Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8d3419ec-7537-3dfc-9ce4-8baae38baa0a.roa
File:                     8d3419ec-7537-3dfc-9ce4-8baae38baa0a.roa (raw, json)
Hash identifier:          ByA9pHj7wxl8JKvFibjEYYNDEU3HdqdauKm+aWlMni8=
Subject key identifier:   05:8F:28:5E:A6:62:E6:82:EB:E6:E8:D8:F6:36:55:B4:4A:83:15:51
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584E1A143768A8D5A9DD24B71A00
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8d3419ec-7537-3dfc-9ce4-8baae38baa0a.roa
Signing time:             Mon 08 Jun 2026 09:00:12 +0000
ROA not before:           Mon 08 Jun 2026 09:00:12 +0000
ROA not after:            Sun 06 Sep 2026 09:00:12 +0000
asID:                     19905
IP address blocks:        2604:2e88:d400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1a:14:37:68:a8:d5:a9:dd:24:b7:1a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jun  8 09:00:12 2026 GMT
            Not After : Sep  6 09:00:12 2026 GMT
        Subject: CN=a6d7a3d0-bf9f-4f94-90ee-f57226fc257e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:33:bf:f4:fb:36:e7:2b:f1:c7:68:fa:f8:6e:
                    6e:c4:27:a2:e5:dd:13:2d:69:89:a0:48:98:f2:1d:
                    20:eb:90:03:56:0a:e5:be:9d:c5:5d:ff:26:99:87:
                    2f:52:f1:76:89:06:38:5b:72:a8:d4:ae:1a:cc:91:
                    7a:e2:54:73:29:8f:d6:bd:d2:f7:4c:d3:90:9b:5c:
                    c4:b3:74:bf:a3:f2:78:d1:83:a4:a7:99:f8:e9:eb:
                    dc:42:0a:48:7d:4f:ac:24:e3:3b:b0:d4:8b:a8:d1:
                    10:24:3f:5f:98:d1:84:40:e6:7c:34:b2:00:4c:5b:
                    72:3b:79:24:fb:9e:6b:2d:b2:6b:71:ee:87:fd:6b:
                    14:b6:fa:ef:51:ea:16:c9:4e:ef:1d:e8:76:6a:48:
                    f6:e2:29:ad:50:a0:8e:9a:65:78:ea:e8:e1:a4:61:
                    e9:eb:6c:7d:e4:fe:0b:14:44:a4:33:8d:58:23:fb:
                    09:2e:0c:b5:57:81:67:ac:a9:2c:d3:97:a8:66:a0:
                    7f:06:fd:af:f3:d9:2c:d9:79:f5:1e:fe:52:ee:2d:
                    8d:72:7e:9e:51:a6:64:7c:9a:31:37:bb:1f:74:fe:
                    d7:1f:86:e3:f7:ae:88:c5:8f:61:38:32:e2:d7:1d:
                    db:c8:1f:da:1b:11:10:88:6d:40:27:2d:23:3b:78:
                    25:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:8F:28:5E:A6:62:E6:82:EB:E6:E8:D8:F6:36:55:B4:4A:83:15:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8d3419ec-7537-3dfc-9ce4-8baae38baa0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e88:d400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:a8:ff:3c:2a:35:96:44:7d:ab:b3:4c:4f:29:9a:59:69:ce:
         1b:46:10:14:cf:b6:68:96:9a:a6:d1:6c:62:49:19:d0:16:d6:
         f7:47:e6:ca:fe:21:62:89:d6:06:97:9c:5b:36:35:a2:4d:56:
         8e:1d:16:ab:e8:1a:87:0e:fd:1e:fc:b5:50:83:95:23:0d:28:
         dc:89:22:a8:c0:4c:6c:4a:53:76:86:23:0c:60:31:d4:ff:97:
         a4:f7:98:42:56:08:5a:0a:6f:a7:ab:97:f4:a9:60:7e:26:34:
         a2:31:7b:15:8a:7c:16:ca:68:3c:02:23:f1:69:26:39:38:6b:
         fc:df:7f:f2:38:0c:d0:61:17:5d:f4:e6:37:f7:58:eb:96:5e:
         68:e5:b6:70:f1:e5:03:1d:d3:d2:96:d4:18:1b:73:c4:ea:11:
         65:ac:ac:15:24:92:d3:35:4d:64:49:bc:ba:fc:05:d5:3e:3e:
         ca:71:7a:0f:0c:94:cd:95:e9:00:0a:4c:34:30:9d:fe:d5:d1:
         05:46:fd:30:0e:02:ef:f8:21:29:4b:01:1b:10:96:b1:72:44:
         ac:60:3e:10:7d:a4:46:e9:d4:1d:3e:b3:2e:dc:cb:88:95:f9:
         9a:81:d1:b8:3c:2f:a4:a0:7d:0c:e4:f7:f5:0d:dd:9a:1c:1d:
         86:96:5a:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:14:57 2026 by rpki-client