Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/90e389a4-9893-39a5-a3df-77d391894c65.roa
File:                     90e389a4-9893-39a5-a3df-77d391894c65.roa (raw, json)
Hash identifier:          1m16XWxnAGeznIOJzr8iQ5qvqTH3kgQOUTaTuvAnp/4=
Subject key identifier:   37:EE:AE:D5:6C:86:14:2D:02:49:69:76:6A:8C:45:4A:90:A1:F6:B8
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584DC565C7B0E20B4658AC56C560
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/90e389a4-9893-39a5-a3df-77d391894c65.roa
Signing time:             Sat 09 May 2026 01:00:25 +0000
ROA not before:           Sat 09 May 2026 01:00:25 +0000
ROA not after:            Fri 07 Aug 2026 01:00:25 +0000
asID:                     19905
IP address blocks:        2604:2e8c:9400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c5:65:c7:b0:e2:0b:46:58:ac:56:c5:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: May  9 01:00:25 2026 GMT
            Not After : Aug  7 01:00:25 2026 GMT
        Subject: CN=b6111f57-dd90-4089-b7bb-e097e4c21ccf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a2:83:3e:fa:bc:a7:c4:87:cc:11:a2:59:d4:
                    48:a7:9d:d8:54:0d:45:73:7d:ac:97:f1:0a:3a:11:
                    3d:36:a5:38:12:58:9a:a9:6f:87:9b:06:27:43:3e:
                    55:02:d9:2e:1b:7f:8b:26:11:ca:68:b0:60:8a:f2:
                    fd:11:ce:d5:d9:96:a2:0f:6b:02:be:35:40:83:bf:
                    57:29:a8:c8:a0:8a:28:e9:ff:2c:74:a2:82:b0:29:
                    12:93:bb:cb:6d:b3:53:dd:af:cb:bb:bc:a8:a9:7d:
                    3d:99:91:96:7d:7e:77:07:54:f4:de:0a:c0:8c:9a:
                    c1:94:9d:52:57:81:d6:27:cb:db:c6:2c:e6:44:59:
                    a4:75:c6:e5:61:e1:49:07:e1:ff:7e:e3:54:2f:a8:
                    ad:b2:f7:32:76:3e:3a:c6:c7:71:ed:81:be:77:93:
                    bf:ae:fd:70:13:99:14:51:e4:0e:26:52:50:be:c4:
                    18:4b:76:6a:06:94:44:b3:4e:12:d7:bd:d1:23:2c:
                    a4:6e:98:94:06:94:62:c9:ce:04:af:f9:27:c8:f6:
                    32:23:b4:44:b7:b4:97:cf:c6:32:3c:54:9f:dc:ee:
                    c1:31:ea:d3:a0:8a:7b:11:07:0d:6e:db:cb:31:12:
                    8c:10:4a:bf:2f:4e:f2:84:f2:8f:b6:31:70:3c:61:
                    88:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:EE:AE:D5:6C:86:14:2D:02:49:69:76:6A:8C:45:4A:90:A1:F6:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/90e389a4-9893-39a5-a3df-77d391894c65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8c:9400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:0e:f5:92:5f:d7:cd:8c:59:50:1a:b7:bd:bc:ad:9d:e3:6e:
         32:73:15:3b:3a:67:7a:01:0e:1d:29:34:e9:9d:9d:d3:1b:a1:
         51:fe:83:49:be:29:20:59:48:64:af:4d:af:ff:0c:a9:12:be:
         11:5e:62:79:c3:65:ed:bf:9c:ab:fb:9e:28:a9:90:a8:02:fd:
         9c:e9:32:d0:4c:ff:e9:9a:73:be:0a:fd:0f:da:bb:c4:a9:fc:
         32:1f:48:c5:4f:8e:65:19:93:54:c4:66:35:d3:05:9e:7f:62:
         19:5b:f3:21:dc:d2:43:d7:6d:02:a7:21:ba:ec:c6:71:c1:ea:
         ef:66:2d:41:de:d9:d6:8a:5a:46:b7:fb:d5:5d:25:fb:75:77:
         9b:73:fb:3a:e9:bb:ce:0f:ed:10:1b:0d:5c:4e:6b:a9:f4:1f:
         8d:84:00:75:0d:67:ca:fc:37:1b:6f:93:02:a8:8c:d8:80:4a:
         2b:ad:70:17:f8:9c:e0:5d:3b:0c:a4:9d:a4:6a:6b:15:70:93:
         2f:4c:f5:01:69:ec:ae:35:03:c0:f5:fa:85:a3:ec:ce:5d:65:
         23:c9:24:83:76:a2:ca:7b:9e:c8:da:97:ad:d3:30:57:57:5f:
         0c:27:33:92:db:c4:f2:ae:8e:99:a9:1a:2b:c1:c1:5b:09:af:
         2c:0d:a3:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:15:34 2026 by rpki-client