Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c8f7d160-7e33-3291-a410-902ea10b47b7.roa
File:                     c8f7d160-7e33-3291-a410-902ea10b47b7.roa (raw, json)
Hash identifier:          pwEqPR1+winCfhp7qe5RbmBp+QQCXxzLiWA97/uT6Yk=
Subject key identifier:   63:38:02:A5:6A:C9:9B:59:3A:8B:1D:C9:1C:05:C0:B8:0B:98:8D:65
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584EA5AA94047BA6C61806FE3C00
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c8f7d160-7e33-3291-a410-902ea10b47b7.roa
Signing time:             Tue 28 Jul 2026 09:00:11 +0000
ROA not before:           Tue 28 Jul 2026 09:00:11 +0000
ROA not after:            Mon 26 Oct 2026 09:00:11 +0000
asID:                     19905
IP address blocks:        2604:2e8c:8c00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a5:aa:94:04:7b:a6:c6:18:06:fe:3c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jul 28 09:00:11 2026 GMT
            Not After : Oct 26 09:00:11 2026 GMT
        Subject: CN=3262cf94-6a5f-44fc-b052-f5b5d38e75d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:8b:78:71:ea:fc:50:49:88:48:dc:44:86:07:
                    51:69:d8:6a:0b:b0:1d:fc:c7:e1:53:64:56:e6:11:
                    cf:bc:33:45:2a:6d:02:61:37:ab:ab:ad:16:19:c2:
                    f9:80:31:e6:c2:40:59:53:ec:b2:22:68:53:93:8c:
                    33:1b:79:cf:52:0c:f1:ed:a1:24:4c:0d:a0:3a:5e:
                    46:60:6f:cf:e4:e2:52:56:4f:84:21:36:13:8f:e8:
                    a8:f4:be:f9:8b:df:7d:f4:b1:a2:cc:d7:60:49:b7:
                    53:45:d4:33:e4:67:54:48:b3:26:7d:ca:66:42:72:
                    79:7f:7e:66:6f:06:f1:ed:24:1b:8d:db:02:9c:a2:
                    88:6a:04:25:6b:09:ff:81:3f:e6:ca:26:a2:d0:3d:
                    51:65:0f:99:e1:f3:b1:28:9a:12:ba:00:67:e7:e9:
                    9c:b1:ec:15:76:1d:2d:ca:17:53:2d:7a:aa:31:0c:
                    48:ec:77:fb:e4:64:d0:e5:ed:4c:8f:0e:9f:99:fa:
                    50:15:a2:06:74:f3:eb:81:3c:dc:3e:4a:21:0c:5f:
                    3c:3f:0d:37:90:a1:dc:9b:5d:48:eb:67:b8:5a:b9:
                    22:af:a7:73:a2:a4:54:d5:c9:e7:e1:22:fc:90:80:
                    cf:85:72:e0:59:ba:be:a4:83:33:ca:5d:39:ce:cb:
                    b0:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:38:02:A5:6A:C9:9B:59:3A:8B:1D:C9:1C:05:C0:B8:0B:98:8D:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c8f7d160-7e33-3291-a410-902ea10b47b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8c:8c00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:0d:ec:ba:87:62:93:64:5a:4b:02:fe:27:92:ca:4d:9a:fa:
         79:79:9a:b0:27:2e:f1:5b:89:c4:f1:94:eb:34:b6:48:75:95:
         49:36:09:fa:f2:a0:53:71:16:27:b7:c1:47:67:34:b8:40:cd:
         55:15:aa:f3:f1:26:9d:65:36:6d:53:13:05:84:e6:24:db:54:
         e5:aa:87:23:e0:6b:0b:11:e8:cc:e1:94:ca:15:b4:2b:61:2a:
         8d:be:12:5f:f9:03:29:dd:14:ed:c1:8c:98:f1:08:49:c3:85:
         26:ca:fe:4a:45:02:e9:68:7c:af:a7:7b:98:ba:99:09:32:fc:
         f3:fa:31:42:14:f5:74:51:fc:cb:da:fd:4d:6e:ec:b7:a2:31:
         78:97:57:82:82:20:7e:df:51:86:16:82:f4:b0:5f:df:10:2e:
         b8:e5:1f:5f:fa:ce:7d:8d:a3:eb:fc:71:bd:3a:b2:98:2b:7a:
         7b:34:54:61:b1:63:15:11:62:c8:7b:4b:b3:63:f4:4e:7b:e7:
         65:c5:cc:6b:98:73:5f:d0:69:c9:62:4a:fc:00:50:66:e1:75:
         b7:17:76:5f:72:0a:e3:3e:e7:78:bd:36:a0:59:71:57:54:4a:
         13:3a:db:7d:53:46:e2:89:83:68:47:f8:1a:77:ba:d2:c4:f1:
         31:a2:c4:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 02:27:50 2026 by rpki-client