Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9d3d1013-c73b-3818-9ef1-9f6aed942344.roa
File:                     9d3d1013-c73b-3818-9ef1-9f6aed942344.roa (raw, json)
Hash identifier:          PFgNuMuDlDOg1zX2b2cYrUdW/omRwVx5gl/yjv5y3C0=
Subject key identifier:   1F:F1:EE:B3:D6:FC:5A:FB:18:35:AE:F7:15:D3:43:0E:75:F5:A2:6B
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584DC565C7E46472038DA2E20A00
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9d3d1013-c73b-3818-9ef1-9f6aed942344.roa
Signing time:             Sat 09 May 2026 01:00:25 +0000
ROA not before:           Sat 09 May 2026 01:00:25 +0000
ROA not after:            Fri 07 Aug 2026 01:00:25 +0000
asID:                     19905
IP address blocks:        2604:2e8d:9400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c5:65:c7:e4:64:72:03:8d:a2:e2:0a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: May  9 01:00:25 2026 GMT
            Not After : Aug  7 01:00:25 2026 GMT
        Subject: CN=18abb01c-bcf6-4558-8cc5-eae587c5ad77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:50:d8:7a:3d:21:c5:56:85:0a:37:83:2a:a5:
                    00:1c:8a:9f:eb:7f:ee:95:e1:bd:82:0e:55:82:86:
                    a5:9d:6e:36:2f:f6:ce:d5:bc:f7:47:15:ae:b1:c6:
                    71:f5:b3:e3:5b:f7:7b:67:ea:02:63:2d:72:18:9d:
                    79:82:ed:da:30:26:c8:32:53:66:eb:5b:b9:8e:c3:
                    bb:fe:a1:23:42:d3:3e:9e:c6:2f:b5:7b:64:51:4e:
                    4c:5a:d5:35:61:09:9e:41:cd:c8:60:8d:34:12:bb:
                    b9:a1:13:b0:55:7f:b6:50:b1:83:38:b1:d8:1f:0b:
                    2f:27:63:1c:e1:fb:8e:9a:b5:12:b3:87:d4:2e:98:
                    9e:20:ff:5a:ec:7f:a3:64:0e:ec:45:61:73:7f:52:
                    97:25:ae:a5:75:c5:cc:5f:07:84:90:d3:99:90:44:
                    28:67:f6:67:93:60:3a:78:83:34:a0:81:32:d7:31:
                    61:0f:bc:c0:83:50:36:12:22:79:f3:dd:40:92:e5:
                    1b:51:b6:1e:f9:85:db:b1:ba:ef:37:82:cb:17:1a:
                    90:ff:3c:8b:c8:10:62:a5:85:6e:2e:13:94:74:f0:
                    96:57:09:dd:f1:2f:6d:e3:3f:b4:4f:58:a3:b7:d8:
                    ae:3f:89:cd:10:9b:71:01:a0:8d:b0:6b:45:d0:35:
                    b8:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:F1:EE:B3:D6:FC:5A:FB:18:35:AE:F7:15:D3:43:0E:75:F5:A2:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9d3d1013-c73b-3818-9ef1-9f6aed942344.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8d:9400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:17:1f:bd:fb:22:69:91:f6:c4:f4:87:35:3c:56:8d:19:81:
         b9:c8:a8:f9:fd:fa:9e:95:c3:93:40:ee:c8:36:3d:43:e6:fe:
         a5:5b:0e:e5:8c:4b:4c:b7:d9:92:3d:dc:07:5b:dc:41:57:2f:
         4d:e7:66:aa:7c:38:06:19:10:4d:88:11:5a:ec:b5:93:a7:1e:
         c7:4d:0a:8d:80:e0:96:b5:08:05:ee:34:4e:f1:c1:3c:1f:cf:
         0b:0b:7d:68:32:86:31:1c:9c:70:1a:b7:73:b8:86:1e:75:52:
         54:4b:39:9a:08:49:59:cb:da:67:95:fc:c2:9d:20:1f:64:92:
         7d:de:05:be:5d:a1:6f:17:30:10:21:71:33:9c:30:86:11:00:
         63:c5:b8:b8:b2:17:ec:1e:28:3c:d2:79:1c:12:d4:44:64:10:
         a2:89:83:dc:c8:9e:44:27:4f:ea:9b:2b:fd:71:9e:a2:9f:18:
         35:3d:89:d4:68:6e:50:a2:54:1d:18:75:56:eb:07:0c:39:bd:
         55:ba:30:90:85:17:e6:0f:47:a5:85:a6:16:57:60:23:9a:0d:
         eb:3c:f4:79:6a:16:b7:0b:25:cf:53:2c:cd:30:52:b0:aa:e5:
         9f:2f:4b:ef:ce:96:ec:42:00:fd:cd:90:b8:6f:73:ca:41:41:
         1c:f6:bb:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:26:36 2026 by rpki-client