Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/92843908-6491-3513-be4d-86e649056cc0.roa
File:                     92843908-6491-3513-be4d-86e649056cc0.roa (raw, json)
Hash identifier:          6NHJSRz1orzJivZxmVSP2RiICIDSyG5l7EZlmDws/zA=
Subject key identifier:   49:AD:65:BB:1C:EF:6A:5F:D3:70:63:E7:C5:3D:8F:8C:E7:F6:10:15
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584EF44CCA68F32FF8EECD17DB00
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/92843908-6491-3513-be4d-86e649056cc0.roa
Signing time:             Tue 25 Aug 2026 13:00:12 +0000
ROA not before:           Tue 25 Aug 2026 13:00:12 +0000
ROA not after:            Mon 23 Nov 2026 14:00:12 +0000
asID:                     19905
IP address blocks:        2604:2e88:b800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f4:4c:ca:68:f3:2f:f8:ee:cd:17:db:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Aug 25 13:00:12 2026 GMT
            Not After : Nov 23 14:00:12 2026 GMT
        Subject: CN=5236aa76-b06a-4eb9-9a08-584de9f0b0b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:c0:66:51:11:ea:ae:24:d3:2a:dd:54:58:82:
                    c2:19:ca:d3:4e:ae:4f:e6:f9:6c:28:a5:25:8f:c8:
                    b0:90:ee:b0:c8:c2:ff:ee:9f:95:46:fc:c5:53:ec:
                    cf:df:59:c4:b5:97:ac:b9:30:34:b5:d2:71:3f:b2:
                    3e:34:ab:8a:ac:7f:7f:36:41:dc:e5:c5:d0:19:c8:
                    38:b3:cd:e6:ea:70:a7:7a:98:0e:13:c4:37:7e:cb:
                    cd:e1:2e:db:7a:17:11:23:d4:19:0f:2b:e9:ef:c1:
                    bb:31:03:d3:92:b2:cb:ba:17:4d:b4:e0:ee:00:f5:
                    8d:a9:e9:9a:cd:b7:56:d9:31:8c:bd:8b:c2:46:c7:
                    5b:02:f6:32:87:db:e8:4b:80:a4:5a:46:9e:2a:87:
                    41:63:03:93:4a:cd:8c:c2:1a:9f:48:17:bb:26:83:
                    f5:17:38:03:6a:80:cb:c4:db:88:cd:5b:70:78:84:
                    71:32:57:30:91:a0:91:1e:91:fa:11:b1:37:da:c1:
                    51:91:17:50:c6:bf:f2:0a:10:c3:e5:86:28:a8:5a:
                    35:4f:36:27:04:89:06:21:92:cf:2a:f8:d1:f9:d3:
                    40:d4:72:d1:92:f7:1b:6f:3c:1e:6c:cd:5d:d5:62:
                    0d:68:e8:53:90:aa:16:ee:a0:67:17:ab:ad:28:46:
                    b3:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:AD:65:BB:1C:EF:6A:5F:D3:70:63:E7:C5:3D:8F:8C:E7:F6:10:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/92843908-6491-3513-be4d-86e649056cc0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e88:b800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:b1:ba:95:b6:e9:34:42:1e:16:c8:c7:3b:ae:6b:b2:8b:c2:
         11:8d:9e:06:d5:fd:c1:56:c6:29:a2:94:13:de:90:69:4a:c1:
         0e:4a:ec:5c:7a:b3:fe:7e:08:18:a9:8b:e6:e8:04:bc:01:3d:
         fa:b7:bf:b2:58:23:0f:35:92:6a:50:d2:73:79:83:b3:e2:e5:
         01:d3:ce:bc:b8:26:6f:a5:d5:ef:ea:bc:10:3e:97:19:01:a5:
         4b:45:ac:c3:a2:d5:83:f0:ae:41:df:d0:16:81:25:26:7f:38:
         ee:a3:1d:30:83:5a:0c:ee:45:6e:ac:d8:57:52:a7:9b:7b:b3:
         59:ff:2b:b5:a2:5e:bc:a9:19:d2:9d:c4:c9:58:b6:b3:cd:96:
         74:b6:5c:73:10:ea:ff:dd:d5:b3:c8:c1:f9:65:42:6e:4a:53:
         98:34:8d:e7:bd:7e:45:01:fc:c5:a2:65:a0:3d:a6:43:a9:29:
         2d:ed:44:8b:06:b7:6d:50:92:40:12:d9:d6:1f:74:30:34:8d:
         f9:df:ca:8e:2c:fc:5f:9d:aa:21:b2:20:34:79:16:09:86:ed:
         96:3e:8f:c9:ef:e9:de:62:b7:8a:48:3e:27:1f:ed:a6:42:e7:
         8a:0b:0a:7d:29:c6:0e:d7:73:ba:47:9b:5a:12:0f:47:03:eb:
         83:53:aa:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 03:43:11 2026 by rpki-client