Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0bd4290d-c847-371e-bc1e-cb5d0c866cee.roa
File:                     0bd4290d-c847-371e-bc1e-cb5d0c866cee.roa (raw, json)
Hash identifier:          0R+XrpyIHu038Sk9lEogV3j8B7MXJp/qAugTuZDT6DE=
Subject key identifier:   BE:20:03:A7:CB:06:2A:6D:A7:26:6A:C2:F2:45:94:A9:CD:5C:7D:90
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584E90BA5C572D6FD37788147680
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0bd4290d-c847-371e-bc1e-cb5d0c866cee.roa
Signing time:             Mon 20 Jul 2026 21:00:11 +0000
ROA not before:           Mon 20 Jul 2026 21:00:11 +0000
ROA not after:            Sun 18 Oct 2026 21:00:11 +0000
asID:                     19905
IP address blocks:        2604:2e89:1400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:90:ba:5c:57:2d:6f:d3:77:88:14:76:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jul 20 21:00:11 2026 GMT
            Not After : Oct 18 21:00:11 2026 GMT
        Subject: CN=9b53e194-89ff-4b6b-9bfb-fca28f710dcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:4c:84:87:a7:b1:64:9d:38:a9:7e:0c:65:80:
                    c5:ba:f6:f7:27:01:b0:91:44:11:88:19:1e:a0:6c:
                    c2:04:80:42:8f:84:06:50:23:30:80:0b:1b:02:a3:
                    c9:d9:d2:2a:e3:61:5e:1d:9b:08:64:32:23:17:92:
                    36:17:05:f9:d8:b3:28:21:90:60:04:0d:3e:77:db:
                    e9:55:5f:5f:76:73:13:7c:82:58:6a:51:b1:8e:ec:
                    70:47:bf:68:a3:eb:e5:6d:4f:7c:52:a6:01:55:81:
                    49:80:8d:02:2a:b4:14:49:aa:24:7f:0b:df:4d:a2:
                    3e:a8:42:68:9b:ce:2a:f3:d1:3e:eb:26:d7:18:db:
                    23:e5:ee:c5:60:31:51:41:2d:be:44:d7:05:8c:fd:
                    22:31:12:96:82:20:1b:82:a9:36:5e:22:5d:8d:83:
                    2d:40:5c:da:61:96:42:f5:0c:48:58:ae:28:19:9f:
                    d7:96:7a:b7:fe:c5:da:bc:b5:cb:fb:43:de:a0:a2:
                    0c:0a:e8:67:72:03:a9:48:f7:ca:83:4b:83:7b:e9:
                    9c:88:70:4c:1a:1e:2b:71:23:22:fa:d6:b1:76:ef:
                    f6:73:ac:df:65:7a:bb:eb:c6:37:48:e6:78:75:80:
                    c4:8c:ef:d9:12:0e:43:4d:eb:1f:fe:37:10:70:d5:
                    a9:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:20:03:A7:CB:06:2A:6D:A7:26:6A:C2:F2:45:94:A9:CD:5C:7D:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0bd4290d-c847-371e-bc1e-cb5d0c866cee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e89:1400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:4c:8e:57:b2:84:b5:b5:ec:ae:fd:26:c7:01:0e:27:90:35:
         98:10:2a:4f:98:ee:5d:79:f0:53:c2:4a:92:29:34:de:2f:2f:
         c6:32:49:1c:50:55:8c:c4:19:1d:74:7f:cf:53:6d:51:14:2e:
         b6:92:fe:8c:31:67:8c:72:d9:02:e0:46:c7:8c:5e:9d:0e:2c:
         b2:07:ae:72:b5:05:9a:8a:14:38:c7:ee:c8:66:4e:9f:af:36:
         28:40:4a:7a:3d:18:af:4e:2d:39:b5:9d:92:c9:12:73:4b:e1:
         80:93:62:85:fe:d0:e9:7b:da:76:fc:10:20:47:9f:4b:69:23:
         ce:f0:6a:bb:1a:ad:fd:46:1c:31:a4:97:17:e5:8b:f5:f9:58:
         71:f1:1a:97:13:17:b2:ea:89:3d:59:e3:64:c7:b8:ae:bb:ee:
         2e:8f:6c:60:6b:f3:61:35:87:88:a6:7a:4a:a5:e5:ce:3c:9c:
         cb:bb:5b:31:6f:7d:ce:e6:ba:70:53:ba:ca:55:06:09:32:26:
         e1:ee:1c:3c:65:38:78:77:4f:33:9f:e2:4d:5a:9a:2b:9e:ae:
         b0:31:87:e3:e6:2a:a2:c6:38:14:82:a8:49:50:bd:c6:c3:ca:
         ec:09:24:bc:1e:e8:9d:6b:c2:2c:39:d4:c4:90:89:09:b3:76:
         cc:ca:18:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:33:01 2026 by rpki-client