Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1fbda34c-051e-3dde-81e4-2d6069452d78.roa
File:                     1fbda34c-051e-3dde-81e4-2d6069452d78.roa (raw, json)
Hash identifier:          0ZTMqBRIQkB9NrXX7LYGedgsCmxyPjSmIwTcr0wytdc=
Subject key identifier:   D1:AD:9B:E4:12:7A:1B:05:C9:B6:CB:98:DB:26:C3:F6:4D:92:38:EF
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584EA78FFE9D2A4D597E1F90C600
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1fbda34c-051e-3dde-81e4-2d6069452d78.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     30036
IP address blocks:        2604:2e8d:f800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:8f:fe:9d:2a:4d:59:7e:1f:90:c6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=c6677618-8f83-47ad-83c6-721b65db7739
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:6d:68:3a:a2:89:3b:f6:61:8f:5f:20:f0:37:
                    6c:82:8d:a0:df:e6:37:78:72:2c:05:14:9d:29:fd:
                    3b:aa:9d:6d:e1:68:7e:ea:92:81:4a:cb:84:1f:58:
                    a5:be:7d:92:8d:69:7a:a8:9b:60:55:9e:6c:00:f4:
                    3f:43:37:35:23:ba:6c:16:f3:32:62:7e:88:ac:e1:
                    99:8a:06:a9:95:d2:2c:e4:ab:9b:68:25:ca:ec:1b:
                    0a:44:66:d9:18:ad:72:7e:72:ac:06:26:1a:76:a1:
                    12:91:87:3c:0d:1e:6f:9b:88:e8:f4:4c:7b:db:5f:
                    77:c7:77:dd:a3:fd:14:63:bb:f8:67:2e:c7:15:95:
                    e7:2a:3a:62:6b:1d:14:fc:77:33:1d:5e:a3:cc:d7:
                    fe:43:e5:0a:79:a6:f5:4a:fe:79:f3:fb:de:22:68:
                    2d:a5:2b:8f:2d:08:75:64:ee:25:e9:42:ba:4f:f5:
                    f7:5c:3e:da:83:68:78:12:a3:32:4e:fc:79:4c:0f:
                    7b:ba:19:2f:ae:3c:d8:15:07:21:54:49:e3:03:af:
                    fe:29:0e:0a:79:7d:98:44:cd:4c:ce:7e:91:34:93:
                    05:f8:c8:fd:ec:7a:94:8f:1b:b8:4a:f0:62:f9:99:
                    ec:cc:66:38:41:21:5f:9e:0e:69:35:73:0e:76:62:
                    f2:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:AD:9B:E4:12:7A:1B:05:C9:B6:CB:98:DB:26:C3:F6:4D:92:38:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1fbda34c-051e-3dde-81e4-2d6069452d78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8d:f800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:78:ea:54:9a:20:60:8e:3f:5d:9e:61:82:48:b7:77:7d:b7:
         68:99:23:eb:cf:36:a1:fd:47:ae:4e:45:45:14:9a:73:2c:db:
         db:d9:16:30:1f:ec:be:d8:f9:b9:84:aa:f6:5f:0b:ff:80:0e:
         91:88:56:09:72:a7:d7:64:96:b6:2a:cf:6b:5d:4e:d9:f9:35:
         91:c0:80:4d:a5:69:45:35:6c:75:36:18:9e:e7:3a:30:cf:60:
         8f:aa:0a:03:87:a3:9c:b6:22:93:2d:e2:1d:8c:87:53:c5:94:
         a5:ab:b0:7f:47:b4:c4:a8:98:dc:56:4d:cf:c6:81:a8:11:48:
         93:b1:f1:a7:71:67:ce:42:5c:da:46:3c:6a:f8:4a:85:d1:95:
         fb:01:2a:60:38:45:e0:56:59:b9:c8:60:e5:52:93:75:c0:e8:
         87:52:b4:59:32:6b:0d:66:69:44:f8:f1:bc:d2:24:b3:27:bb:
         ad:52:a9:a7:62:62:8d:4c:b3:51:c1:07:92:af:42:a0:56:ef:
         3a:f6:67:50:a6:77:aa:be:49:60:1e:d9:df:20:c3:1f:a6:cb:
         01:b1:ae:11:ad:4a:37:d1:81:b6:53:2e:d9:e2:57:5b:c4:8c:
         82:bc:c7:40:fe:54:62:39:39:43:dc:6c:60:59:8b:a7:28:25:
         e9:05:f0:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:44:45 2026 by rpki-client