Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/45b5a331-1cf3-39d0-bfaa-72ed41ef4a66.roa
File:                     45b5a331-1cf3-39d0-bfaa-72ed41ef4a66.roa (raw, json)
Hash identifier:          V5NDUd/s/amb6etlWW1db1Z223HBDBwV7FXIRJCLzhg=
Subject key identifier:   E2:A0:EE:C3:DD:18:56:EB:4F:C8:E3:87:AC:B4:F1:0B:2D:43:4E:C4
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584F5FC803CFD388CFC46EEBE880
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/45b5a331-1cf3-39d0-bfaa-72ed41ef4a66.roa
Signing time:             Sat 03 Oct 2026 01:00:12 +0000
ROA not before:           Sat 03 Oct 2026 01:00:12 +0000
ROA not after:            Fri 01 Jan 2027 02:00:12 +0000
asID:                     19905
IP address blocks:        2604:2e88:5400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5f:c8:03:cf:d3:88:cf:c4:6e:eb:e8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Oct  3 01:00:12 2026 GMT
            Not After : Jan  1 02:00:12 2027 GMT
        Subject: CN=692d1ccb-e6a4-4405-bce7-24af42e7fe93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:94:a0:4c:f7:60:3a:b5:f1:26:90:1e:a5:5e:
                    3c:b3:ca:62:a1:91:c0:da:dc:80:24:f4:3c:e0:53:
                    b7:d7:2c:aa:90:7a:47:1d:2e:fb:40:d0:8c:9d:af:
                    44:30:95:30:c2:f3:e4:f7:63:1d:f8:a1:d5:48:75:
                    15:d0:27:df:b6:7a:70:01:33:e4:a1:ec:60:8e:62:
                    f1:ed:d2:a1:4a:98:89:4c:d7:c7:37:49:39:7a:28:
                    05:e9:70:65:53:f3:5e:f7:2e:dc:2b:3b:6c:3b:5b:
                    29:ca:f0:9a:f3:85:8a:11:33:40:c0:0d:8a:7c:db:
                    f0:b3:99:7a:59:64:ee:11:59:48:1f:0c:ff:f8:78:
                    13:01:54:0a:cb:a5:24:45:b3:00:6e:5e:1a:f8:9d:
                    5d:c3:b8:a0:96:5b:24:16:f1:16:5d:03:cb:34:16:
                    97:54:20:fd:86:24:30:5f:b0:cd:59:62:c2:fb:04:
                    12:e5:41:19:5c:50:e5:6c:c2:ae:d1:c2:f8:b9:91:
                    c2:bc:38:10:91:76:d3:a2:78:8f:ed:e3:09:fe:84:
                    2a:ec:49:52:b2:08:82:8b:1d:b3:e4:ed:ba:30:9f:
                    28:53:fb:f8:49:94:d3:8b:39:3a:ba:82:a9:57:75:
                    3f:af:2e:ac:69:ee:37:bb:27:28:08:44:86:1b:91:
                    e3:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:A0:EE:C3:DD:18:56:EB:4F:C8:E3:87:AC:B4:F1:0B:2D:43:4E:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/45b5a331-1cf3-39d0-bfaa-72ed41ef4a66.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e88:5400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:23:cd:89:6d:fb:86:45:1a:a1:06:7c:ea:be:a9:fb:21:22:
         e9:48:6d:03:a8:f2:1b:cf:83:53:4b:18:4b:84:34:db:7f:ee:
         ef:5a:56:55:82:49:b0:97:5a:a3:3a:4c:3b:4b:b4:de:86:a2:
         32:22:64:48:fc:49:9c:f3:bc:22:89:13:56:9f:46:aa:5d:8d:
         a3:43:6b:11:48:22:20:bf:bc:78:15:77:5a:5e:65:b5:88:34:
         53:d2:d6:f3:2b:ec:82:13:b0:fa:0e:25:d5:86:71:d4:4d:df:
         9e:cf:d6:05:68:64:d9:e9:a0:6a:42:b5:5b:d6:5f:c5:b7:7f:
         f7:34:d9:3b:bf:18:78:3e:4a:cc:ea:18:24:f0:98:ce:2d:43:
         e5:db:38:74:98:4c:a7:aa:3e:86:61:f7:49:49:f2:92:2b:46:
         f6:2f:b2:7a:13:e5:a9:11:8c:4c:66:ba:cc:25:10:7f:3a:7b:
         51:00:50:ac:a3:58:c9:54:76:2c:ad:2e:b4:97:a7:6f:40:e9:
         86:f9:42:e3:87:0e:3d:1c:71:a5:dc:5d:ba:68:08:05:23:f7:
         d5:2d:9e:e1:20:a0:49:4b:0e:de:dc:c2:c1:6a:12:f1:91:10:
         2b:ee:b1:8e:61:fc:99:58:bc:c4:a5:24:7d:82:6f:a9:e5:36:
         b6:d8:32:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 06:19:04 2026 by rpki-client