Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/00c58ad7-2853-3868-bc67-8becb647013d.roa
File:                     00c58ad7-2853-3868-bc67-8becb647013d.roa (raw, json)
Hash identifier:          Xxet+lsbOqMr8g/gLH7kr8wBavatdkyc1bkJmNR8sqM=
Subject key identifier:   DC:CF:37:7D:2E:4E:86:D2:EF:CD:A7:0E:F0:CE:E2:D4:DC:53:96:45
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584DE6E5CA6B32F2C3E5C5348080
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/00c58ad7-2853-3868-bc67-8becb647013d.roa
Signing time:             Thu 21 May 2026 01:00:25 +0000
ROA not before:           Thu 21 May 2026 01:00:25 +0000
ROA not after:            Wed 19 Aug 2026 01:00:25 +0000
asID:                     19905
IP address blocks:        2604:2e88:4000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e6:e5:ca:6b:32:f2:c3:e5:c5:34:80:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: May 21 01:00:25 2026 GMT
            Not After : Aug 19 01:00:25 2026 GMT
        Subject: CN=77044c85-9d0d-4bcc-a8e3-a71a9db64537
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:71:f4:08:fe:82:12:f7:b0:28:9f:29:d9:ec:
                    64:01:69:9f:81:5d:ce:9f:0f:2e:6f:04:e4:a3:67:
                    f7:70:aa:06:06:40:a7:88:ef:74:13:94:04:34:3a:
                    c3:ab:f4:c5:fc:1a:56:4b:37:45:9c:7c:eb:83:99:
                    92:2b:fd:51:81:82:d8:40:dc:0d:8f:73:ac:74:f7:
                    39:75:08:be:48:bb:f9:09:52:db:51:7f:fd:e9:5c:
                    53:f3:60:37:9f:ec:2a:9b:6a:cc:70:35:39:74:48:
                    50:22:7c:2f:f7:29:86:b5:06:f3:b7:74:af:dd:a2:
                    18:30:de:69:6e:dd:cc:05:ff:77:09:bf:db:fc:6e:
                    53:b0:98:d3:79:28:cc:60:cc:dd:f2:e6:2b:bf:08:
                    2c:85:4f:90:ee:9d:8a:d1:47:4d:ab:ab:11:c1:b9:
                    85:60:a7:8c:37:de:31:31:55:84:05:d0:85:5e:1f:
                    4c:06:63:63:b9:45:dd:84:b3:4a:1b:97:a0:95:7e:
                    ef:84:d6:0e:78:0f:c3:db:81:2a:74:9a:d9:11:d4:
                    cb:55:e5:6c:46:da:99:51:08:99:87:02:6a:e5:c2:
                    8a:b8:ed:6a:0a:23:72:3d:1c:4d:41:52:70:a8:80:
                    4c:fb:cd:0a:4e:7e:fd:89:21:1d:21:1b:bb:73:17:
                    68:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:CF:37:7D:2E:4E:86:D2:EF:CD:A7:0E:F0:CE:E2:D4:DC:53:96:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/00c58ad7-2853-3868-bc67-8becb647013d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e88:4000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:42:0b:b5:a3:67:60:5e:ad:da:29:ee:98:57:54:10:49:15:
         9b:1d:92:4e:90:57:cd:39:ad:81:31:c9:54:db:d6:03:29:7e:
         89:6a:fc:a6:8f:92:66:b0:8f:7d:52:22:96:7c:59:32:e2:ef:
         2a:a8:23:f6:e4:c8:cd:8f:46:11:9c:f5:71:bc:06:2d:bb:2e:
         aa:96:37:fe:86:7c:04:fe:ac:bb:c4:92:86:55:29:ec:e3:40:
         41:df:c1:a8:bc:38:8f:5f:2c:4d:7d:44:84:86:d7:3d:86:05:
         2c:0f:16:bc:d5:73:56:63:41:91:00:e6:74:78:08:6a:98:12:
         6d:4a:44:87:57:f6:50:cb:f5:d6:6d:86:90:89:e5:ef:b6:21:
         45:1d:ae:68:13:c0:b2:71:3f:9b:b5:a6:a2:35:06:ea:c6:07:
         6f:a0:f4:d0:d0:14:d0:45:1e:24:81:94:8b:a4:5d:0b:52:9e:
         50:95:62:4e:ec:33:f8:d1:69:17:51:0e:96:6f:e5:ce:04:a5:
         59:7e:71:6f:11:36:40:40:c4:bd:91:17:1a:67:fc:93:29:3f:
         70:1f:b4:9f:6e:de:f7:86:ac:2b:79:b0:f7:84:63:33:06:9a:
         a7:b2:98:c7:8f:ba:7e:b8:c6:c1:35:40:d1:90:8d:9c:75:61:
         c4:c5:2e:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:41:15 2026 by rpki-client