Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2658079f-2359-3943-897e-e95be9093009.roa
File:                     2658079f-2359-3943-897e-e95be9093009.roa (raw, json)
Hash identifier:          WvntlOs1aJDcHd01zIeSAJ/1m2ESM86TqujJgwh0fOA=
Subject key identifier:   3B:D9:C4:DE:50:D4:74:5E:3A:C2:06:DC:DB:39:5F:69:52:7A:DC:01
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584F6C58531405668FA313485080
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2658079f-2359-3943-897e-e95be9093009.roa
Signing time:             Wed 07 Oct 2026 13:00:13 +0000
ROA not before:           Wed 07 Oct 2026 13:00:13 +0000
ROA not after:            Tue 05 Jan 2027 14:00:13 +0000
asID:                     19905
IP address blocks:        2604:2e87:1c00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6c:58:53:14:05:66:8f:a3:13:48:50:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Oct  7 13:00:13 2026 GMT
            Not After : Jan  5 14:00:13 2027 GMT
        Subject: CN=1022363b-5f2b-4623-813b-082ed2b604aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:2e:45:56:d5:a4:a1:25:31:48:b5:86:52:a8:
                    09:42:5a:50:1f:78:33:70:b2:c6:1d:57:02:ef:1b:
                    57:d6:91:1e:0a:72:92:ba:e9:8b:8d:0f:92:ec:2d:
                    3b:ef:49:c0:31:5f:c3:d4:ff:4c:9b:bb:29:42:e5:
                    ab:af:90:4b:26:ce:34:2c:5f:de:d3:04:80:05:27:
                    ac:62:99:2a:db:e1:41:e4:07:ab:7b:d5:f5:1c:46:
                    38:7d:82:4e:bb:d0:4f:7c:f1:50:24:9c:eb:17:d6:
                    26:61:17:68:de:7f:0d:cd:26:4d:53:f4:49:a0:e5:
                    03:d5:65:0b:47:7c:e6:15:3c:77:dd:40:67:65:64:
                    9a:7f:b1:ab:f3:fd:98:e2:6c:16:6f:41:9d:4a:fe:
                    55:1b:69:41:c5:0a:5c:4c:67:b9:b0:ff:b6:e8:4c:
                    e5:69:fb:ac:9a:e8:a5:33:18:19:38:87:ce:bd:e3:
                    90:36:69:31:47:b6:69:1c:1b:9b:ca:d4:fc:af:ec:
                    af:4e:44:58:ff:f8:22:30:9d:7d:dd:a8:36:fc:72:
                    bb:58:f5:ba:8e:dd:5f:39:6b:b7:14:b3:84:81:a2:
                    9c:06:d1:09:2f:78:e0:6a:40:ae:41:82:51:33:5b:
                    a9:02:f2:d3:51:11:53:0e:3f:6c:5b:b5:3c:ff:f3:
                    f6:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:D9:C4:DE:50:D4:74:5E:3A:C2:06:DC:DB:39:5F:69:52:7A:DC:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2658079f-2359-3943-897e-e95be9093009.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e87:1c00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:c2:ea:f7:9b:f1:a6:e6:79:96:71:6b:36:b1:5a:32:f0:bd:
         72:40:48:b5:94:86:b7:c5:90:b3:d6:e3:66:e2:ae:3c:e6:63:
         4c:4f:7f:8f:ae:e2:f9:7a:d3:ac:fc:a9:59:01:3e:03:e3:43:
         b2:d5:33:e7:52:2e:85:57:fa:4e:b4:2f:aa:ff:d7:6d:e6:1b:
         0f:a0:9a:16:e7:49:a2:73:2b:85:7b:3c:d5:e4:1c:5e:31:8a:
         92:eb:05:d4:17:30:d4:2b:5e:f0:4c:9a:6d:f5:c3:3c:97:63:
         c7:06:c8:63:d5:37:0e:0c:e1:aa:93:6e:1d:8b:13:cf:58:97:
         10:97:ae:42:7f:2e:9f:38:48:34:5e:07:17:7a:96:5b:c6:4e:
         1c:1d:0e:8d:e8:c5:2a:15:e1:e0:57:ba:f0:1d:fd:25:ce:e2:
         7c:fa:d0:9a:c2:e6:ce:fc:c6:90:f2:37:cf:71:da:2c:1f:6a:
         82:eb:31:03:1f:53:00:45:cb:f5:ac:c3:e6:15:89:22:fc:ed:
         3c:69:d9:46:37:ac:48:51:76:7c:f3:52:f4:3e:ea:ed:9a:f1:
         e1:7a:78:ce:a5:0f:7e:e3:49:cb:b3:f0:a5:a6:12:7a:5f:3a:
         44:76:d7:72:62:00:c3:d3:8a:57:3a:3b:d7:c3:95:3b:cb:2f:
         0b:9c:93:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 06:40:18 2026 by rpki-client