Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8f230fd1-16c5-3ec1-b77c-727ccb992444.roa
File:                     8f230fd1-16c5-3ec1-b77c-727ccb992444.roa (raw, json)
Hash identifier:          xgMvWhGuk+1xs5wJ7plLJaOZ/3PdVVLao+NyLAEiLaQ=
Subject key identifier:   65:82:8E:3D:81:9F:FA:A1:20:F7:93:A1:84:15:75:2C:0C:8A:AD:DB
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584D83CA9387E22E123B08DBA700
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8f230fd1-16c5-3ec1-b77c-727ccb992444.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     19905
IP address blocks:        2604:2e8f:ac00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:ca:93:87:e2:2e:12:3b:08:db:a7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=f73e059c-0f80-4422-8c46-ad8ee2cca695
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:33:9d:1c:ed:81:b2:e8:4b:ac:ab:13:21:64:
                    b5:4c:94:1b:7a:86:6e:e1:2f:a8:fe:50:f0:f5:3d:
                    87:ea:0b:6a:e6:a2:3b:08:67:d8:3e:26:cc:53:d4:
                    a1:66:28:c3:3d:cd:08:84:14:d4:d8:dc:6f:11:0b:
                    f9:4d:3d:85:28:71:78:bf:c2:39:4a:4c:56:24:8b:
                    48:9e:1c:02:35:36:8e:47:c5:45:0e:09:df:f3:f6:
                    37:56:20:f5:6f:d4:3b:f1:dd:1d:c3:7f:e8:b6:5f:
                    ce:8c:e6:c7:25:a3:b9:b7:c2:23:d4:bf:af:20:cf:
                    44:97:be:62:60:70:f9:73:25:b5:6d:45:e6:2a:52:
                    e0:06:22:be:26:f8:97:08:d9:c9:6d:df:1c:c0:88:
                    59:31:a9:a9:3a:27:b6:1c:86:27:2b:9f:ea:fd:91:
                    0f:84:43:09:1a:5d:28:3f:6b:c5:ae:3e:51:26:0f:
                    07:6e:4e:3f:7f:c1:93:04:9c:bf:bd:c6:e6:e6:7b:
                    89:48:9e:a9:fc:70:60:2b:0f:1d:48:c0:ea:85:29:
                    7c:02:15:ff:47:02:09:a9:db:38:9d:c2:b8:d3:35:
                    3c:22:cc:4d:09:7d:34:b5:b4:95:28:03:39:f7:28:
                    76:d7:25:b3:73:06:2f:2f:a9:8d:07:8d:5e:9d:ac:
                    f4:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:82:8E:3D:81:9F:FA:A1:20:F7:93:A1:84:15:75:2C:0C:8A:AD:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8f230fd1-16c5-3ec1-b77c-727ccb992444.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8f:ac00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:0c:50:41:68:0f:f1:25:27:64:70:d6:33:f4:9d:0c:2c:a1:
         c5:7a:37:94:62:22:79:2c:f6:c7:66:65:21:d9:3c:15:2d:e1:
         77:5a:0d:64:86:96:f8:69:f6:d1:70:07:4e:a9:ff:11:c5:90:
         78:f8:ca:26:72:c2:d2:bb:b9:59:52:db:8a:91:b2:8f:31:43:
         05:c8:a7:f2:5b:ba:94:26:20:97:8b:01:25:a2:d2:69:db:92:
         6a:61:94:97:79:eb:fc:03:5b:e8:29:06:dd:8a:cd:f2:a1:23:
         59:d0:44:3e:8e:70:9a:27:86:5d:b6:65:ef:c0:91:d4:e7:3f:
         a2:07:af:6d:e4:21:bd:7f:d8:3b:a6:12:30:a1:d7:5f:11:a2:
         f7:4b:00:99:ae:e5:6b:ed:51:68:b9:42:fd:30:4a:52:45:19:
         1f:ce:75:26:0c:2c:b6:77:7a:91:41:b5:45:0a:48:1b:8a:e0:
         89:37:3b:df:b6:c7:ea:17:73:f2:25:35:e7:6a:cc:cf:9d:a9:
         fc:99:98:bc:42:0c:8b:23:74:3d:8c:86:1d:ed:6d:3e:80:38:
         f2:0b:7f:87:d3:5c:2d:ae:08:f4:9f:78:f0:d0:24:b9:27:ef:
         74:54:f4:e4:c9:86:50:b9:6b:d4:94:35:23:70:ef:aa:49:09:
         d4:a7:41:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:42:11 2026 by rpki-client