Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/872de70e-9a7f-3cf2-882d-ec667a5a9114.roa
File:                     872de70e-9a7f-3cf2-882d-ec667a5a9114.roa (raw, json)
Hash identifier:          VPKfij8Ca0mgLwug3/QPmBmuCLdIr9P81vtDmAmfZ0w=
Subject key identifier:   2E:75:C9:50:C3:6A:F0:91:57:81:18:8B:F7:5B:0A:B2:85:37:55:BA
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584F5FC803DF0A8799284076A300
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/872de70e-9a7f-3cf2-882d-ec667a5a9114.roa
Signing time:             Sat 03 Oct 2026 01:00:12 +0000
ROA not before:           Sat 03 Oct 2026 01:00:12 +0000
ROA not after:            Fri 01 Jan 2027 02:00:12 +0000
asID:                     19905
IP address blocks:        2604:2e88:5800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5f:c8:03:df:0a:87:99:28:40:76:a3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Oct  3 01:00:12 2026 GMT
            Not After : Jan  1 02:00:12 2027 GMT
        Subject: CN=9cbd3db3-3b31-42d9-b6c4-0a46d62b0d4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ed:6b:11:3d:ea:d3:f5:22:18:93:08:45:8a:
                    c4:f8:c0:4b:24:a9:69:93:5d:11:00:28:20:17:8c:
                    d1:dc:8b:51:b6:a2:88:c1:63:3e:29:57:14:47:66:
                    77:7c:c4:06:81:8f:93:2d:8b:b7:69:f7:a6:a8:e7:
                    bf:e8:d4:57:4e:b6:56:e8:61:56:b1:8f:64:d1:a8:
                    1f:a0:1d:09:67:4f:6b:20:ed:b8:38:57:6b:0d:3c:
                    ba:2c:60:a3:2a:7d:e3:d5:be:9f:65:45:41:47:2a:
                    0f:5e:f3:3f:d0:ea:10:90:35:7b:31:68:7a:ad:69:
                    43:c2:0d:14:ee:5c:db:63:30:d1:b1:d8:39:a8:07:
                    77:8d:f0:21:a7:3f:10:ff:35:ba:1e:aa:84:96:40:
                    02:39:ef:9c:54:88:6c:f1:1e:dd:9d:a6:aa:65:30:
                    1f:dc:35:32:45:2a:b7:6d:60:2e:09:2e:7d:c5:e6:
                    ac:5c:e7:56:aa:6d:77:30:81:9f:78:1b:53:08:53:
                    01:4b:f3:f9:8d:a8:e0:1c:7e:41:24:37:a4:9b:28:
                    38:b1:3f:e3:b6:fc:d1:ed:6e:30:3f:ed:b1:78:b2:
                    0d:20:45:76:c3:83:2e:cd:07:5c:c1:78:15:7b:8a:
                    a8:9f:61:77:73:80:14:b2:01:42:1c:f7:10:d0:93:
                    03:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:75:C9:50:C3:6A:F0:91:57:81:18:8B:F7:5B:0A:B2:85:37:55:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/872de70e-9a7f-3cf2-882d-ec667a5a9114.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e88:5800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:d4:62:32:b4:b6:9c:35:eb:b2:92:9f:d6:a4:69:da:43:a7:
         93:d0:f7:4e:c4:05:0b:26:d7:e8:c5:fc:8c:83:6c:6e:93:61:
         e2:0a:06:88:68:ae:f1:41:5d:66:b6:b3:6d:fc:1a:1e:c8:41:
         28:01:6c:f8:24:5e:30:71:b0:8e:4f:0c:ce:80:31:d2:d3:60:
         e3:be:f4:5d:f9:10:af:f1:85:35:b8:9e:e6:7e:8b:7c:cf:aa:
         30:9d:94:cc:8d:6c:29:bb:30:ac:65:79:df:4e:60:f5:90:91:
         bd:3c:6d:19:38:dd:22:a0:d9:54:ff:d3:74:ce:43:c7:ff:78:
         14:5f:fa:06:c9:4a:3f:6f:ad:ba:db:ab:cf:da:26:d4:69:c5:
         b2:49:86:1d:eb:4a:a8:8c:9e:f3:5d:22:01:6b:d6:61:82:ba:
         0c:8a:bd:39:24:cd:27:25:bf:bb:3f:7d:e1:49:58:17:7b:1f:
         4e:69:fb:59:c9:43:b5:12:fb:e2:1f:03:a5:3d:d2:b5:4d:ce:
         c3:bc:bd:a7:28:df:e2:20:58:57:c7:f1:81:30:96:4b:c5:a2:
         8f:58:f2:88:20:01:31:a0:4b:d3:7d:97:1c:c0:85:b4:06:74:
         b1:09:d4:3f:84:f9:5d:72:26:b2:ab:99:e8:73:b7:7c:13:16:
         38:a3:e4:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 18:19:56 2026 by rpki-client