Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/99d84c89-4402-3079-ba97-18161d7c4e31.roa
File:                     99d84c89-4402-3079-ba97-18161d7c4e31.roa (raw, json)
Hash identifier:          j6DJIh/3fU1yhVhSiLw0wdpxiNYuAhcxTT1Q2rgwdI4=
Subject key identifier:   A3:00:C2:A5:13:AC:3E:84:4E:9F:4A:AF:14:C3:0B:FE:AB:11:A3:3E
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584DE6E5D7D2AC3184E191700800
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/99d84c89-4402-3079-ba97-18161d7c4e31.roa
Signing time:             Thu 21 May 2026 01:00:25 +0000
ROA not before:           Thu 21 May 2026 01:00:25 +0000
ROA not after:            Wed 19 Aug 2026 01:00:25 +0000
asID:                     19905
IP address blocks:        2604:2e8c:4c00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e6:e5:d7:d2:ac:31:84:e1:91:70:08:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: May 21 01:00:25 2026 GMT
            Not After : Aug 19 01:00:25 2026 GMT
        Subject: CN=4438d33d-eb56-4bee-a644-9e9d6a635b0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:31:8a:0c:7c:77:65:ac:80:84:e6:1e:fe:8b:
                    6e:6a:3b:0e:ad:9c:00:91:de:ee:19:32:81:5c:c1:
                    d8:a6:46:38:92:66:e0:02:50:a8:f2:af:b1:ba:33:
                    b5:7e:88:64:55:42:b1:79:ef:70:d9:cc:83:4e:57:
                    41:1f:d1:1e:a6:53:f3:60:bb:cb:4f:e9:b1:cd:40:
                    64:13:49:35:76:64:a1:52:07:82:d7:6c:8f:c2:f6:
                    e7:d2:a1:12:82:75:d7:d6:98:c0:23:c5:37:dc:ac:
                    ef:33:7f:83:b1:6e:e2:1b:59:ee:4f:af:17:1f:0e:
                    d5:e3:6a:21:31:ec:a8:4d:e5:80:70:1f:df:be:ad:
                    86:49:00:6b:c6:ab:d8:5d:5a:e2:1c:1a:e2:34:f7:
                    df:a5:18:a4:ee:c4:a0:1e:1b:fc:82:0d:c1:ee:75:
                    6b:ea:ee:9b:17:60:9c:26:27:02:4c:b7:42:ad:65:
                    97:65:16:8e:17:e3:5a:31:d7:b4:e6:de:3a:f6:72:
                    f1:59:71:b5:2a:6f:72:70:29:88:7b:0f:1d:4c:1d:
                    24:75:09:ee:dd:dd:d7:77:a3:f7:92:9a:75:a2:c5:
                    c4:c8:78:1b:a6:5e:13:6e:1a:12:53:3f:be:49:32:
                    24:0b:df:df:de:2d:44:60:d7:62:a4:68:63:0e:97:
                    7f:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:00:C2:A5:13:AC:3E:84:4E:9F:4A:AF:14:C3:0B:FE:AB:11:A3:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/99d84c89-4402-3079-ba97-18161d7c4e31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8c:4c00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:68:e6:aa:9a:93:1e:65:92:97:ec:69:20:3d:a9:7e:52:2a:
         fa:2c:be:4e:83:63:7e:8b:0d:ca:2b:75:37:0f:cc:d2:2f:85:
         10:7e:a3:39:be:71:36:33:b2:99:42:c2:81:50:a3:d2:56:6c:
         7c:a8:ce:fd:a5:14:73:7a:a9:68:51:08:29:31:c1:e2:14:49:
         5e:cc:3d:31:cc:45:9e:0d:98:2c:15:48:61:12:69:ff:6d:31:
         58:2c:89:f6:ea:c1:92:5f:7c:ce:4a:4e:96:e6:1c:9e:70:76:
         d4:29:b0:ab:d2:d5:da:3c:4c:2a:38:04:d4:f4:26:e2:c3:50:
         ab:a1:c7:a8:f6:e5:90:f0:09:6c:46:b0:c4:56:19:56:2a:c1:
         bc:74:1f:0a:98:44:f2:0d:3b:08:03:13:ab:5a:8c:6a:ee:0c:
         ee:04:b1:49:e4:2d:d7:03:b8:e3:36:ef:63:04:c7:69:b5:e0:
         87:9f:e8:c2:e3:cb:df:7c:9b:89:58:84:37:63:5a:4f:5d:74:
         30:ca:7b:ca:8e:14:06:42:fe:86:5f:0c:72:1a:b8:fb:0f:cb:
         fe:3d:f6:1b:55:e3:62:6e:e9:ab:eb:3f:68:46:8b:30:8a:ca:
         34:b7:a3:79:d9:91:33:5c:62:e7:a4:0b:66:93:57:7e:58:39:
         f7:ba:b8:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:16:29 2026 by rpki-client