Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1630073e-8494-3b10-a222-583ba9c5e790.roa
File:                     1630073e-8494-3b10-a222-583ba9c5e790.roa (raw, json)
Hash identifier:          zg05O8ClgJllk61NAPL1EwkDn3XVWLJie2v3Kb9aDu4=
Subject key identifier:   3F:76:59:B2:6C:FF:52:76:A2:AD:90:68:52:67:EF:FA:BC:C8:D6:67
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584D237A231383750C3B5BAE0280
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1630073e-8494-3b10-a222-583ba9c5e790.roa
Signing time:             Thu 12 Mar 2026 01:00:32 +0000
ROA not before:           Thu 12 Mar 2026 01:00:32 +0000
ROA not after:            Wed 10 Jun 2026 01:00:32 +0000
asID:                     30036
IP address blocks:        2604:2e8e:d800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 13 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:23:7a:23:13:83:75:0c:3b:5b:ae:02:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Mar 12 01:00:32 2026 GMT
            Not After : Jun 10 01:00:32 2026 GMT
        Subject: CN=6737cd5c-8dd0-4b5f-a42a-9aa750622805
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:3e:ce:3c:2d:65:be:bd:63:ba:67:bb:3b:76:
                    ee:aa:10:87:d9:86:f1:9e:73:5a:1a:98:45:47:b1:
                    30:34:b9:42:4a:7e:f4:e2:7a:fc:84:31:4b:af:b2:
                    bc:50:f9:66:1e:c8:1c:0b:70:bd:81:32:fb:ff:85:
                    e7:fc:2d:66:44:ee:5f:f8:ae:db:23:31:a4:90:87:
                    4a:59:97:99:c5:a8:fd:b2:4e:46:42:d4:b7:85:cf:
                    8f:e8:36:bb:a5:79:f3:c7:56:7a:6b:db:43:94:58:
                    7f:1a:2e:6f:9f:8e:93:a8:77:0d:b6:e2:60:28:c2:
                    7f:5f:0d:89:e6:8c:16:20:ca:de:e7:eb:d8:c0:b1:
                    86:e7:26:b7:81:70:53:c6:df:0e:f4:e3:d1:a2:d6:
                    2c:5b:95:0f:a3:c1:6e:72:dc:d9:e4:66:65:ce:a8:
                    1e:9a:10:40:21:11:35:bf:e5:8d:0a:4e:16:94:f6:
                    98:da:55:73:7c:a2:af:c0:4f:8b:1a:07:41:f3:95:
                    d3:7f:1b:46:89:41:31:fc:e7:a2:41:b7:b5:cb:d5:
                    2a:d1:60:c4:fe:fe:7d:5a:44:77:e9:47:a7:6f:01:
                    58:db:1b:06:e3:e4:6e:ed:1d:2b:54:8d:23:58:d5:
                    7c:62:02:2a:03:00:06:74:5d:9a:a3:c0:bf:22:4a:
                    06:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:76:59:B2:6C:FF:52:76:A2:AD:90:68:52:67:EF:FA:BC:C8:D6:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1630073e-8494-3b10-a222-583ba9c5e790.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8e:d800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:d1:1f:be:15:75:da:b8:fe:35:9d:06:80:c7:fd:e2:08:7a:
         4b:23:a0:9f:ca:a4:89:52:8f:3e:b9:a4:fd:b1:23:38:ed:e1:
         28:20:e3:d4:cc:db:2f:c1:3b:e7:1d:9f:dc:ed:a4:81:b3:70:
         97:57:b1:2a:8b:27:5d:26:1c:41:ee:93:6c:2d:3a:ac:3c:ec:
         99:f0:e0:fe:02:c4:da:07:a9:05:29:80:39:aa:4d:b0:a8:b8:
         20:ea:6f:8f:19:07:32:0e:88:0a:4f:ef:79:14:a1:17:32:f6:
         9d:2a:56:94:db:c6:b5:5e:7e:96:6b:48:59:9c:4a:1d:1b:7e:
         87:e9:18:f2:d7:6b:15:a3:a2:db:78:bf:0a:48:81:cb:cb:9b:
         4e:d2:81:2a:4d:21:95:9c:cf:ef:16:ac:4f:bd:32:d1:1d:30:
         0f:9a:3d:f3:99:5b:0b:32:68:8b:d7:0b:e5:07:78:8c:4c:85:
         88:37:39:34:d0:4a:1d:48:68:1c:79:14:29:e6:0d:16:7c:ab:
         1d:cb:4c:91:e0:bd:ad:08:d0:cc:9d:e3:37:7a:d9:c9:16:41:
         68:82:b7:2b:01:f0:c7:fe:65:17:c0:66:ce:86:6e:37:10:a2:
         1d:ca:51:33:45:e1:fd:1e:28:03:97:64:fd:26:fb:91:45:0a:
         ec:33:7e:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 06:39:48 2026 by rpki-client