Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/abab5eba-5fac-3591-826e-8be09d29a690.roa
File:                     abab5eba-5fac-3591-826e-8be09d29a690.roa (raw, json)
Hash identifier:          65J9CsqJpw4yNwvm2O14JUd6/+3VE4GLzRPTKPzxjc0=
Subject key identifier:   2B:EA:90:A9:11:C3:F7:58:E1:21:40:C0:44:F8:20:03:49:00:83:05
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584F5FC803C02095029569110580
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/abab5eba-5fac-3591-826e-8be09d29a690.roa
Signing time:             Sat 03 Oct 2026 01:00:12 +0000
ROA not before:           Sat 03 Oct 2026 01:00:12 +0000
ROA not after:            Fri 01 Jan 2027 02:00:12 +0000
asID:                     19905
IP address blocks:        2604:2e88:5000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5f:c8:03:c0:20:95:02:95:69:11:05:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Oct  3 01:00:12 2026 GMT
            Not After : Jan  1 02:00:12 2027 GMT
        Subject: CN=af7332c6-9a21-4bbb-afff-012b41b7775b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:48:66:5d:24:70:5a:1a:f9:e4:2f:02:4a:8a:
                    12:97:81:6d:16:30:02:f5:49:af:92:e1:7a:68:7f:
                    56:58:f4:11:6f:35:cd:f5:cd:de:3e:a0:d6:11:65:
                    6a:b8:4f:91:bc:45:8c:ae:37:cb:30:12:d1:fe:10:
                    55:db:c1:72:52:cc:4c:77:60:e1:11:d7:4a:8f:5d:
                    07:d8:72:06:b4:6f:19:d1:e5:2d:a1:d1:14:12:7b:
                    01:b3:95:f5:f2:e8:e5:90:d3:4c:56:37:e8:fd:c1:
                    82:f8:7b:9b:2e:7a:81:bf:69:6b:8d:20:ad:e5:29:
                    b7:52:93:d3:c0:87:d2:a8:d8:71:37:54:12:1a:f9:
                    29:d8:56:c5:13:11:14:58:11:fa:24:73:11:15:50:
                    34:16:53:3e:94:b4:00:dd:e6:22:7a:fe:55:73:3c:
                    14:95:a8:90:17:ef:aa:c5:96:02:c9:5f:68:a9:16:
                    87:d4:8a:fa:61:71:ab:6b:9a:fe:47:9d:d5:f2:35:
                    36:b0:7c:26:01:bb:85:b9:8b:69:2f:f1:e5:0a:40:
                    98:a7:b9:68:57:1d:08:34:ab:c1:90:86:9d:e3:02:
                    96:d6:2d:0d:7e:cd:63:e0:4e:d6:81:50:f8:12:32:
                    16:fb:5d:d0:f9:d1:94:38:8a:da:10:59:9a:9e:8e:
                    51:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:EA:90:A9:11:C3:F7:58:E1:21:40:C0:44:F8:20:03:49:00:83:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/abab5eba-5fac-3591-826e-8be09d29a690.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e88:5000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:36:00:76:47:23:87:f7:b2:18:77:f1:48:08:68:ae:6a:0e:
         8e:f2:51:e9:29:2c:03:ee:14:a7:2d:69:d0:9a:ce:42:6e:21:
         3d:d7:9a:f7:71:1e:d8:aa:47:1a:cc:6d:ad:13:4a:f4:f8:ba:
         9d:bf:dc:55:77:12:51:68:62:3b:eb:a8:de:5d:84:59:2c:b0:
         2b:c8:26:b2:ed:64:c9:11:1f:b0:c9:f1:c0:2d:ac:b6:1a:10:
         1c:28:6d:e6:c0:48:2b:8d:04:67:b9:ec:32:64:9b:11:a9:f4:
         e2:33:98:51:e1:56:e5:14:bf:d8:b2:46:7a:6d:1b:e8:4b:5e:
         04:9d:3e:48:ed:31:1e:9b:e3:6d:2d:93:0a:41:ff:7e:9f:53:
         ab:b6:3f:bb:2a:37:43:21:7d:b5:db:db:46:fd:55:f8:f0:b7:
         50:5e:67:c5:9a:82:30:11:87:8e:52:09:36:98:d9:1c:94:92:
         53:7a:12:76:d1:f0:2a:61:8c:4e:41:41:28:b8:05:a6:7e:b3:
         6d:a6:05:9b:e4:18:ad:5a:6f:1b:d2:49:2b:32:9a:68:0f:ac:
         54:bf:39:7c:56:13:b4:04:c2:31:e2:50:37:3a:97:da:aa:47:
         da:c1:22:a1:17:06:3d:16:b5:7c:5e:7a:99:65:0d:86:1c:6b:
         95:0d:c8:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 12:48:19 2026 by rpki-client