Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2641a9c0-393b-35c4-a0f1-68a8c4497d97.roa
File:                     2641a9c0-393b-35c4-a0f1-68a8c4497d97.roa (raw, json)
Hash identifier:          4b/00WJBOyKiYFzqGyJ9B7VR01TgyO8HnspJzc2+yrs=
Subject key identifier:   CE:DA:D0:B2:B3:7D:42:0F:5A:3D:35:96:63:6B:4F:F5:CB:63:42:F0
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584EA5AA72B16D0CD77DD8FC4900
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2641a9c0-393b-35c4-a0f1-68a8c4497d97.roa
Signing time:             Tue 28 Jul 2026 09:00:11 +0000
ROA not before:           Tue 28 Jul 2026 09:00:11 +0000
ROA not after:            Mon 26 Oct 2026 09:00:11 +0000
asID:                     19905
IP address blocks:        2604:2e8a:4400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a5:aa:72:b1:6d:0c:d7:7d:d8:fc:49:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jul 28 09:00:11 2026 GMT
            Not After : Oct 26 09:00:11 2026 GMT
        Subject: CN=28dd92c6-2039-47dd-9b6d-356163c86cd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:1b:bb:02:c2:15:20:2b:1b:11:86:f4:45:fe:
                    fe:b3:3b:57:49:28:c4:b6:84:26:71:5c:33:45:10:
                    75:47:f4:c8:9b:6f:76:58:e8:27:07:fe:55:a1:87:
                    69:7f:d1:b2:bd:8b:a5:be:54:86:8f:17:69:97:7d:
                    ca:c0:91:d1:5a:77:38:78:f9:a5:e0:96:66:a4:1f:
                    fe:68:18:06:2f:74:2c:1b:14:34:6f:c7:85:6c:45:
                    8c:0d:6c:50:6d:91:30:29:98:91:e4:72:da:cd:cd:
                    e0:f3:3f:ac:d8:9b:30:36:11:af:b6:db:c7:56:2f:
                    38:99:e4:f2:f1:37:93:87:da:5d:07:00:04:4f:a7:
                    28:d5:ae:fd:1c:99:58:b6:c9:5c:96:c6:a4:dd:85:
                    fb:2f:de:f7:c6:ee:e0:69:10:11:b5:9f:a4:58:e6:
                    d0:9b:79:fd:43:37:52:85:07:7b:5d:2a:44:11:d5:
                    0a:b1:cf:60:40:a4:43:77:9c:7c:ea:b5:cd:13:9a:
                    81:fa:05:1c:0b:15:75:99:8c:fa:41:dc:95:23:f4:
                    46:04:96:d7:10:c9:12:01:fe:9d:8d:02:8c:cd:fa:
                    bd:40:6d:2e:88:a0:ae:1b:fb:78:0b:d5:28:4f:3a:
                    81:9d:b7:6a:35:f4:75:42:7f:9b:fe:88:c0:0e:d0:
                    90:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:DA:D0:B2:B3:7D:42:0F:5A:3D:35:96:63:6B:4F:F5:CB:63:42:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2641a9c0-393b-35c4-a0f1-68a8c4497d97.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8a:4400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:c1:70:bb:4f:ef:31:14:8d:0b:3d:ca:f8:b7:2d:56:e9:66:
         6e:84:5a:c9:5d:2b:ab:ab:15:72:09:ec:fc:c7:e1:0d:4e:9e:
         ba:62:6a:c9:72:75:fd:08:76:30:37:89:ea:a5:e4:5d:8b:8c:
         19:6a:cc:f4:8e:c2:0a:b3:7c:3e:6b:bf:3a:df:9e:e8:06:05:
         23:9b:8f:7e:36:c5:b1:49:03:12:7e:7b:85:d1:7c:0d:c4:5b:
         e4:25:9b:3d:6b:ce:e7:3e:84:71:b4:0f:9b:d1:6e:50:ba:13:
         4b:ef:dd:09:9e:07:87:cf:e5:0b:c8:b7:57:bc:14:53:15:ba:
         ff:bc:f7:57:c1:53:23:8a:72:a2:b3:bc:2f:28:fd:2e:71:a7:
         f0:8a:48:68:fc:e4:03:bc:7a:31:7b:09:ab:72:84:ca:d4:ea:
         30:b2:1a:c6:47:d6:d6:68:7f:59:52:16:be:5d:0a:dc:f7:36:
         20:1d:30:03:3c:47:97:ba:4f:e7:fc:f3:f4:a8:b6:cd:eb:1f:
         f0:af:92:de:7e:60:53:e4:d8:40:bb:f8:59:dd:20:87:9b:0b:
         28:86:c0:42:83:38:56:3f:e8:0a:d6:40:a5:6b:34:3a:ad:11:
         a1:78:a9:fe:b1:60:2e:4e:27:9e:39:a1:13:03:fb:cc:aa:87:
         88:80:a1:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 03:10:17 2026 by rpki-client