Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1feb7c69-f045-3cb9-b7c6-56c959375c8f.roa
File:                     1feb7c69-f045-3cb9-b7c6-56c959375c8f.roa (raw, json)
Hash identifier:          O2zKVLKyFgauRlb8JRQT++PgHo7DQo96zfHxmUntqto=
Subject key identifier:   AB:ED:0F:91:2E:8F:A5:A2:B3:BA:43:92:87:33:D4:7C:43:D7:9B:66
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584DE6E5D515C20AE1FDF6357E80
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1feb7c69-f045-3cb9-b7c6-56c959375c8f.roa
Signing time:             Thu 21 May 2026 01:00:25 +0000
ROA not before:           Thu 21 May 2026 01:00:25 +0000
ROA not after:            Wed 19 Aug 2026 01:00:25 +0000
asID:                     19905
IP address blocks:        2604:2e8c:d000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e6:e5:d5:15:c2:0a:e1:fd:f6:35:7e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: May 21 01:00:25 2026 GMT
            Not After : Aug 19 01:00:25 2026 GMT
        Subject: CN=d3b90974-4693-45c8-8dcf-1c9e219ea27d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:4a:6a:d2:dc:e2:f8:db:7b:24:0a:bf:7d:49:
                    12:d8:46:f9:f3:ef:9e:65:0d:e0:f7:3d:99:8b:7b:
                    2c:68:bc:5b:73:7f:4f:c8:24:b0:e1:4a:81:18:ac:
                    ab:0a:8c:b0:22:47:ad:b8:03:e4:2f:5e:4e:af:21:
                    e5:1d:90:fa:c8:1a:69:bb:8b:aa:df:ee:d0:0d:27:
                    75:4f:6d:49:72:0b:6f:01:04:79:d9:98:ad:93:5e:
                    f1:3b:ac:07:a5:91:60:ca:5b:bc:3b:5e:56:d5:f1:
                    02:01:8e:6e:68:2e:28:d7:fc:d9:6d:1c:5c:a2:a1:
                    b9:04:fc:c5:06:a3:5f:bf:a9:fc:63:2e:b4:8a:38:
                    d5:2f:56:75:d5:8c:b3:12:3c:55:3d:c1:34:b1:77:
                    8b:30:94:23:45:23:94:5d:71:46:16:c2:f1:63:68:
                    59:53:60:0e:b5:55:b2:b2:c0:29:61:04:5d:56:44:
                    12:35:01:5b:b9:e9:53:9c:2e:4a:cd:2e:0c:fa:fd:
                    3b:0b:51:1e:66:14:6a:47:79:78:d3:03:62:e3:0a:
                    05:7e:e1:19:27:ad:41:94:b3:00:23:db:23:72:2c:
                    55:d2:a7:7c:73:ab:27:49:f6:d9:7a:c3:18:21:15:
                    11:1e:b7:fb:ad:4f:75:b3:ce:79:ad:09:d6:f2:e3:
                    af:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:ED:0F:91:2E:8F:A5:A2:B3:BA:43:92:87:33:D4:7C:43:D7:9B:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1feb7c69-f045-3cb9-b7c6-56c959375c8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8c:d000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:7b:79:eb:ff:80:a5:54:66:8c:68:79:8e:1b:64:3c:c3:0c:
         2b:ce:cd:f0:4c:43:dd:58:d7:d8:28:c6:b7:db:26:09:50:27:
         74:e8:64:f0:92:24:98:7e:36:58:2f:1c:c7:b9:b2:9c:2e:c5:
         76:bc:0a:0d:ca:3a:72:de:d1:99:ac:ea:f2:ac:dd:6e:08:59:
         1d:97:f9:de:68:ec:e4:d9:fd:18:82:a8:16:b7:f7:6f:0d:0d:
         08:9b:11:4b:bb:63:77:b5:df:d0:d7:1e:19:f4:94:8c:f8:99:
         0a:5b:d6:6e:09:82:37:4c:0f:02:27:4d:98:0f:32:f6:10:cd:
         71:a4:2d:9a:b6:d1:f8:8e:02:98:db:86:c6:06:22:9e:db:dd:
         0f:16:01:ec:19:a0:f9:d3:37:5a:4f:e6:9c:d8:65:0f:64:55:
         73:12:78:6d:c4:64:27:89:06:d9:d2:8e:41:0d:8c:1c:00:2c:
         8c:1b:f2:25:0d:16:53:98:1c:37:71:8e:56:ed:6b:cc:bd:7c:
         fd:1a:18:c2:63:ae:4a:01:ce:8c:f0:c7:2b:4b:52:de:9d:9a:
         72:a7:d1:d8:77:06:4b:6c:3c:8b:dd:fd:55:c2:62:da:86:51:
         c7:92:cb:2e:71:60:24:d2:bf:a7:7e:a3:17:00:ca:26:22:7f:
         61:a5:bd:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:37:46 2026 by rpki-client