Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f84508dc-7260-384b-a1ed-c78ac6ada580.roa
File:                     f84508dc-7260-384b-a1ed-c78ac6ada580.roa (raw, json)
Hash identifier:          Ef2slhVmo7iHsp4wzwtFzGct6Nm5ww4gUyykiem4GSM=
Subject key identifier:   C5:77:E2:08:C8:E6:92:89:59:01:B4:55:E5:57:7F:00:B2:6A:21:46
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584D8EF98F6B9C92CB5B6713EA00
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f84508dc-7260-384b-a1ed-c78ac6ada580.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     19905
IP address blocks:        2604:2e87:bc00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f9:8f:6b:9c:92:cb:5b:67:13:ea:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=b420537b-8cc5-410a-b8cd-a9d75f5ce9c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:28:05:4a:b8:b7:01:50:03:10:db:e3:b0:40:
                    14:a0:b4:06:21:da:f7:5d:53:60:45:b8:03:e1:39:
                    6e:e2:e1:af:23:29:aa:a5:31:40:85:0f:32:b4:f6:
                    a5:1b:67:35:8e:05:59:5c:33:05:41:96:04:98:d5:
                    25:de:89:c0:c4:fe:37:46:de:e5:45:49:1d:32:a8:
                    9f:bb:6a:cc:19:54:2e:57:ec:48:0b:0c:c7:d2:c0:
                    75:55:41:b1:0a:cf:77:79:57:29:d7:c9:e7:b1:e0:
                    d3:60:c5:0e:e3:e9:d8:60:7d:73:99:52:1d:da:29:
                    86:36:05:03:45:2d:19:17:5b:1b:31:10:86:5e:86:
                    2d:1c:15:86:90:1f:5a:da:49:d6:33:dc:58:d9:2c:
                    cc:23:a1:bc:ce:61:65:07:e5:87:56:24:5a:99:83:
                    fe:ee:a1:06:3b:58:fa:3b:e3:83:6a:dd:12:99:0f:
                    2e:ba:22:ad:52:3b:fb:bc:08:cc:aa:d4:f3:3e:d8:
                    12:5e:ad:41:49:62:a2:48:c4:bd:2e:c0:22:c9:7c:
                    8a:f5:5f:b7:7e:be:20:43:0c:1f:38:71:84:00:dd:
                    99:df:cf:e0:78:10:0a:b4:9d:75:6e:36:4e:40:87:
                    54:45:d0:b0:a3:55:f8:17:ee:29:30:9b:30:b5:71:
                    d8:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:77:E2:08:C8:E6:92:89:59:01:B4:55:E5:57:7F:00:B2:6A:21:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f84508dc-7260-384b-a1ed-c78ac6ada580.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e87:bc00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:4e:f2:de:24:a8:a5:9f:9b:4a:d8:b1:ef:d7:69:23:91:0e:
         dd:15:f2:c0:bd:43:56:10:2d:71:e7:c1:c5:6c:8b:61:41:61:
         6f:e3:a7:82:35:bb:02:34:68:26:11:e6:91:65:c3:1e:f7:38:
         68:7c:21:a9:24:85:77:58:52:72:d8:d6:37:22:03:97:68:77:
         22:72:e3:51:3c:ad:46:b2:a7:7d:ab:02:c4:bd:89:c6:ce:29:
         1a:b0:78:fd:29:cb:68:c6:37:4d:61:fc:6a:c3:6f:66:9f:48:
         35:2e:9d:54:4d:59:a5:6e:7c:e8:81:aa:9f:cb:31:2c:a2:36:
         68:dd:76:f4:41:b5:07:1b:05:c6:99:96:62:11:83:e3:9a:53:
         0e:8d:5c:6a:79:86:14:41:da:d5:c1:2f:02:c1:ef:e0:3a:b3:
         12:a5:49:5c:ef:9f:99:34:94:56:e5:77:ae:13:8e:9e:ff:cc:
         7e:40:f1:ac:dc:69:fe:26:5c:6d:d2:e9:0c:08:d5:b1:4e:61:
         7e:7c:96:6e:9f:dd:be:bd:ca:9d:f7:bd:f4:eb:ac:78:62:ed:
         9e:be:bd:38:3b:92:ab:c9:b2:95:aa:2d:08:b0:db:38:a8:f8:
         db:96:de:b4:11:65:89:a0:64:a3:2d:a0:5b:4c:39:69:cd:a9:
         20:4e:36:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 8 20:29:33 2026 by rpki-client