Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ce5fff2a-c778-38ce-b390-5c47713de08f.roa
File:                     ce5fff2a-c778-38ce-b390-5c47713de08f.roa (raw, json)
Hash identifier:          mXoZOGDBHpAydhksquSPrdxNQ6DHWQSQLHXFY7DNOB8=
Subject key identifier:   0C:33:66:03:3A:FB:9F:36:D8:92:07:57:50:32:D7:76:1C:F5:C8:F2
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584EAF214B7BD0E1A3175A16EC00
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ce5fff2a-c778-38ce-b390-5c47713de08f.roa
Signing time:             Fri 31 Jul 2026 18:22:04 +0000
ROA not before:           Fri 31 Jul 2026 18:22:04 +0000
ROA not after:            Thu 29 Oct 2026 18:22:04 +0000
asID:                     19905
IP address blocks:        2604:2e86:4000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:af:21:4b:7b:d0:e1:a3:17:5a:16:ec:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jul 31 18:22:04 2026 GMT
            Not After : Oct 29 18:22:04 2026 GMT
        Subject: CN=bced8ac0-a0cb-4565-8528-8de00656c45d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:61:44:3c:29:fc:1c:9c:b2:ad:39:9b:e1:54:
                    3c:ea:46:2d:94:51:f6:66:f6:3b:90:36:96:f1:da:
                    ae:5c:5b:eb:c6:09:69:7d:06:a4:0b:ec:5e:0a:2d:
                    5a:47:7e:c2:23:b8:9e:ab:95:5d:50:0d:d6:64:9e:
                    76:81:30:d3:79:59:33:18:69:c1:67:a1:d9:f5:02:
                    11:e2:a8:52:01:24:48:cb:ec:ae:34:fd:53:ce:8d:
                    db:3e:fc:94:15:f5:2f:4e:bd:60:5a:2d:82:b5:6b:
                    79:82:e8:97:5d:03:ce:3a:34:da:4a:f2:57:10:59:
                    9d:06:70:cb:91:02:9c:0e:d0:72:53:5e:08:ad:f9:
                    05:f2:13:bd:5a:74:b2:77:43:b1:1c:b4:de:bc:e4:
                    1a:04:a0:26:7f:47:1d:91:c0:ce:cb:e2:26:47:99:
                    9d:bf:fe:3d:e1:a5:df:3c:2e:d3:39:d1:dd:b3:31:
                    09:11:73:5a:92:6f:c6:21:2f:89:dd:d3:c6:cf:c6:
                    ae:51:d9:9c:17:74:88:e6:65:e7:1d:c5:74:2c:13:
                    b0:66:a7:c8:ea:32:33:82:28:00:16:19:0c:e5:be:
                    2a:44:6b:45:71:be:d6:77:bf:95:4a:8c:d7:66:17:
                    1e:ac:bf:2d:8e:f5:4d:9e:39:52:73:56:41:54:14:
                    ae:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:33:66:03:3A:FB:9F:36:D8:92:07:57:50:32:D7:76:1C:F5:C8:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ce5fff2a-c778-38ce-b390-5c47713de08f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e86:4000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:bc:a1:ed:ca:56:86:49:17:48:de:30:28:0e:fa:d9:b9:04:
         4f:eb:f8:e8:a2:b7:06:2e:f4:bd:8b:e9:a7:55:48:94:0a:52:
         fd:e5:93:3b:17:cf:0a:9c:ec:d5:78:7c:09:3f:9b:22:c9:c2:
         2e:6b:dd:25:8e:8d:fd:c2:67:8c:37:5d:67:d0:df:49:b6:bf:
         47:b3:0b:0a:00:60:13:f2:8a:80:ce:d9:15:88:95:5c:38:6a:
         9c:ce:79:11:0a:33:d3:c9:ce:58:86:5b:23:47:88:46:0c:06:
         58:f2:14:b6:50:fc:d5:26:53:ba:e4:2e:ae:d7:6b:8e:f1:06:
         ed:d4:ac:a4:ae:44:b2:9e:ad:c1:f9:8e:2f:b5:a9:7f:dd:cf:
         0c:e1:da:41:55:ee:eb:2f:56:8d:ca:eb:b3:d5:c2:df:45:47:
         98:dc:0e:05:e2:a6:5e:bd:74:ee:16:83:2f:6b:a1:29:39:f7:
         c8:e6:ed:1a:9d:c4:f7:2d:43:99:94:55:8e:9f:ef:81:49:df:
         e9:30:5d:29:d7:b8:23:75:d0:ce:a6:06:07:d6:ce:f3:d1:fe:
         6f:2a:10:33:04:3e:77:b9:d4:17:b2:63:ab:c6:e1:16:36:c2:
         7e:02:6a:b0:0c:dd:da:fa:6a:f1:b5:e7:91:1d:16:a4:1b:fe:
         12:da:2f:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 02:24:06 2026 by rpki-client