Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/29707134-49d9-3990-9115-b35086e838e2.roa
File:                     29707134-49d9-3990-9115-b35086e838e2.roa (raw, json)
Hash identifier:          tWRJOLXKauO8cn4KHReADRCcoIwDVLLlSW+vmd9XGzg=
Subject key identifier:   04:3A:72:8D:D1:8B:74:0B:51:DF:7F:A3:A8:03:56:B7:8E:7E:B6:9E
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584EA5AA9542AA4E32AF3FB0D940
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/29707134-49d9-3990-9115-b35086e838e2.roa
Signing time:             Tue 28 Jul 2026 09:00:11 +0000
ROA not before:           Tue 28 Jul 2026 09:00:11 +0000
ROA not after:            Mon 26 Oct 2026 09:00:11 +0000
asID:                     19905
IP address blocks:        2604:2e8a:1c00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a5:aa:95:42:aa:4e:32:af:3f:b0:d9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jul 28 09:00:11 2026 GMT
            Not After : Oct 26 09:00:11 2026 GMT
        Subject: CN=8cd29a76-bfee-468c-82e2-f1aa590b4776
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:26:0e:bb:f3:89:26:b8:f7:5e:72:9f:76:f6:
                    53:44:4f:6f:07:90:ff:a5:4f:07:f2:d4:a0:32:e7:
                    47:8d:d6:69:8e:2a:f5:27:88:9f:cf:1a:4c:5f:df:
                    ed:5c:20:42:b5:6f:8d:00:16:5b:d5:16:1b:72:41:
                    69:ec:97:47:78:74:12:86:dc:7f:ed:70:e5:82:5f:
                    c2:b5:9a:40:c0:53:17:16:20:af:d4:52:67:a1:38:
                    22:e9:63:10:3c:63:ae:dc:fc:76:a5:e1:27:90:04:
                    b5:a4:6b:3d:3d:9e:80:ab:4d:9d:75:41:f0:b9:8a:
                    79:40:60:11:bf:e9:c9:cc:7d:4d:00:0d:c5:f6:51:
                    6c:0d:c2:dd:96:a6:a6:86:d7:12:3a:f4:17:72:ec:
                    65:31:96:af:eb:28:1b:0f:50:26:6d:1b:8c:02:a8:
                    20:59:1b:a1:6b:05:fd:41:f0:28:a8:89:37:ba:aa:
                    9b:47:5c:13:ef:5f:7e:01:fc:99:f3:fb:90:a1:72:
                    bf:68:63:6b:65:4c:aa:c6:19:94:f1:25:56:dd:ce:
                    81:03:9a:b4:b4:a4:e5:bf:42:6a:c0:62:30:f1:2a:
                    42:6b:56:cf:64:63:b2:d4:9f:13:95:b9:7a:07:1b:
                    5f:f5:8d:3c:ab:69:70:91:0c:31:2e:bd:d3:e1:2f:
                    ac:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:3A:72:8D:D1:8B:74:0B:51:DF:7F:A3:A8:03:56:B7:8E:7E:B6:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/29707134-49d9-3990-9115-b35086e838e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8a:1c00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:00:72:f1:fb:59:50:8c:58:6d:6e:03:5c:8e:ed:c6:dd:6c:
         1d:a7:22:3b:84:a2:85:1c:01:93:4a:2a:ed:25:d5:e5:6f:f1:
         0d:9c:ff:9c:20:b6:05:c0:81:42:5f:6c:e0:d1:84:b8:12:f0:
         97:1d:14:76:94:a4:9c:af:f4:0b:89:e0:ff:bb:9d:a7:b0:bc:
         bd:2a:3f:82:ec:9b:7c:54:be:a3:02:cb:c6:82:b8:76:05:7d:
         2a:d8:de:76:76:79:f0:3d:f9:86:1e:cf:03:cc:3a:7e:e1:27:
         ae:ce:91:4f:36:24:8b:04:de:51:81:80:0e:3c:31:9f:9f:c2:
         45:92:53:01:14:86:5d:6e:75:87:d4:d2:d8:e3:6f:ba:bf:76:
         1d:fe:7f:11:dc:04:b3:db:ea:60:75:a2:4e:0b:a5:71:4f:fc:
         39:44:77:59:9e:33:53:0c:6d:cd:5c:92:8c:fe:85:d1:11:78:
         bf:9b:f2:fd:0c:97:91:a1:7e:c0:68:52:4d:65:d5:09:40:cf:
         c8:dd:c7:08:83:64:5e:97:6a:1e:74:69:ed:66:86:78:eb:6b:
         31:24:20:45:83:51:6d:a3:b3:b2:67:0e:db:e5:ad:d5:68:83:
         d7:d0:0e:88:89:47:a8:bc:b7:a8:94:b2:82:5d:1a:4a:c5:56:
         f7:81:16:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 02:30:02 2026 by rpki-client