Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bacf42f5-7dd1-355c-a59d-50c8e40c4a7b.roa
File:                     bacf42f5-7dd1-355c-a59d-50c8e40c4a7b.roa (raw, json)
Hash identifier:          tzr8mRx1gOLL/Ux8weu0iF7qVsiEA+bEvKpbPJw+a5g=
Subject key identifier:   2F:ED:40:CB:24:32:24:FC:7F:8F:5F:CE:A3:E2:86:06:73:D7:E3:F7
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584EA78794394A92AAC500F78700
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bacf42f5-7dd1-355c-a59d-50c8e40c4a7b.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     19905
IP address blocks:        2604:2e89:c00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:94:39:4a:92:aa:c5:00:f7:87:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=e07a2bf5-c961-4828-8daf-e11d3c1c5dcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:f4:cf:2f:29:12:1c:61:3a:52:e2:bd:a3:73:
                    28:08:2d:6c:fd:68:31:b5:27:3d:f5:de:d5:44:5e:
                    f7:f1:20:2f:f7:d5:5a:be:0b:4b:04:5e:25:26:8c:
                    a1:c0:27:46:4a:d3:a3:8a:4d:f6:0f:27:c8:0a:7c:
                    65:de:f7:98:e2:da:1c:41:5a:5c:34:33:81:84:ee:
                    78:f4:c8:04:93:bd:f2:2e:71:e9:34:54:db:7d:76:
                    ca:f3:ee:30:f3:3d:76:a3:06:51:3a:a2:7c:a5:56:
                    79:00:58:a4:2a:eb:85:bf:d6:d0:aa:b9:45:e4:41:
                    66:2e:52:d3:6d:7c:2d:7f:7a:2b:bf:fe:4c:08:e2:
                    fd:80:2a:bf:cf:2e:fb:d9:38:23:14:ce:25:d8:45:
                    d7:de:02:3d:c8:3d:95:9a:09:52:55:f7:a7:79:77:
                    62:34:21:e7:24:e9:2f:6d:72:3a:20:8e:c1:1b:11:
                    ef:5b:e6:57:3e:45:7c:db:34:ed:5b:07:9f:76:ce:
                    04:8b:5d:f3:3a:92:3b:34:d5:26:de:81:ca:ed:c7:
                    69:8f:2a:23:fb:3e:b4:e3:ce:5a:76:f0:4e:a5:50:
                    d1:09:3a:b1:17:81:72:39:f1:4f:04:4b:09:af:5e:
                    ea:69:69:d7:08:3b:f7:61:89:be:55:f5:07:b9:ca:
                    e1:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:ED:40:CB:24:32:24:FC:7F:8F:5F:CE:A3:E2:86:06:73:D7:E3:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bacf42f5-7dd1-355c-a59d-50c8e40c4a7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e89:c00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:36:f8:b2:51:f1:5b:3f:c9:54:b8:a7:f3:9d:49:c3:08:86:
         de:7a:f0:35:71:1a:05:6c:a2:9d:05:70:c1:82:e8:f6:cb:3a:
         95:70:f9:2b:d5:3e:9e:05:e9:dd:58:de:88:4d:a6:18:54:9f:
         a6:76:62:90:13:81:02:4e:29:6f:22:7a:74:15:47:f4:ed:bb:
         0d:f6:4d:10:39:e8:c9:1d:1e:04:04:50:69:39:c8:38:2a:1e:
         82:20:81:82:a8:78:17:66:cc:2d:fc:6b:ca:86:61:a9:3a:c2:
         26:cc:1e:0b:34:19:30:f7:ff:f6:0f:8b:9e:08:69:02:e3:69:
         b9:ed:c6:72:e2:f5:fc:27:0b:2f:dd:59:97:cf:d8:46:cd:96:
         5a:75:45:04:ea:25:ca:35:54:2a:a0:27:b4:fa:85:2f:c8:ef:
         6a:da:92:cd:88:35:29:95:e1:7b:73:50:80:0b:ff:a6:8e:9d:
         be:b5:9d:59:c7:34:5c:02:3d:25:d5:84:d0:bc:86:3c:83:3c:
         40:19:75:b8:a3:3d:82:08:c2:f6:8c:9b:1c:c0:b9:17:da:4f:
         26:b7:e9:f7:92:76:82:35:4f:eb:8f:3d:07:6d:09:28:df:b4:
         4d:68:76:bd:5d:f8:19:2f:9c:73:6e:bc:19:46:f0:11:60:33:
         4f:76:4a:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 03:07:34 2026 by rpki-client