Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b648d3d8-1b7f-3cdb-ba66-c8def564248b.roa
File:                     b648d3d8-1b7f-3cdb-ba66-c8def564248b.roa (raw, json)
Hash identifier:          cqSfEQSSSvJW0Z/Ffot2bM8t3QX7sUoa6nFw6SFeY4A=
Subject key identifier:   6A:ED:A0:5C:7B:AA:0E:D2:AA:74:44:BB:81:3F:02:F7:B7:BF:A6:BE
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584EA79B4F41C0237A49E2BCB728
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b648d3d8-1b7f-3cdb-ba66-c8def564248b.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     19905
IP address blocks:        2604:2e8e:a400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9b:4f:41:c0:23:7a:49:e2:bc:b7:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=51087db4-0ab1-4b5c-8d7e-de3907f8f090
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:14:98:4f:db:22:be:6c:c1:33:71:d9:d2:ea:
                    47:c4:bc:ed:12:0a:a5:d8:b5:5d:be:36:02:4e:09:
                    58:36:91:ce:59:c8:28:e5:15:5e:95:db:cf:05:b5:
                    54:75:80:4b:c6:61:fb:86:7c:ac:3c:a1:16:98:58:
                    c7:c9:a8:17:76:fd:12:b5:29:62:b3:93:c6:73:ee:
                    d2:55:68:8b:e5:b7:2f:c6:71:a7:2a:97:0a:70:1a:
                    7e:79:51:55:16:d6:85:f6:d2:77:f1:9b:a8:8e:c1:
                    9f:7c:9f:b3:64:65:ba:6a:12:e1:e9:1f:49:92:59:
                    76:34:09:c5:99:81:f9:c7:36:e7:f4:7b:97:e6:a2:
                    43:56:b7:39:d5:c3:29:cc:6a:c8:d5:a3:b0:f6:bc:
                    68:ef:1d:5d:8c:41:07:de:f4:7a:87:ab:59:f8:27:
                    70:ad:7b:6f:18:25:b5:7c:03:c0:77:10:19:da:13:
                    28:09:56:36:45:93:11:ba:48:12:ad:1f:ce:1e:b5:
                    0e:37:c7:89:bf:cd:44:20:6f:90:0b:3c:ea:c4:12:
                    54:d3:ed:30:7c:73:99:14:d2:4c:f1:b4:09:27:63:
                    cb:aa:ed:23:78:11:64:79:84:df:77:e3:cd:43:42:
                    2d:18:22:7b:a6:ac:28:0f:b2:25:88:94:61:c6:db:
                    ef:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:ED:A0:5C:7B:AA:0E:D2:AA:74:44:BB:81:3F:02:F7:B7:BF:A6:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b648d3d8-1b7f-3cdb-ba66-c8def564248b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8e:a400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:8a:95:f5:d2:1d:22:28:74:58:13:67:92:77:87:5b:af:91:
         0d:8f:9b:50:a2:33:ef:05:70:68:3f:44:be:67:d9:7e:c1:0e:
         07:50:59:7d:ea:6b:f5:c2:a4:4a:5e:ac:06:c9:3d:7c:52:f9:
         81:d7:69:7a:a9:57:c3:50:47:82:81:fc:88:63:49:fb:d1:32:
         08:b8:33:25:aa:8b:33:4f:b0:30:4c:76:0c:fd:2d:80:b2:88:
         0e:a6:28:a7:8a:6b:80:87:d7:2a:e7:f7:63:00:0d:a0:05:52:
         e0:44:82:70:47:38:7b:ad:fc:77:3a:d0:f0:38:7c:41:2b:28:
         1d:4e:52:38:cf:b0:f6:e5:1e:6a:97:a6:1c:f3:ad:24:c2:2e:
         bf:5b:2d:b3:c7:06:bb:0e:3a:a0:9a:db:e5:d4:54:d0:36:25:
         fd:d8:d3:2a:15:81:ec:df:0e:3b:c9:3d:dd:3f:51:d1:bd:eb:
         0b:d7:7b:24:b6:3b:31:db:9f:19:62:44:32:f2:a8:13:51:ab:
         27:86:59:02:5f:ec:0b:db:2b:db:e3:5a:aa:7d:6e:f8:c2:af:
         25:af:6d:92:32:1b:1c:f8:60:30:c0:89:34:1d:43:7c:cd:11:
         c5:79:b6:bd:01:c3:63:b2:71:b9:09:03:00:1f:9c:af:b7:65:
         6d:89:20:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 03:07:33 2026 by rpki-client