Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/334f355e-059e-3587-bb83-5ee984a757c9.roa
File:                     334f355e-059e-3587-bb83-5ee984a757c9.roa (raw, json)
Hash identifier:          RVstGHt78LnjgqXjjUJi8GBEm0lzaY8yIF16NZm/+Vw=
Subject key identifier:   7A:60:A8:CC:07:60:78:5C:58:B0:D9:A0:75:AF:B9:71:EF:DE:39:DE
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584E5B686AF49B6240016D92C9D8
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/334f355e-059e-3587-bb83-5ee984a757c9.roa
Signing time:             Wed 01 Jul 2026 18:37:28 +0000
ROA not before:           Wed 01 Jul 2026 18:37:28 +0000
ROA not after:            Tue 29 Sep 2026 18:37:28 +0000
asID:                     19905
IP address blocks:        2604:2e86:2400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5b:68:6a:f4:9b:62:40:01:6d:92:c9:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jul  1 18:37:28 2026 GMT
            Not After : Sep 29 18:37:28 2026 GMT
        Subject: CN=db333725-3a59-4ee2-97e7-d25e967d5641
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:e0:ed:19:9d:e9:30:01:f4:ac:9d:2c:99:36:
                    f8:71:37:de:62:a4:bb:27:28:37:88:7b:f2:fc:d6:
                    d2:da:44:4d:8a:c9:7e:ae:06:66:2c:eb:f6:a0:a7:
                    a7:e2:34:84:1d:bd:36:97:62:8e:aa:2b:d4:4a:79:
                    a0:25:f8:0d:c1:94:4b:1e:6e:54:d1:df:05:a6:95:
                    94:0f:d6:32:17:d0:1e:37:68:5a:25:e7:83:17:38:
                    1e:ed:61:42:f9:5b:95:84:45:50:26:70:b2:2a:d6:
                    d5:66:cc:cc:74:28:ab:b2:60:ec:c2:2d:c2:67:24:
                    57:f0:e3:4f:a7:14:9f:2a:1f:27:99:bd:5e:45:aa:
                    44:79:05:9d:c9:2e:92:0c:98:e7:73:e4:a1:24:87:
                    db:b5:56:5c:46:c9:81:82:56:55:a5:97:8c:88:70:
                    84:3c:7d:90:84:0e:d2:48:be:2a:b5:8e:62:98:8c:
                    9e:d4:b9:17:89:67:5d:7c:81:e7:ba:9b:36:65:a0:
                    8e:ec:16:8b:b2:8d:b1:ac:5b:cf:29:af:55:93:a6:
                    92:2e:e3:e2:ee:32:47:02:ca:f8:55:52:9d:53:0e:
                    13:c6:5d:84:b5:5a:1c:67:ac:dc:88:92:db:01:a5:
                    ab:5d:e5:c8:8d:0e:47:a3:66:14:3b:e8:62:46:67:
                    64:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:60:A8:CC:07:60:78:5C:58:B0:D9:A0:75:AF:B9:71:EF:DE:39:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/334f355e-059e-3587-bb83-5ee984a757c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e86:2400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:87:8d:5e:c4:f1:85:eb:b9:c0:6f:83:34:2a:de:40:16:49:
         06:c4:a2:f5:05:d8:8a:b8:c6:79:ac:c4:55:c5:d2:48:97:61:
         3d:8d:dc:1e:1d:13:ed:9b:a9:7e:a9:f0:37:6d:17:b2:fe:13:
         27:52:5c:71:f6:d2:84:73:a8:16:8c:b8:8b:d5:5a:01:13:8d:
         85:88:b2:27:fa:4d:06:f8:32:36:17:e5:92:7a:35:40:ed:3c:
         80:59:85:33:43:62:e7:95:78:15:54:3a:90:70:ea:df:75:59:
         1f:fc:0b:05:ed:e1:c5:53:16:86:16:89:7a:4a:5a:4d:99:0b:
         b3:a5:af:b6:db:9f:06:f2:51:8e:7a:0e:0f:c7:03:b4:90:4f:
         10:7a:10:c4:f1:21:3e:93:f9:bb:d1:2e:1a:57:11:89:73:61:
         b2:8d:a2:e8:38:f2:90:a6:b3:56:45:92:d9:b9:c2:4a:33:54:
         94:ee:ee:2f:5d:52:26:ec:f7:31:dc:39:09:d1:05:14:35:95:
         b1:f1:3a:ac:63:70:6f:1e:95:8b:e7:b5:bb:13:a3:9f:21:8b:
         3f:fd:ed:ad:1d:12:38:60:38:50:0c:f0:09:08:d2:be:37:80:
         f6:40:2c:44:36:46:1d:c8:f7:63:96:95:44:17:62:ad:e5:58:
         f0:5f:d2:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 19:31:49 2026 by rpki-client