Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/eed366ce-53a2-35c4-8fcd-96ce9a013bc2.roa
File:                     eed366ce-53a2-35c4-8fcd-96ce9a013bc2.roa (raw, json)
Hash identifier:          LTe5MVCL8jkk+UIVPs2oPiaeRraNB6hb59L897hY3Kk=
Subject key identifier:   BD:A2:0A:B0:49:5A:6D:8C:8B:41:60:7A:27:47:F2:32:A1:C0:07:31
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584EBD0D969933B4A7A00E522900
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/eed366ce-53a2-35c4-8fcd-96ce9a013bc2.roa
Signing time:             Wed 05 Aug 2026 18:03:40 +0000
ROA not before:           Wed 05 Aug 2026 18:03:40 +0000
ROA not after:            Tue 03 Nov 2026 19:03:40 +0000
asID:                     19905
IP address blocks:        2604:2e88:8c00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bd:0d:96:99:33:b4:a7:a0:0e:52:29:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Aug  5 18:03:40 2026 GMT
            Not After : Nov  3 19:03:40 2026 GMT
        Subject: CN=9b5d2b29-dd05-4a63-be8e-f354f052c7a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:1c:d5:a2:f7:54:8f:b4:fb:52:0a:a0:e6:1d:
                    4e:8f:aa:b3:d2:8c:85:23:28:70:da:41:a9:db:ea:
                    3d:95:64:9f:3f:a1:2b:5a:fe:ab:d7:45:85:ca:34:
                    b6:a0:6e:a0:3b:4b:b0:3a:3e:5a:23:45:e9:f5:8d:
                    e7:b9:ae:f4:87:62:a1:cd:9c:e9:5a:1a:9c:c6:2d:
                    0b:ad:17:bf:d6:6e:be:c8:b3:f1:75:2c:8c:b7:94:
                    fe:b9:37:ce:b4:fe:d2:7d:2c:56:1c:74:0f:21:c6:
                    9a:b5:2d:d2:92:16:69:77:84:03:4f:25:f4:ce:4b:
                    22:ce:3c:73:c1:dc:40:ef:14:f6:4c:52:84:db:11:
                    45:11:bc:d9:c7:12:fd:95:7a:51:33:9a:44:78:db:
                    e5:a1:d8:2d:c4:00:ae:a2:3a:03:dc:81:26:c4:ce:
                    7e:1a:09:9d:1b:58:ef:23:b9:3a:e6:a2:1d:5b:b0:
                    24:d9:dc:3f:e6:66:7f:cd:0f:27:fe:12:a3:b9:2b:
                    87:aa:03:9f:82:4f:92:d0:ad:4b:57:59:d6:91:b8:
                    f9:61:4c:aa:ab:97:65:7a:49:94:4f:24:23:4d:f5:
                    75:24:5b:3c:54:ac:8e:40:95:c3:0c:c5:6c:3e:09:
                    10:fe:b4:31:b5:8c:f5:3f:77:ad:eb:89:8b:47:3c:
                    fb:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:A2:0A:B0:49:5A:6D:8C:8B:41:60:7A:27:47:F2:32:A1:C0:07:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/eed366ce-53a2-35c4-8fcd-96ce9a013bc2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e88:8c00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:db:bf:fa:4d:23:65:af:0a:c3:1a:4d:e9:e0:1a:f4:4d:76:
         a1:07:f4:ce:b7:41:35:eb:76:fe:9b:fc:7a:f5:69:aa:99:97:
         c0:93:37:5b:da:56:5f:6c:14:cf:c6:1a:c5:65:2f:2b:bd:62:
         a1:67:71:00:6e:cb:5b:02:42:25:b6:52:89:f7:87:57:bd:7a:
         22:29:26:87:8d:49:9a:7c:ba:d5:c3:79:b6:bf:20:11:f3:d5:
         90:98:5f:48:dc:90:1c:9d:f7:29:ea:2f:75:bd:1c:4e:0d:75:
         bb:e7:de:f4:ef:d8:1a:b4:d6:7a:42:5f:15:e3:53:64:a0:b9:
         f5:ac:fc:07:ff:6d:49:99:48:f7:34:94:e1:0a:38:08:bb:89:
         9b:e4:5e:a8:b4:30:d9:ae:54:45:95:3c:84:29:53:c5:97:db:
         04:00:f2:95:2a:0a:a2:48:30:10:df:72:84:e9:0c:5e:63:d7:
         71:69:ab:4d:24:9c:4b:4f:91:89:1d:5f:b3:d1:08:75:db:03:
         20:fe:e8:23:6b:bb:68:ef:1b:b9:1d:bb:03:4f:92:d1:86:55:
         5e:cb:88:55:08:5b:12:2f:d6:01:f0:e6:12:6a:2f:0c:e9:71:
         91:3b:b0:13:55:11:43:45:7a:e4:6b:83:4f:84:9f:f7:24:1d:
         af:25:00:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 02:24:12 2026 by rpki-client