Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0efee355-5896-3c51-847c-e6f6ca25205e.roa
File:                     0efee355-5896-3c51-847c-e6f6ca25205e.roa (raw, json)
Hash identifier:          6W3x9k+98xZfoUCd7/Ssvsb0d/LeI/X+vwoXBaKNj8I=
Subject key identifier:   DF:92:DC:1F:D0:F1:8C:4C:8F:9E:72:B1:EC:62:A2:42:B2:4A:99:8F
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584F71EDB961AA9FDD60F022A980
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0efee355-5896-3c51-847c-e6f6ca25205e.roa
Signing time:             Fri 09 Oct 2026 13:00:13 +0000
ROA not before:           Fri 09 Oct 2026 13:00:13 +0000
ROA not after:            Thu 07 Jan 2027 14:00:13 +0000
asID:                     30036
IP address blocks:        2604:2e8f:9000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:71:ed:b9:61:aa:9f:dd:60:f0:22:a9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Oct  9 13:00:13 2026 GMT
            Not After : Jan  7 14:00:13 2027 GMT
        Subject: CN=ea6ad4c3-63cc-40a8-8582-7a8e3a79496c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:68:4f:c7:a6:43:19:8b:1d:49:db:1c:b7:8e:
                    55:d3:be:ad:1f:21:a9:c4:17:3f:16:4f:0f:2d:fa:
                    35:fe:d7:7d:e4:27:6e:e6:28:19:f9:aa:e7:2c:d4:
                    2e:e7:9b:54:62:2e:30:d1:6f:96:fd:70:db:49:a0:
                    ee:d3:2f:21:0a:ed:23:cb:0e:14:f2:a2:9d:65:cd:
                    ba:8d:af:30:ae:5c:34:39:72:9f:a7:16:e7:2e:61:
                    0a:fb:8c:8e:f9:be:df:2c:b2:d5:55:05:23:19:6a:
                    d5:51:f5:b5:d2:15:f3:80:75:61:98:fe:23:63:96:
                    c1:b2:fe:8f:0a:71:4f:34:55:82:92:e8:d8:1a:db:
                    c7:93:80:8f:2c:87:d7:e7:94:8b:a1:b8:ce:7a:ea:
                    b4:94:13:6d:1b:1b:84:c9:2e:d6:ed:04:5a:47:cb:
                    57:16:ee:af:6e:ab:34:b6:40:bf:be:81:2d:19:89:
                    b2:80:1b:5c:b6:7d:4e:0b:3f:aa:db:61:80:57:e2:
                    72:ec:9f:2b:d7:53:d6:0e:d2:50:10:d5:bc:8e:3c:
                    c0:34:fd:12:d5:30:1d:a5:1b:0a:cf:6d:75:68:9e:
                    2a:4f:75:98:0a:2b:3c:c7:76:30:4d:22:9d:c0:3f:
                    9e:55:29:12:8b:b4:86:ec:3c:0f:5e:7a:42:6e:c2:
                    d1:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:92:DC:1F:D0:F1:8C:4C:8F:9E:72:B1:EC:62:A2:42:B2:4A:99:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0efee355-5896-3c51-847c-e6f6ca25205e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8f:9000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:62:ea:e3:6a:15:d5:73:bd:0c:42:ea:9b:cd:10:b2:5f:77:
         35:db:72:3c:4c:b0:63:b3:9d:a8:c8:68:ba:44:d5:0f:33:45:
         d9:31:29:b3:fe:b8:9c:0d:f4:72:b4:84:73:26:e6:dd:92:ab:
         55:d7:00:ca:39:66:6a:74:b9:ed:ad:cb:5b:17:1c:d8:90:2c:
         b3:f0:42:35:d9:23:3b:85:95:db:97:26:01:6f:f8:e8:25:de:
         e9:17:2b:3c:d7:87:9b:41:e2:d8:9c:72:25:d3:30:cd:5b:c2:
         a2:4e:f6:d2:64:2e:f7:cc:95:7c:20:26:f3:a4:ea:6a:99:ab:
         34:ed:eb:3a:fc:5a:46:ce:cb:79:bc:70:4a:8a:a9:39:2d:35:
         5d:43:16:69:6c:12:d3:c8:6b:d8:65:d3:ac:d4:e7:b7:e8:fd:
         aa:a4:ed:f1:d3:4a:94:7c:d7:0b:37:d4:6a:27:15:80:76:08:
         9b:49:da:d0:24:4f:90:08:33:64:71:3b:a2:56:65:e5:e0:03:
         1a:52:8b:a0:8b:2c:a6:24:41:d7:a6:6b:bd:43:ac:f5:cc:71:
         1f:cf:72:f3:d9:8d:ed:c0:3c:78:77:c0:6b:54:c8:b4:6d:97:
         80:c2:99:1e:d7:37:e2:44:29:d5:d5:44:54:75:ae:2a:8d:c4:
         a1:11:82:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 06:20:21 2026 by rpki-client