Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/59d3c92c-a66d-326b-9f70-c558a7558284.roa
File:                     59d3c92c-a66d-326b-9f70-c558a7558284.roa (raw, json)
Hash identifier:          3KHmcELO3Sx1ejwuzxqWrmVaeMBU8STjU1LWsBhfw80=
Subject key identifier:   05:21:8F:32:82:44:11:B1:29:03:2F:76:84:99:82:68:35:31:B3:76
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584EA79891C1CA0009E09360BE00
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/59d3c92c-a66d-326b-9f70-c558a7558284.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     19905
IP address blocks:        2604:2e8b:c400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:98:91:c1:ca:00:09:e0:93:60:be:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=3714b87f-5794-4dcb-acbb-67db808bf079
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:b3:a6:08:a1:1d:9e:d7:b8:f3:f1:7c:6e:4d:
                    da:e9:f5:01:ed:c8:54:99:c9:fa:64:9a:6c:e7:19:
                    3a:52:35:72:82:e3:68:3f:ba:8c:70:37:f0:3e:4a:
                    3a:97:5b:2f:3e:ec:ad:62:b4:ca:47:2d:ad:e9:a0:
                    ef:49:87:64:4f:8a:5c:ef:9b:9d:4b:5c:18:5c:ae:
                    d2:55:d5:7b:27:83:27:7e:16:37:1b:3f:d3:43:2e:
                    85:ae:36:ca:76:9e:4d:07:50:25:1d:d0:58:fc:07:
                    66:ae:b1:b7:b7:f5:7c:39:d3:41:e4:1d:8c:ea:27:
                    a0:0c:20:71:a4:7e:02:1c:cf:0a:84:7a:53:4c:4d:
                    15:25:8e:e1:2f:cb:6e:9d:21:52:28:18:7a:06:6a:
                    7c:9b:d5:19:cd:14:68:19:c9:46:10:7b:2d:e2:d6:
                    0e:85:a3:f3:d0:6f:3f:21:51:2d:8f:73:2f:72:fa:
                    77:f2:79:ba:e0:ff:84:e0:25:6b:17:4e:7b:00:e7:
                    cd:82:87:34:50:d4:f1:f0:51:b7:1e:9e:1b:d9:5b:
                    76:ca:7b:0c:03:60:dd:aa:1b:73:b0:11:cc:ab:bd:
                    e6:51:b8:d1:5b:fd:80:48:2f:f8:08:e5:e2:53:cc:
                    dd:10:2b:5f:57:c2:8c:82:0f:44:35:56:f8:fe:da:
                    7f:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:21:8F:32:82:44:11:B1:29:03:2F:76:84:99:82:68:35:31:B3:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/59d3c92c-a66d-326b-9f70-c558a7558284.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8b:c400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:f0:3d:a6:56:ab:e8:6e:22:cc:90:a8:48:27:bb:b2:c0:3c:
         8e:b8:d9:9b:46:fe:30:e4:90:e0:aa:68:f2:1f:68:c7:75:d7:
         ea:cb:f8:27:a3:ef:89:01:84:0d:d1:70:6b:02:2c:1f:97:03:
         f2:f7:74:f7:65:0d:39:1d:71:e0:eb:30:12:67:40:6c:ac:84:
         91:dd:0c:75:8a:1f:dc:20:de:f0:9c:28:79:20:91:55:9e:44:
         23:66:96:8e:1d:04:1f:52:09:24:16:7d:2f:ef:3c:df:b6:0c:
         45:86:12:f3:ff:8f:0e:61:d1:a7:5d:b2:69:c7:5d:a2:36:cf:
         1a:d5:9c:95:61:ac:6e:32:c4:c4:4d:cc:78:ec:c5:73:74:2e:
         ad:67:cb:1b:ca:63:e1:a6:6c:96:59:77:4f:a4:99:e2:99:4a:
         a0:b6:00:17:85:26:f4:64:8b:34:ce:00:9d:fc:b9:1c:6a:cb:
         b1:0c:f9:c0:d8:47:ca:5c:43:9a:bc:0c:5d:fb:5e:fd:b1:a7:
         a5:68:f2:2f:ca:08:8b:83:32:6c:5c:fc:e6:3b:c1:be:fc:4c:
         4f:f0:ea:7e:7c:6c:84:d6:79:c5:50:b0:ec:f7:cd:70:d4:89:
         47:31:04:57:a0:71:b3:8c:df:36:02:b8:b0:b8:5f:51:93:75:
         82:b3:2f:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 17:55:30 2026 by rpki-client