Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5c693768-566f-3cb1-9ae0-9be4f12d911e.roa
File:                     5c693768-566f-3cb1-9ae0-9be4f12d911e.roa (raw, json)
Hash identifier:          XoGDXohd3BYwofZ7lZikaCacZvhqasmI7pwTXmenu2Q=
Subject key identifier:   80:52:DA:47:D1:2D:10:E5:9B:A5:5B:93:64:2B:88:4F:8C:F4:0B:24
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584EA79BC51D78B22AB58B36A3C8
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5c693768-566f-3cb1-9ae0-9be4f12d911e.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     19905
IP address blocks:        2604:2e89:e000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9b:c5:1d:78:b2:2a:b5:8b:36:a3:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=d79939ac-2f91-49a6-946a-2c65c819be86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:7e:4b:11:93:ea:45:49:7c:39:03:c7:9e:b5:
                    29:da:ad:9e:cc:73:32:78:e2:71:c3:29:1a:f3:a7:
                    42:53:82:e1:f5:c3:79:77:0a:df:86:0a:c5:09:ee:
                    68:aa:ca:11:e4:a8:84:0e:73:27:48:58:01:bd:93:
                    b6:fe:19:6c:50:25:6e:db:18:6f:60:48:25:59:63:
                    82:f1:bc:a2:98:be:2f:75:fd:be:7d:3c:6a:6b:6c:
                    a4:c2:f7:64:c5:ae:24:66:f6:48:a5:cc:3f:fd:d9:
                    1a:24:ce:b1:6d:44:78:a1:61:63:52:0c:ac:d0:93:
                    8e:37:7d:89:76:08:75:9f:3e:fa:f3:7a:4f:01:a4:
                    06:f8:35:00:9a:93:67:72:41:0f:02:b6:0c:48:8a:
                    0c:79:fb:7f:94:68:89:27:b0:02:9b:06:e2:38:52:
                    46:b6:92:56:3f:8f:68:f2:41:4f:0d:2c:8b:38:14:
                    f1:20:4e:7c:3f:99:ae:d8:9e:c3:f4:fe:b9:07:58:
                    cd:41:80:5a:6a:eb:3a:6d:9b:29:81:aa:f3:ef:d7:
                    5e:aa:7d:8e:5f:48:9a:26:71:5c:f6:76:24:e7:17:
                    e3:73:02:8f:f3:37:dd:79:56:95:c8:d9:c2:33:c3:
                    dd:b5:74:a8:eb:0f:cf:15:28:92:f2:61:dd:bf:79:
                    8b:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:52:DA:47:D1:2D:10:E5:9B:A5:5B:93:64:2B:88:4F:8C:F4:0B:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5c693768-566f-3cb1-9ae0-9be4f12d911e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e89:e000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:42:1c:97:aa:f6:1d:69:82:ba:a1:8a:63:4f:64:d0:5e:86:
         54:71:3f:22:db:68:45:c3:90:4b:df:75:39:a4:b9:3c:fc:b5:
         7b:6b:ae:9c:63:e2:78:d4:af:7d:cb:f2:23:63:72:dc:1e:84:
         86:0b:fe:a4:b1:69:26:68:f5:ed:ea:c0:0e:97:74:ce:b5:a0:
         f7:f2:91:c7:22:5f:92:94:0b:3b:bd:42:44:52:e0:67:04:d0:
         bb:36:85:38:2d:b7:04:27:18:ab:23:70:e8:94:4d:1e:af:43:
         c2:f0:bb:a8:61:bf:9c:49:0e:ca:6d:7d:7e:40:c4:16:b1:5f:
         a4:0c:f4:4f:60:90:19:f4:58:35:57:20:ab:aa:6d:9c:bc:0c:
         bb:43:6e:a7:0a:23:a3:e3:17:88:f5:31:be:23:3c:d7:e0:cc:
         aa:62:4b:ae:6a:ba:d9:66:c6:1c:1e:73:f3:8f:4d:2d:4b:4e:
         fa:f9:f8:59:9f:02:e5:e6:49:68:4d:23:d3:37:fc:4c:01:28:
         95:78:8f:09:c9:79:ac:01:b4:c5:59:ae:5c:61:b6:dd:2b:bf:
         4c:18:9e:d1:03:27:2d:c7:f4:02:fc:b6:5b:98:86:b7:ba:6a:
         b1:23:be:81:c8:07:6a:ff:5d:f2:7d:32:7e:94:f6:da:46:b3:
         51:76:60:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 02:27:52 2026 by rpki-client