Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/48377c84-82f5-3ce0-a5da-9cb6754efd26.roa
File:                     48377c84-82f5-3ce0-a5da-9cb6754efd26.roa (raw, json)
Hash identifier:          Wrl/xVN4WW25H6zoPwcbXj4K53PgGaOP5vlrhWca+c8=
Subject key identifier:   0B:E9:F8:26:54:7A:17:4B:E6:39:E3:E7:18:FA:22:17:9B:77:E5:BD
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584EA795BCCCEECBCA629378D000
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/48377c84-82f5-3ce0-a5da-9cb6754efd26.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     19905
IP address blocks:        2604:2e8e:7400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:95:bc:cc:ee:cb:ca:62:93:78:d0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=3e90e6ca-2d59-4ca0-81c8-81478b00a3f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:3b:ae:ad:98:dd:a7:7c:93:e2:82:a9:f7:a5:
                    7f:1d:8f:ce:25:02:65:9b:14:14:40:76:2c:3b:76:
                    44:d4:ed:eb:09:8a:62:71:4b:10:2e:27:e2:12:65:
                    13:f5:e4:33:8d:bb:c5:82:1d:82:ab:c4:4e:41:63:
                    f2:8c:5d:3d:85:01:cc:6a:e3:90:30:8a:02:08:f0:
                    1b:8d:10:63:98:ae:96:37:05:42:2b:36:7d:d0:f0:
                    7d:43:cb:ee:44:fc:d9:ed:8b:bf:d8:ba:af:48:8a:
                    e1:ff:c5:02:c0:51:20:23:77:4d:1b:b9:d4:5e:5d:
                    64:07:e3:68:bf:e1:4c:02:63:a2:ba:65:a1:21:5d:
                    c4:14:3c:50:d9:86:33:8a:98:1a:73:30:2c:7b:36:
                    ae:cc:c4:91:e4:a7:e9:e3:e0:d7:e0:1b:18:5c:27:
                    0f:02:8c:63:57:a5:d4:0d:50:2d:ca:f3:6d:91:ed:
                    ec:33:45:35:87:f8:c7:38:35:7e:ab:b6:fd:14:f2:
                    41:97:c6:01:00:e6:ed:11:42:3e:0a:b1:b9:b2:37:
                    61:69:50:0b:9b:e5:8f:84:e6:1d:66:06:72:a1:52:
                    1f:fd:d6:69:dd:bc:cb:14:e2:05:cb:5d:05:19:f3:
                    d4:ff:4b:a4:9b:c7:d5:b3:51:54:14:ea:d8:68:51:
                    0c:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:E9:F8:26:54:7A:17:4B:E6:39:E3:E7:18:FA:22:17:9B:77:E5:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/48377c84-82f5-3ce0-a5da-9cb6754efd26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8e:7400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:a2:d6:d8:69:40:48:75:50:04:62:70:cb:66:d6:36:f8:2c:
         a9:e9:18:bc:83:d0:e6:21:23:77:ea:cf:d2:24:3d:56:61:85:
         b9:e9:5f:a1:75:96:2f:c6:4f:9b:74:a2:eb:f6:0b:ca:68:2b:
         4b:f2:29:09:eb:da:e0:c1:7d:14:2d:b8:9a:7a:f5:8f:97:f9:
         25:b8:bd:3b:1f:48:f9:65:99:db:f7:15:e4:23:ba:48:c8:75:
         94:c6:f0:02:25:f2:0a:22:81:4f:d1:c4:b4:23:48:35:b2:d5:
         05:a9:4c:5b:31:d6:5a:31:b2:9c:60:cf:d3:a1:88:d0:da:90:
         ab:f2:8a:fe:a7:5d:f3:62:6b:7f:31:59:a3:91:dc:55:a6:81:
         f5:3c:8c:47:be:1c:ee:55:c2:07:85:30:5f:b4:1b:24:49:36:
         4c:c0:83:b0:32:60:df:aa:5f:8a:23:ee:d3:9b:b5:e8:e9:1e:
         fb:13:5a:e9:72:4e:8e:07:07:50:be:cf:1f:39:75:09:34:f2:
         9a:d1:0d:7c:7c:a0:44:af:bf:94:56:88:80:bb:b9:d6:4c:6a:
         76:d1:33:62:31:59:b8:09:85:d4:36:e4:27:f6:65:3d:9b:9c:
         72:ce:03:4c:72:f7:dc:65:aa:b0:e2:71:43:01:f1:64:08:ef:
         b8:bd:45:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 21:46:37 2026 by rpki-client