Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f9e52ff9-c208-3770-a6cb-5ffcd65999f1.roa
File:                     f9e52ff9-c208-3770-a6cb-5ffcd65999f1.roa (raw, json)
Hash identifier:          0zNY+Q6Fj07v/zxVqDQJXgzq7qc3xeZirtSbsjZmh1k=
Subject key identifier:   08:70:C9:10:0B:60:F8:FA:D5:AD:88:AE:90:C2:8D:1E:D0:1E:D5:79
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584F498B53427AB4DDFA1900BE00
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f9e52ff9-c208-3770-a6cb-5ffcd65999f1.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     19905
IP address blocks:        2604:2e8e:f000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8b:53:42:7a:b4:dd:fa:19:00:be:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=857df7f2-b216-42b8-8fbf-da11aee1c15f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:5f:c1:82:e6:84:5b:ac:1c:6c:cf:7f:b3:92:
                    4a:35:36:ef:2d:dd:b1:fe:6b:4a:e9:35:79:41:c1:
                    96:ff:4d:a1:73:23:5a:f8:2b:7e:ab:d1:36:1e:2b:
                    f7:9f:8b:c0:9a:19:17:70:c1:9c:52:2b:7e:ca:98:
                    67:00:0c:a6:0e:2d:ee:74:90:77:0e:45:61:ad:6f:
                    ed:eb:38:65:ad:35:31:5b:58:ef:9d:c1:7d:31:eb:
                    eb:4d:08:5a:10:2b:04:e3:08:e2:41:c3:e6:cf:68:
                    07:d8:fe:1c:dc:00:ea:63:3b:7f:d7:e9:37:35:d7:
                    75:dc:1d:4c:0d:c7:62:dc:7e:bb:0b:15:86:a0:f4:
                    f1:b3:eb:86:21:95:5f:8b:37:d4:58:c5:98:06:76:
                    4f:aa:8e:cc:65:f3:dc:73:2e:b5:7f:73:ef:2b:f1:
                    ea:75:e0:0c:02:f9:35:bd:b1:70:fc:f8:45:78:d2:
                    8f:a4:76:5c:83:68:01:fe:60:5d:89:7a:22:1e:b9:
                    9c:82:6f:1b:d8:cc:81:9a:ad:96:03:84:a6:35:80:
                    ed:50:e9:19:5c:fd:ee:fa:bc:1b:5b:72:55:b3:49:
                    e5:82:0b:4a:ef:08:ca:7a:aa:23:26:de:b8:aa:53:
                    69:4d:70:67:7e:51:1c:14:43:31:a3:20:99:ae:ec:
                    e5:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:70:C9:10:0B:60:F8:FA:D5:AD:88:AE:90:C2:8D:1E:D0:1E:D5:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f9e52ff9-c208-3770-a6cb-5ffcd65999f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8e:f000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:46:45:bc:77:42:54:e9:50:86:87:2d:83:86:13:89:0c:97:
         04:08:fb:66:27:84:a4:76:83:ab:e2:ff:67:5e:43:2d:13:ff:
         12:38:c4:93:34:99:b5:22:63:d3:5e:96:f5:55:3c:fd:cf:1d:
         8d:11:9a:96:60:51:f1:98:d3:a2:18:4c:33:d1:3e:89:3f:23:
         db:7d:3a:ce:10:f4:22:5d:ea:96:fd:4e:08:c6:24:a2:f4:9e:
         2d:2b:42:c8:03:91:53:6e:16:4d:60:51:14:83:2e:34:81:f1:
         64:dd:e6:79:22:3a:54:42:71:73:27:b2:ac:e9:34:e0:3e:79:
         ee:a2:42:38:8b:48:13:c2:8a:21:97:62:69:e1:98:ec:5d:1a:
         67:97:64:d5:f9:da:a6:44:63:20:dd:f6:78:57:7a:79:51:06:
         dd:2c:e0:53:94:01:ea:5a:d9:17:f2:cf:0d:90:9b:74:9b:6f:
         cc:6d:14:4f:a0:44:09:16:7f:9e:b2:ce:bb:28:91:80:9d:9d:
         a1:81:a3:b6:af:c8:8e:9f:4b:9f:e0:14:ca:84:81:b2:33:b7:
         39:91:3b:01:28:77:ae:c9:22:5a:11:e6:af:0b:06:d0:16:9e:
         98:c0:53:1b:1c:ca:29:a1:c4:55:9a:90:07:e1:bb:ba:d4:15:
         91:a4:07:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 10:59:38 2026 by rpki-client