Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a35bc94e-c7f0-3dfe-ae86-72890e86f961.roa
File:                     a35bc94e-c7f0-3dfe-ae86-72890e86f961.roa (raw, json)
Hash identifier:          4tjY5PqlZsLowSV0bnymcUBuv+mG5HABEYs/eztQboc=
Subject key identifier:   B9:17:A8:FD:DA:34:53:40:E3:04:10:55:43:54:EB:B1:22:65:A3:73
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584EC7A1EAECBC43B7918DAF0B60
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a35bc94e-c7f0-3dfe-ae86-72890e86f961.roa
Signing time:             Sun 09 Aug 2026 13:00:12 +0000
ROA not before:           Sun 09 Aug 2026 13:00:12 +0000
ROA not after:            Sat 07 Nov 2026 14:00:12 +0000
asID:                     19905
IP address blocks:        2604:2e8f:e800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c7:a1:ea:ec:bc:43:b7:91:8d:af:0b:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Aug  9 13:00:12 2026 GMT
            Not After : Nov  7 14:00:12 2026 GMT
        Subject: CN=cf3aaaa4-076f-4e13-ba4f-3313bd464521
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:02:d3:48:30:72:f4:66:96:f6:f1:96:0b:70:
                    4b:e4:dd:52:8d:63:59:f4:56:cd:02:88:b9:9a:39:
                    ca:3a:22:0b:e0:c0:ab:7e:a9:a0:4c:20:6b:24:12:
                    26:dc:01:c6:e5:d1:c2:0e:55:3a:52:34:42:ca:26:
                    86:b7:fd:bb:39:b7:d4:68:af:5f:a1:57:a3:f8:54:
                    4d:55:82:c3:1a:80:1f:eb:6f:a4:d3:26:ef:cf:1f:
                    78:f8:43:4a:0e:6b:55:1a:b7:a6:c5:fa:d3:3a:89:
                    6e:21:f9:8e:dc:f1:7a:25:9c:3b:ad:8d:c0:c6:d1:
                    1a:3f:37:9d:20:ce:e0:bd:33:e4:4b:82:b0:1f:30:
                    d8:c4:65:ee:25:00:49:3d:d4:c6:2f:76:25:62:cf:
                    00:0f:9f:ce:ed:92:62:26:9b:9a:7c:ef:95:07:1d:
                    7f:20:4e:10:18:fc:f3:3e:3b:0e:f4:4d:ac:3e:0d:
                    19:38:8b:9d:c5:48:52:d3:de:e5:68:48:8f:3c:e3:
                    94:d8:f2:47:a3:79:0c:ef:1e:a8:8e:95:de:bc:42:
                    77:6d:44:e9:c2:12:a6:47:6e:9e:a2:f0:6d:69:be:
                    48:2d:fc:42:c3:92:e9:ae:e7:ed:75:29:02:56:ba:
                    d0:72:04:8a:7c:f4:c8:dc:b5:c6:82:3a:59:42:aa:
                    52:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:17:A8:FD:DA:34:53:40:E3:04:10:55:43:54:EB:B1:22:65:A3:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a35bc94e-c7f0-3dfe-ae86-72890e86f961.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8f:e800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:19:41:fc:d4:8e:f9:78:a7:1b:16:da:f0:83:55:b7:27:2d:
         fb:f7:28:27:b7:fe:50:1c:48:56:1b:7f:15:b7:d8:ad:b1:88:
         10:89:f4:3c:6f:c9:73:96:a1:c5:d3:df:d8:40:03:6a:ef:23:
         56:8c:4f:8c:95:98:72:5b:c8:8f:10:00:43:92:47:fd:fd:c8:
         5b:f3:a9:7e:40:b7:48:a5:a5:96:73:ee:f2:33:f4:b3:8b:79:
         0d:54:e9:ff:f1:31:5f:f1:59:68:7a:2a:a5:0d:56:3a:61:ba:
         e3:84:ae:79:07:6b:8e:ac:d5:c2:80:7c:ab:7b:73:71:70:27:
         d2:41:a6:41:c2:59:76:12:68:1f:61:aa:88:6d:9c:59:80:b3:
         0c:0e:4f:2d:1c:97:51:6e:b5:82:cc:db:cc:5a:d9:72:d8:8b:
         09:6b:ac:92:74:40:f0:13:93:5f:3e:94:e8:3e:c3:9c:5d:9a:
         1d:e8:59:06:64:57:a8:58:73:33:76:0a:e3:d9:f7:2b:0b:dd:
         71:94:ba:ab:17:69:84:b7:c2:37:cf:16:e8:ec:c0:21:0f:54:
         94:23:ea:51:17:a1:5c:6d:6c:22:31:04:f2:8b:35:c0:d4:5d:
         b5:fd:39:87:e1:cf:c3:38:4e:70:c2:70:35:74:ed:f4:96:3f:
         cb:1e:ee:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 02:27:46 2026 by rpki-client