Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d36f26e3-28bb-345a-a480-efffd8bbd7ed.roa
File:                     d36f26e3-28bb-345a-a480-efffd8bbd7ed.roa (raw, json)
Hash identifier:          3kdMirk8yH90HMqXFET8F019wr/xB68CeRIuNsSz07o=
Subject key identifier:   C8:92:BC:9F:2F:E1:BF:AA:E4:C7:9E:59:45:80:86:6D:F2:6A:EC:C7
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584E90BA5D0A95472FDDE9226968
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d36f26e3-28bb-345a-a480-efffd8bbd7ed.roa
Signing time:             Mon 20 Jul 2026 21:00:11 +0000
ROA not before:           Mon 20 Jul 2026 21:00:11 +0000
ROA not after:            Sun 18 Oct 2026 21:00:11 +0000
asID:                     19905
IP address blocks:        2604:2e8e:b400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:90:ba:5d:0a:95:47:2f:dd:e9:22:69:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jul 20 21:00:11 2026 GMT
            Not After : Oct 18 21:00:11 2026 GMT
        Subject: CN=b09adbb6-eb9f-4560-9f2e-c2a757d57f7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:db:06:47:34:bd:2d:41:d0:17:d4:76:28:06:
                    e4:20:09:37:64:01:58:6c:b1:0a:d7:23:ee:d2:bb:
                    3e:5c:e9:83:52:e1:a0:78:d5:f5:5b:1d:70:be:b9:
                    eb:f1:99:92:a1:23:6a:d0:81:80:7f:56:c1:30:5b:
                    cc:d6:14:64:51:5a:db:12:a9:37:67:40:e8:f0:82:
                    8c:a0:6c:9f:77:54:a4:8f:7d:35:7d:05:9f:de:95:
                    34:e7:9c:38:d8:db:b5:db:aa:cb:dd:1f:5a:a8:4a:
                    e6:15:28:23:a1:7b:2d:c0:e4:a2:68:5a:c5:c7:e6:
                    f4:22:fa:f8:f7:20:6b:17:a0:91:74:b7:2f:5d:8b:
                    b9:01:f8:50:c8:10:48:93:fb:91:3f:21:91:f0:0e:
                    7b:05:e8:13:c0:c5:5e:53:1f:52:fe:50:8a:f5:1c:
                    08:97:00:d5:ea:05:78:ac:69:df:af:6a:84:d6:ab:
                    69:5f:89:d4:ad:0f:61:5d:ad:e8:9d:54:9d:74:88:
                    32:a1:d1:ae:c9:a3:a4:90:c2:7d:ff:43:dc:36:71:
                    69:ab:df:e2:3c:89:7c:fb:d0:7e:e9:ce:ee:83:cb:
                    7d:bc:96:2a:65:55:fc:a5:0c:b1:c7:c6:e3:cf:d3:
                    7b:37:ed:17:f6:4e:fc:79:4b:0b:1c:92:1a:65:f9:
                    07:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:92:BC:9F:2F:E1:BF:AA:E4:C7:9E:59:45:80:86:6D:F2:6A:EC:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d36f26e3-28bb-345a-a480-efffd8bbd7ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8e:b400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:66:c8:12:81:c0:81:67:16:ca:6d:bb:07:cc:cd:9d:8d:ae:
         78:ca:6e:7a:06:80:7a:15:ad:ad:6d:d0:54:05:94:63:d9:7e:
         94:7a:99:d7:55:2f:84:35:85:ba:12:55:62:87:3d:08:60:33:
         4f:08:fe:70:a6:d8:d1:65:7b:25:c5:04:5b:53:bb:4e:6a:d2:
         11:05:9f:cd:ad:b1:5f:e7:72:64:4c:fc:87:1f:a1:ca:d0:ac:
         33:7d:0f:22:62:24:69:ca:e2:3f:39:2b:fd:f3:82:90:0e:77:
         3c:a7:d4:97:ec:b9:76:16:3e:28:e2:1d:50:79:31:3b:16:13:
         f9:d4:f7:21:e8:c8:8a:48:47:76:69:a1:7d:28:4e:80:32:f7:
         87:fb:7f:f5:d3:01:bd:55:ee:5d:8b:4d:52:c3:87:82:12:2a:
         71:f0:4c:ee:2c:2e:4e:88:c4:2d:2a:23:97:90:eb:cf:f0:dd:
         76:04:89:1f:d5:28:33:cf:e4:eb:1c:8a:af:8b:46:01:cf:77:
         8f:4f:c2:70:0e:bd:e5:2d:f8:b2:62:0d:78:c3:e8:4c:3f:e4:
         b1:ef:e0:e7:d3:88:57:3c:d5:43:e8:4d:3f:b4:68:fc:db:17:
         ed:7e:c2:09:47:55:d3:03:ad:79:19:51:69:38:30:71:32:29:
         69:4e:79:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:22:19 2026 by rpki-client