Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1a46810d-be24-3d34-add3-0fb2df7ae360.roa
File:                     1a46810d-be24-3d34-add3-0fb2df7ae360.roa (raw, json)
Hash identifier:          veXEYidXjvPOQCivj87+ALU5NPxAzklzb2iBhTa+X+A=
Subject key identifier:   45:B8:9D:7F:D5:14:42:CA:B7:A5:93:1A:E0:3D:B7:2C:08:24:E1:6F
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584EA79D0391EB6E83406E6D6400
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1a46810d-be24-3d34-add3-0fb2df7ae360.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     30036
IP address blocks:        2604:2e8b:ec00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9d:03:91:eb:6e:83:40:6e:6d:64:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=134c033e-c67e-428d-aadd-3bc67e30caaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:c6:07:04:bd:26:f5:91:20:fe:ca:42:f4:73:
                    bd:cf:bd:5b:9c:5a:90:7b:ff:9a:c0:98:c6:2f:9a:
                    58:28:e8:58:d1:74:86:0b:bd:49:df:ee:69:24:68:
                    a3:25:d1:81:dd:2e:1c:5d:81:e6:d3:c1:72:2e:b3:
                    9e:4d:4a:ea:f4:e4:cf:bd:1e:d3:f5:16:15:6e:41:
                    5f:c2:19:12:0c:97:8c:4b:56:6b:61:30:46:83:17:
                    77:3f:e0:4a:dd:7b:a7:48:04:80:a2:4c:1d:dd:da:
                    78:af:71:5a:24:cd:7c:70:61:e0:fd:37:93:8c:94:
                    09:47:b8:94:3f:46:bc:e2:de:49:8a:3f:90:b9:a9:
                    81:27:95:6d:cd:7b:92:c8:87:78:1c:60:db:71:5d:
                    59:9e:14:f4:e5:a3:4e:2e:57:2d:88:fc:af:b2:e8:
                    84:21:26:cd:18:82:20:6a:4d:45:1c:0f:b0:eb:d2:
                    85:74:0d:ea:0b:be:f5:4e:80:84:10:2f:6e:99:3d:
                    08:2b:7c:c0:f7:73:c6:63:19:d6:04:d1:9a:ef:c0:
                    a7:d6:ca:cc:be:08:d4:fd:ca:da:2f:98:b2:69:cb:
                    e8:e6:1a:79:09:9a:e1:47:a2:e9:44:cd:70:8a:d5:
                    57:41:5d:93:c6:da:4d:16:93:c9:2f:ab:20:dd:c9:
                    f9:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:B8:9D:7F:D5:14:42:CA:B7:A5:93:1A:E0:3D:B7:2C:08:24:E1:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1a46810d-be24-3d34-add3-0fb2df7ae360.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8b:ec00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:38:1e:64:14:ea:ca:2c:e7:1b:05:ed:5b:ca:36:6c:ba:2c:
         83:40:ed:da:88:63:ce:72:7b:38:34:31:2e:50:80:87:53:2d:
         08:d0:b7:af:ca:e8:5f:ee:4c:09:d3:ce:1e:72:53:0b:8b:8f:
         d3:6f:fe:51:9b:cc:2a:45:57:a6:51:db:1a:c8:2a:e3:d0:62:
         d8:e8:0c:87:4f:39:ba:40:de:b8:dd:30:ce:2b:29:7d:0c:cb:
         7a:6e:c9:c6:4f:e4:d8:fb:77:c3:59:51:8a:02:b0:25:e1:97:
         de:2d:0a:67:e9:e3:c0:6f:c2:e5:c1:d2:d0:59:0c:48:70:9d:
         aa:fa:c0:3f:58:d1:06:45:09:90:c7:c9:aa:06:44:46:24:e7:
         02:f0:0a:86:80:91:be:bf:14:9f:e1:7f:24:bb:f1:c0:7f:15:
         b6:09:6e:57:39:96:e2:bb:6b:68:05:45:7f:ac:fa:7a:a8:66:
         b6:d9:47:e8:9a:7a:e0:be:1e:6f:c7:f4:75:47:04:11:94:44:
         b3:d5:05:a2:d4:2d:01:1b:aa:3b:22:0f:ba:04:a4:71:7a:74:
         83:5c:03:a5:93:c1:a0:7a:f8:7f:1e:e7:d9:8e:c1:95:f5:4f:
         ad:ef:42:74:ff:73:a8:f8:6c:88:d7:6c:43:8c:fc:2c:ba:a6:
         a8:df:77:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:02:05 2026 by rpki-client