:a3:77:bc:93:1f:cd:a6:ac:ef:e2:e0:55:48:
                    ea:d6:24:1e:d3:31:33:cb:8a:c7:f2:6d:d3:0c:04:
                    d8:4f:fa:1c:8f:07:5c:64:65:b4:c3:fc:fb:1c:ec:
                    c6:8b:00:e4:cb:d5:5c:9d:c4:ac:0f:b1:16:24:62:
                    b7:bf:d2:cf:61:4a:21:05:a0:fc:a7:42:a2:29:cb:
                    ec:7a:cd:43:c4:4c:9e:bc:20:23:02:44:a2:67:7a:
                    1e:94:b7:dc:2d:7b:62:65:bf:dd:9f:4c:2b:c4:23:
                    cc:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:21:0A:94:B2:33:2B:F9:FE:C8:D6:ED:B2:71:87:DE:AD:BF:22:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c596d349-eeb9-33bb-aa88-6e1d984c28fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8a:3000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:87:76:80:b3:1d:af:a2:21:e5:c9:8d:fc:ad:58:ac:9c:43:
         c7:1d:9e:d5:5a:89:9c:11:2e:47:e4:1c:3d:8f:91:56:8d:9d:
         84:7a:a6:38:21:70:1d:64:1b:f3:17:ad:61:d6:c8:15:a1:48:
         1b:c3:03:d3:10:f8:30:08:34:6d:6a:66:85:75:2c:6d:e8:26:
         30:84:19:10:30:4f:2a:fc:34:45:52:dc:44:67:56:e7:00:61:
         b4:46:31:b9:c0:ff:6f:23:6b:01:52:54:02:4b:00:23:7d:58:
         a4:42:be:a1:05:f4:92:5b:b3:3f:2b:e4:29:6f:43:42:fa:8c:
         45:d0:ac:78:d4:c5:05:af:dd:8f:47:7f:9a:40:6c:03:ca:7a:
         74:ed:2a:ec:81:b8:a1:11:45:2d:8d:3e:5d:95:7b:5c:54:d1:
         ef:d5:d1:ad:b7:43:44:28:0b:ba:4d:4d:89:75:25:0e:31:05:
         43:37:e7:47:1b:a0:67:17:75:c5:e2:30:59:9e:1d:1b:4b:ee:
         71:60:69:fa:16:cc:22:7a:e1:a2:31:ca:21:e0:5c:c6:23:15:
         ce:6d:eb:9d:92:57:3e:48:72:5c:1f:4d:2b:6a:8a:d0:60:38:
         94:7a:7d:dc:44:74:be:d4:7a:e8:bc:c3:80:e6:2d:0b:a0:45:
         58:67:71:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 18:40:34 2026 by rpki-client