Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bb0b8e75-408a-30d1-b36f-c42a8861ca68.roa
File:                     bb0b8e75-408a-30d1-b36f-c42a8861ca68.roa (raw, json)
Hash identifier:          N6KphpugT3nQ/8ai7Cn9PabKIfG+BX9RdOSfiL3DE0w=
Subject key identifier:   4B:6A:96:B3:47:64:93:48:80:7F:BE:9E:2D:8C:5F:5C:06:12:17:05
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584F5A32F3B8C36859336474F140
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bb0b8e75-408a-30d1-b36f-c42a8861ca68.roa
Signing time:             Thu 01 Oct 2026 01:00:12 +0000
ROA not before:           Thu 01 Oct 2026 01:00:12 +0000
ROA not after:            Wed 30 Dec 2026 02:00:12 +0000
asID:                     19905
IP address blocks:        2604:2e87:1000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5a:32:f3:b8:c3:68:59:33:64:74:f1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Oct  1 01:00:12 2026 GMT
            Not After : Dec 30 02:00:12 2026 GMT
        Subject: CN=1a701566-b5c5-45c2-884a-deb7ffab5ee6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:ee:d1:ec:3f:f4:e4:b1:af:d6:d2:14:e9:1c:
                    b3:e4:6f:3b:4b:fa:3f:7f:75:32:30:f9:6d:de:9c:
                    2a:10:66:e5:cf:27:68:85:8f:c4:a1:db:c7:d5:c4:
                    67:19:ed:c9:4e:8d:6a:60:1c:24:e4:18:ae:80:41:
                    66:cc:e6:8e:3a:9d:f6:a0:84:99:9e:90:f9:85:ee:
                    94:f6:53:f3:8c:b2:c7:9d:d2:22:12:12:bb:22:69:
                    48:ac:8b:64:cc:01:d7:b1:43:48:7e:25:6e:a1:9d:
                    4f:5c:8f:ec:55:35:06:4f:d9:8e:89:75:32:89:e7:
                    6d:97:7b:9f:15:4d:3e:9f:ac:8f:a3:85:f8:2a:00:
                    90:ad:15:94:58:e1:17:10:f8:6f:71:16:c9:fc:bb:
                    c6:27:33:92:92:52:06:32:94:20:14:d1:12:1f:4c:
                    25:e9:60:8f:f5:5a:24:f6:e6:6c:20:3f:46:cf:85:
                    81:49:1b:f7:95:7f:58:85:21:33:41:ff:c8:a6:3c:
                    54:c2:e5:95:a9:6b:9b:72:37:73:11:5d:3c:17:76:
                    39:33:58:4f:67:96:2b:80:4d:73:5c:a8:49:a3:86:
                    ce:22:ac:65:56:95:cd:8c:fb:38:8b:b3:97:42:8f:
                    f1:a6:86:51:c3:64:a4:e4:64:a9:13:26:2e:76:f2:
                    5c:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:6A:96:B3:47:64:93:48:80:7F:BE:9E:2D:8C:5F:5C:06:12:17:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bb0b8e75-408a-30d1-b36f-c42a8861ca68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e87:1000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:a4:49:7a:f0:11:07:94:5f:1a:ed:fd:0e:51:62:93:de:68:
         59:f0:63:19:28:f2:1d:bd:2f:84:a9:f5:14:5c:e2:68:6a:64:
         e0:5d:20:1f:d2:fd:3b:df:b9:a7:55:f9:fe:c6:a0:77:94:0e:
         72:06:25:c5:cd:16:40:9f:07:46:5a:e3:86:5d:10:b3:53:95:
         0d:a9:1c:62:48:c2:c6:14:42:96:9a:3e:a3:2b:86:b7:18:33:
         78:e4:64:bf:d4:67:6e:95:4f:60:a6:f6:6d:c1:4e:70:6a:be:
         4d:ce:92:9c:60:30:cb:19:48:81:50:61:24:95:c3:3b:22:c2:
         2b:f5:88:e3:f9:2c:16:a1:64:86:7b:de:31:e2:29:b2:e8:f2:
         0f:10:e5:fe:82:e1:07:9e:a9:63:38:9f:62:82:8d:0f:b2:da:
         f9:9e:7e:36:f4:40:8d:12:67:be:bb:29:58:c3:28:2d:56:7e:
         b6:2b:df:9d:2e:6a:4f:9c:d2:31:06:cd:9a:1e:6e:a7:2a:ce:
         41:be:40:dd:b0:04:ae:ec:e9:d7:65:fa:f9:f0:7c:ca:53:e3:
         16:23:70:d8:7a:de:ff:cf:71:ee:15:be:63:a2:69:54:5c:08:
         93:8e:18:d3:cd:b4:e0:cb:7b:67:66:6b:59:64:f8:95:88:ae:
         0f:be:83:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 06:21:31 2026 by rpki-client