Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f44a1aa9-3719-354d-92a6-35be5c7e5814.roa
File:                     f44a1aa9-3719-354d-92a6-35be5c7e5814.roa (raw, json)
Hash identifier:          tsQ/CnoDGUWBdOoAZh4oI3VRF7nd7kcukSuXP88jEzA=
Subject key identifier:   05:6C:90:08:D0:0F:66:44:79:B5:DE:EF:EA:9B:96:FD:9F:56:DE:AB
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584EA79BA6794F31A444A92F5200
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f44a1aa9-3719-354d-92a6-35be5c7e5814.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     19905
IP address blocks:        2604:2e8e:b000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9b:a6:79:4f:31:a4:44:a9:2f:52:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=ca30116c-298d-4cb4-a655-5f76351e0dff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:38:b7:43:c4:15:f0:74:28:69:0a:45:b5:63:
                    45:d7:72:ac:ca:b2:8e:3c:b8:b2:8b:eb:39:97:6b:
                    68:07:c8:b1:6d:82:8e:10:8f:f6:f3:78:29:06:97:
                    a1:30:7c:2f:4f:cc:b1:8b:46:34:9f:f3:a1:d3:47:
                    9b:1d:db:23:85:e4:f2:84:a5:e6:9d:bf:dc:94:4d:
                    d0:a2:7b:f5:bd:0a:a6:74:b7:6b:96:03:58:97:80:
                    f3:26:50:5c:00:87:72:d4:42:9e:91:0e:75:e7:2a:
                    89:fc:48:10:6a:71:e7:35:89:8f:a3:fe:02:50:f0:
                    16:a8:61:49:6a:0f:06:fe:4a:e2:5d:60:34:fd:2d:
                    c3:57:23:68:93:f8:1c:1e:6b:47:d1:39:e1:b1:a0:
                    c9:18:81:87:a1:30:be:0f:9b:79:dc:25:01:37:73:
                    d1:e5:17:c0:38:97:e9:7e:b2:57:7d:a3:35:07:e5:
                    36:f9:7c:16:a6:4d:ff:75:7d:7a:70:8e:7b:5a:e7:
                    31:f8:2e:ce:dc:a2:89:e7:f3:4a:7c:b9:7c:f3:3c:
                    13:75:35:e0:0c:a5:08:64:e4:89:26:70:c7:e2:44:
                    d2:87:e6:02:6d:af:5e:a8:81:cd:c3:64:fe:32:bf:
                    fe:62:d2:c4:d7:ad:7b:b6:34:60:20:c3:9c:b6:a4:
                    d9:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:6C:90:08:D0:0F:66:44:79:B5:DE:EF:EA:9B:96:FD:9F:56:DE:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f44a1aa9-3719-354d-92a6-35be5c7e5814.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8e:b000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:3a:97:35:87:b9:ed:1a:ce:d6:a6:1b:18:b3:a6:ad:59:a7:
         ae:1e:bd:d1:b8:4a:e4:c2:ae:32:c9:05:66:4a:69:82:ba:6c:
         a9:0a:41:a3:89:dc:35:8c:b9:1b:b3:b0:3a:0b:00:69:64:3f:
         3c:ab:2d:b5:22:a8:e3:66:5a:08:e2:63:e8:17:a0:90:90:10:
         46:41:df:19:33:77:a6:08:05:ba:0a:79:ce:13:99:8d:d2:f8:
         98:cf:02:eb:8b:06:a5:60:d6:e1:65:f5:1e:56:65:0b:d2:46:
         9c:4a:3f:52:cc:fa:5a:d8:b3:77:f1:4b:00:91:d0:d7:45:a3:
         5f:ca:54:52:3f:1a:38:07:60:d4:04:3d:b0:09:e0:cb:46:4a:
         f6:ae:80:26:15:59:c2:69:d1:b5:da:82:e6:26:c0:3a:0e:fc:
         74:a2:e0:c5:96:d7:d9:5c:43:04:76:48:9a:25:75:14:a6:f7:
         5f:b1:df:e6:63:8b:05:59:ab:63:0a:5b:ed:e6:0c:7b:06:6c:
         49:5b:fd:6f:b9:94:d8:1a:d9:e6:0c:d7:fb:0b:3e:44:ca:67:
         78:cc:f0:43:84:b7:ab:43:ef:af:cc:d2:db:b6:d2:43:42:55:
         80:f8:e4:d3:16:03:74:1e:4f:d0:54:a8:56:c9:4e:86:2e:4b:
         a8:c1:33:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 03:09:49 2026 by rpki-client