Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/81786838-45d1-3749-9a7b-65379675e7a9.roa
File:                     81786838-45d1-3749-9a7b-65379675e7a9.roa (raw, json)
Hash identifier:          wJYNiOYEyUartdp7dDe2sBqgHiU7CyEDmQMB3CFKrFM=
Subject key identifier:   49:44:D0:61:28:A7:B4:9D:6E:68:1E:6A:4B:38:2E:41:E8:27:91:B5
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584EBD0DA88D1F5E955F45050500
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/81786838-45d1-3749-9a7b-65379675e7a9.roa
Signing time:             Wed 05 Aug 2026 18:03:49 +0000
ROA not before:           Wed 05 Aug 2026 18:03:49 +0000
ROA not after:            Tue 03 Nov 2026 19:03:49 +0000
asID:                     19905
IP address blocks:        2604:2e8c:a400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bd:0d:a8:8d:1f:5e:95:5f:45:05:05:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Aug  5 18:03:49 2026 GMT
            Not After : Nov  3 19:03:49 2026 GMT
        Subject: CN=2c65d48a-c610-4ade-8e85-7172b28df9a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:dc:ad:57:d9:fa:15:bc:08:78:e2:4b:36:05:
                    dc:0f:8b:68:cd:12:14:f7:4c:98:93:2a:7e:4d:9a:
                    41:06:70:7a:7b:75:7e:06:ca:45:17:fb:e1:92:81:
                    ea:6c:65:12:88:f5:10:91:d2:78:09:7b:f0:52:5e:
                    91:17:c3:50:be:6b:4f:48:36:5c:ac:80:4c:bd:59:
                    8d:03:5e:f4:41:50:cb:e2:d8:aa:45:f9:42:c4:28:
                    c1:5c:77:96:c0:31:f3:60:51:7c:96:fa:a5:ca:72:
                    e6:94:ae:04:b2:54:31:d8:b9:72:7c:bc:2c:9f:74:
                    35:58:e7:bf:8e:7f:81:54:10:e2:69:a4:38:fb:b6:
                    aa:dc:03:4d:99:dd:d2:60:ca:32:a3:fc:17:d8:0a:
                    85:bc:ed:72:70:1c:dd:05:f3:f0:32:d9:d4:b3:4f:
                    56:61:c9:0e:73:95:c6:d6:49:b7:2a:74:34:e7:89:
                    39:ed:0b:06:55:13:38:b0:0f:1d:e4:23:f2:9e:04:
                    9c:ee:e7:9b:e1:86:b5:df:7b:d1:8b:16:dc:45:da:
                    29:c0:da:4b:7b:f6:03:35:ec:68:c5:94:fb:0c:f8:
                    6b:65:3a:14:0c:44:15:83:ae:4c:8a:e6:ef:9c:0c:
                    5e:ce:74:0c:d8:c5:da:53:e7:6a:20:f4:37:43:6b:
                    f7:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:44:D0:61:28:A7:B4:9D:6E:68:1E:6A:4B:38:2E:41:E8:27:91:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/81786838-45d1-3749-9a7b-65379675e7a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8c:a400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:88:f4:cb:c9:1b:a9:e2:2e:8e:e0:33:78:e7:e1:12:17:85:
         d7:f2:63:43:c8:60:04:2a:9c:94:a8:a8:ee:f6:01:a4:36:a8:
         42:14:3c:0f:13:f1:13:22:17:b9:14:4f:1d:8d:a0:b6:ef:27:
         69:47:d6:c4:92:92:82:69:0a:e7:4f:81:65:1f:69:2a:59:2b:
         00:5f:50:86:a7:e2:48:87:cb:b3:ff:52:71:f9:2c:fb:06:e6:
         ae:58:bd:09:97:4d:da:ba:f3:87:99:3b:12:76:48:de:04:17:
         23:70:5a:aa:b1:d0:c1:29:5f:be:43:a8:56:d4:e1:32:56:dc:
         2e:68:b1:53:96:9c:b0:e1:d1:27:39:af:f1:62:0b:9c:ba:d2:
         a4:d0:b6:ab:60:af:41:57:8d:25:89:e6:83:69:a2:20:49:2c:
         d6:18:b5:16:94:26:7b:31:8a:9a:c3:c9:cc:1e:ac:4a:a4:db:
         11:bd:40:47:b0:11:a6:2f:8b:3b:b3:1e:39:f9:40:68:f1:75:
         c5:fa:a1:01:96:6c:26:2a:b8:d0:63:63:02:3a:29:e0:a0:c8:
         52:7d:a7:46:47:b6:0c:0f:8f:2a:07:a3:7d:4a:42:27:5d:be:
         29:4b:6f:fc:02:60:50:e6:25:c6:68:62:eb:9b:18:30:90:a3:
         8d:c7:40:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 02:23:59 2026 by rpki-client