Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3ae2353b-3717-3b3a-8b8a-d18051fc8a99.roa
File:                     3ae2353b-3717-3b3a-8b8a-d18051fc8a99.roa (raw, json)
Hash identifier:          sw9BYPxl21EZRPRHJQV2duIpZ7e1xl6N+2a1YdqW0Po=
Subject key identifier:   D5:46:D2:0E:EC:5E:51:86:61:A0:9B:E7:1A:8E:50:67:74:17:8B:8E
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584E885A4394C48D9CC4549C5300
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3ae2353b-3717-3b3a-8b8a-d18051fc8a99.roa
Signing time:             Fri 17 Jul 2026 21:00:12 +0000
ROA not before:           Fri 17 Jul 2026 21:00:12 +0000
ROA not after:            Thu 15 Oct 2026 21:00:12 +0000
asID:                     19905
IP address blocks:        2604:2e8f:dc00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:88:5a:43:94:c4:8d:9c:c4:54:9c:53:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jul 17 21:00:12 2026 GMT
            Not After : Oct 15 21:00:12 2026 GMT
        Subject: CN=a69f2250-0b14-48a9-a950-e616f48b982f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:7b:85:7a:2c:5d:9e:90:9a:c9:58:0b:21:05:
                    04:bc:d7:da:83:19:f5:39:11:28:c0:42:e3:cd:bc:
                    8d:b3:a6:e6:52:e7:ea:11:81:e8:44:de:b2:f0:e9:
                    08:49:e4:a0:fa:fd:68:4d:2a:09:7a:60:d5:d0:5a:
                    dc:8a:f8:37:03:b3:b4:61:7d:2a:76:ca:94:fd:61:
                    a8:cc:92:25:2b:b3:1d:67:db:04:57:23:0b:8f:46:
                    00:73:b4:3f:7e:85:cf:c6:b2:5d:1a:3c:d5:c7:f5:
                    e6:dc:82:1a:fd:f6:c9:50:d2:49:3a:3b:ca:3d:42:
                    ef:d8:a5:d8:97:fc:9d:ba:79:28:04:6b:10:64:ba:
                    b0:5c:60:ea:b5:f1:f7:ab:29:f6:19:eb:90:78:1b:
                    89:18:2c:a5:36:d5:3d:8a:76:50:d4:71:bb:a0:18:
                    67:f2:f8:09:99:e7:58:18:67:77:c7:e6:97:29:f6:
                    34:75:c8:7a:60:35:9a:13:b4:f2:fe:48:93:c5:6d:
                    a1:a0:25:33:ef:0d:ab:6c:e5:6d:f0:10:78:20:f6:
                    4c:15:a9:b0:2f:7b:ec:5c:53:39:36:b3:28:ce:73:
                    5a:cd:9b:c3:b6:f3:83:d1:f9:3e:d4:21:f4:6b:ed:
                    df:ed:25:03:d6:77:92:c7:f1:b1:6c:c0:9d:8f:2e:
                    4f:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:46:D2:0E:EC:5E:51:86:61:A0:9B:E7:1A:8E:50:67:74:17:8B:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3ae2353b-3717-3b3a-8b8a-d18051fc8a99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8f:dc00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:84:2b:b3:1e:98:5d:2e:27:a1:0d:36:30:00:a6:f5:88:36:
         75:98:2a:fd:18:ef:8c:9c:0a:cc:0f:85:1c:c2:65:74:d8:58:
         f4:d6:c3:82:67:61:61:08:45:9d:d1:6a:c7:15:89:17:a5:01:
         e0:84:d0:56:41:a5:5a:21:00:b0:90:7a:ef:d0:44:7b:84:fb:
         66:35:10:9b:a0:b2:98:c8:e1:f3:13:6f:d6:b4:06:43:7e:7c:
         12:3a:1a:ba:fd:ff:c3:ed:f2:f4:b5:09:a7:8f:c0:d5:7a:c9:
         bb:eb:50:d2:0a:dd:bd:e7:e9:24:46:94:2b:37:64:8d:46:7f:
         df:b4:eb:5f:d4:40:96:84:e0:27:42:04:fb:53:c8:d9:6c:0b:
         c6:42:0f:fa:01:de:c8:df:65:27:e1:fc:1b:77:88:ec:a4:c0:
         d6:d0:7f:d0:27:87:8a:72:50:48:0b:b0:11:7a:1c:2e:ad:eb:
         53:41:a4:5f:25:86:0d:63:80:c4:64:29:25:03:b3:e1:84:f4:
         7f:3b:a5:7d:de:67:23:d2:16:64:c7:35:2f:6d:6a:9a:f7:12:
         9a:82:34:d5:7c:49:27:42:aa:ca:ae:fd:b7:15:62:23:54:42:
         83:4c:3a:01:f8:f1:3f:9f:e0:80:73:25:f1:e1:bd:37:76:5d:
         0e:b8:f5:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:44:18 2026 by rpki-client