Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/079aded1-cd37-39be-8db7-69c3b8e0aee6.roa
File:                     079aded1-cd37-39be-8db7-69c3b8e0aee6.roa (raw, json)
Hash identifier:          t8XuymBZSKtQ68d63XYqZmAnKpS2UskTn0XkquDtyFI=
Subject key identifier:   B3:5E:F2:4F:C3:12:D7:1A:89:4D:97:84:11:8F:24:F8:D3:38:05:C2
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584F5FC804198CE7F0D204B3B20A
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/079aded1-cd37-39be-8db7-69c3b8e0aee6.roa
Signing time:             Sat 03 Oct 2026 01:00:12 +0000
ROA not before:           Sat 03 Oct 2026 01:00:12 +0000
ROA not after:            Fri 01 Jan 2027 02:00:12 +0000
asID:                     19905
IP address blocks:        2604:2e88:8000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5f:c8:04:19:8c:e7:f0:d2:04:b3:b2:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Oct  3 01:00:12 2026 GMT
            Not After : Jan  1 02:00:12 2027 GMT
        Subject: CN=75c70008-6fcd-4924-b607-3d7909620058
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:36:93:e2:63:4b:41:21:73:9d:f8:33:49:e2:
                    d9:e6:84:2f:91:bc:0e:45:ed:dc:75:a5:9f:ff:8f:
                    67:53:3c:c1:2f:e0:5e:ce:62:01:b9:58:c6:a3:51:
                    35:09:3a:34:65:c9:4e:cb:6c:e1:97:e1:7e:bc:5a:
                    2d:37:74:05:6a:33:59:53:1d:84:3d:78:f5:e6:8e:
                    31:e6:36:c2:d1:32:db:9b:6d:68:7b:58:5e:10:1e:
                    38:cc:cf:57:98:47:a8:78:23:66:18:f0:0b:35:a9:
                    ee:0e:66:9e:c3:87:dc:e6:4e:6b:a6:9b:d0:93:9d:
                    d5:71:8f:19:d2:83:9b:db:65:e8:9c:0e:61:e9:42:
                    12:f7:0f:dc:ae:fe:91:29:8d:dc:4e:66:d2:90:40:
                    6a:55:69:bb:10:2d:d6:09:98:ad:22:89:7b:5b:f7:
                    ec:01:64:33:ea:3b:99:b7:7b:53:e5:24:7b:65:cd:
                    24:d8:41:d4:38:61:c6:55:07:82:6b:a9:a2:12:d3:
                    59:84:07:71:9d:05:3e:c7:f8:09:dc:54:4e:72:13:
                    79:6a:02:6a:b6:cb:b6:87:bd:21:a7:d2:4d:57:f0:
                    aa:fa:59:d8:af:ce:5a:49:23:51:35:42:bf:d5:18:
                    78:f0:01:e3:da:a2:6a:02:56:70:6c:cf:47:df:8f:
                    e3:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:5E:F2:4F:C3:12:D7:1A:89:4D:97:84:11:8F:24:F8:D3:38:05:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/079aded1-cd37-39be-8db7-69c3b8e0aee6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e88:8000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:a0:9f:a2:ab:b0:92:e0:f6:77:89:e4:3b:24:c1:87:f3:a5:
         25:51:ca:52:d5:c8:4b:d7:a8:9e:61:91:8c:f0:00:08:fc:b1:
         64:df:30:82:2c:a7:21:99:93:7c:9c:28:1b:33:58:4d:9b:e8:
         f5:d2:7e:0a:fd:67:e2:11:1d:2c:d9:d6:38:4a:10:c5:c9:7c:
         9c:7e:ab:9a:7b:90:b3:65:27:a2:4a:49:cb:89:74:06:a3:47:
         56:da:40:21:fa:f0:b1:54:9a:17:0f:08:a1:f8:b5:59:ee:8a:
         86:c8:87:ef:c4:88:d8:d6:67:ff:f4:be:11:29:bd:18:63:eb:
         e9:93:d2:56:e6:f4:e9:3f:4e:49:11:c9:2b:a5:75:23:6a:0d:
         fd:b6:a3:67:eb:f8:26:dd:1f:19:c6:38:b7:ca:c4:3d:0d:85:
         3b:11:a9:04:cb:bc:61:78:f7:3f:35:8d:de:73:1d:9f:d9:d3:
         97:52:f4:ad:e8:dc:51:93:07:18:52:11:d9:5b:fe:59:1d:d7:
         ce:79:08:94:d1:84:7a:5e:e5:4f:68:0b:96:fa:dd:aa:6b:79:
         c3:cf:4b:23:7c:4b:3f:e1:79:1e:39:58:49:8b:10:db:88:ba:
         8f:09:9a:4b:49:3d:0c:93:08:23:39:2a:2e:de:76:bc:e7:26:
         0c:a8:54:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 07:40:47 2026 by rpki-client