Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b8aafe36-bbe9-3446-8fc4-fed5703bc0ed.roa
File:                     b8aafe36-bbe9-3446-8fc4-fed5703bc0ed.roa (raw, json)
Hash identifier:          NBUc2KuvMQLAPkFv/0CbhoVyQuBxG9slVjnzswXKgR4=
Subject key identifier:   F3:0D:E5:67:E9:7C:C5:9B:EA:B4:74:58:2B:E8:55:D6:64:1C:A8:F1
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584DCDC5D720F2FDCDDCAE97D2E0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b8aafe36-bbe9-3446-8fc4-fed5703bc0ed.roa
Signing time:             Tue 12 May 2026 01:00:24 +0000
ROA not before:           Tue 12 May 2026 01:00:24 +0000
ROA not after:            Mon 10 Aug 2026 01:00:24 +0000
asID:                     19905
IP address blocks:        2604:2e8c:d800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cd:c5:d7:20:f2:fd:cd:dc:ae:97:d2:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: May 12 01:00:24 2026 GMT
            Not After : Aug 10 01:00:24 2026 GMT
        Subject: CN=efd26774-b03c-4f17-a00b-8c7d4f59c26e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:b9:ba:53:6b:82:b3:9e:81:74:75:fa:9b:c1:
                    ca:65:a9:c9:3a:69:51:93:d0:83:71:ae:f9:a7:ec:
                    f9:77:f9:a8:29:88:70:48:90:c8:5e:19:b0:82:1b:
                    74:e4:aa:26:26:b5:8c:2c:3e:ae:3c:9f:7e:0a:50:
                    4c:95:33:85:d2:04:46:fd:9e:ba:24:c3:6b:c2:fe:
                    1a:62:5b:25:73:cb:e9:bd:40:13:c5:38:a1:b6:68:
                    0e:ee:a0:26:6a:24:e9:60:41:2a:46:8f:ce:59:f4:
                    42:89:4f:ea:3a:5e:41:72:39:20:07:1a:c4:08:66:
                    07:4c:b8:a1:59:20:c4:8e:f0:4d:8a:a0:53:94:e2:
                    0b:a5:01:3f:22:51:8f:f7:b8:9f:3a:4b:d5:0d:ba:
                    f1:81:ee:87:ed:13:07:f8:fa:2d:7a:e2:c8:cf:08:
                    50:26:48:a5:ba:d4:83:8c:74:02:c5:9a:af:49:30:
                    78:46:4e:a3:a5:e1:8e:0d:0d:3f:49:51:3e:2a:1b:
                    02:fb:c0:ef:a7:5b:c4:0e:1c:74:bb:5b:7b:b5:a2:
                    fc:e1:02:99:51:43:6f:1d:c9:51:26:00:3b:dc:7a:
                    ae:f0:a1:da:47:65:cd:12:8f:39:80:52:75:5e:af:
                    7a:08:16:9b:ed:ff:d7:98:b9:37:4d:56:f5:76:c5:
                    42:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:0D:E5:67:E9:7C:C5:9B:EA:B4:74:58:2B:E8:55:D6:64:1C:A8:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b8aafe36-bbe9-3446-8fc4-fed5703bc0ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8c:d800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:90:83:64:66:f7:ab:84:29:e6:e5:96:e0:ca:79:e5:7e:d2:
         f6:f4:25:f6:1a:fb:dc:16:09:93:02:28:f8:c4:d7:bd:8f:14:
         a0:1e:96:75:4c:ea:f0:7a:30:90:1c:1c:82:8d:de:3b:10:35:
         42:fc:2d:86:4d:5a:19:ec:35:75:f9:11:22:8f:74:bf:da:d7:
         4a:6e:70:49:a7:c9:9e:e4:ae:20:e7:06:29:dc:c9:26:dc:38:
         0b:3a:64:52:1f:1d:02:c4:20:fa:0c:ed:af:d7:72:02:44:d4:
         c6:51:12:2d:01:67:76:4a:8e:5f:12:77:fb:97:ca:07:66:39:
         16:da:b1:29:b1:08:e6:0c:01:f7:ca:f5:41:1e:b5:16:96:e2:
         82:d4:9d:7d:96:6b:85:fb:e4:91:5f:95:08:f0:89:d0:01:e2:
         fc:88:83:97:fb:95:96:9c:23:f6:b7:79:02:75:84:17:16:0a:
         21:e4:1a:88:b5:2e:99:e1:77:86:ff:89:ca:27:f3:c4:a0:10:
         c0:34:d6:b7:37:75:7b:3f:77:b0:3c:f1:2c:d0:73:54:98:c3:
         a8:2e:1f:41:c7:0d:b3:62:c3:38:ea:43:69:ed:49:1d:bb:05:
         e3:e8:a4:0a:98:93:cc:3b:77:0b:16:5a:09:8a:61:74:0c:1c:
         d4:55:81:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:20:34 2026 by rpki-client