Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/20b3826e-59dd-3539-8074-35e75f0e0bf0.roa
File:                     20b3826e-59dd-3539-8074-35e75f0e0bf0.roa (raw, json)
Hash identifier:          a02UqfkpIjPzTe9q/p84JqI547SldLGLAZ2BqwjSsyU=
Subject key identifier:   40:C3:39:F8:3D:0D:BC:1F:32:A9:33:52:1F:2E:FB:27:B4:69:9D:84
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584EA9C011ECA1B685AA40B2B6C0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/20b3826e-59dd-3539-8074-35e75f0e0bf0.roa
Signing time:             Wed 29 Jul 2026 20:07:07 +0000
ROA not before:           Wed 29 Jul 2026 20:07:07 +0000
ROA not after:            Tue 27 Oct 2026 20:07:07 +0000
asID:                     30036
IP address blocks:        2604:2e86:3c00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a9:c0:11:ec:a1:b6:85:aa:40:b2:b6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jul 29 20:07:07 2026 GMT
            Not After : Oct 27 20:07:07 2026 GMT
        Subject: CN=2d4ba26b-1ec2-40fa-b5e2-c771026c47d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:7b:49:ff:a9:cc:64:91:57:2c:c6:e8:3c:66:
                    27:50:12:74:69:ad:df:68:0d:07:77:36:7b:3a:b8:
                    c8:f0:21:2c:c3:34:2f:05:f2:d5:6d:fc:da:e9:74:
                    dd:e2:16:82:85:a5:7d:20:04:18:b8:81:cb:c6:d7:
                    7f:09:c8:4a:42:80:49:96:f3:22:f8:93:7a:ac:9a:
                    13:72:f4:81:36:4c:ef:12:42:fd:7f:77:bf:c1:23:
                    2c:21:05:88:00:08:b3:51:60:1a:00:33:17:27:a5:
                    fa:9f:ec:38:d5:2f:63:3b:a8:dd:7b:3b:8a:4f:b2:
                    d2:c6:fb:61:d2:3d:f9:26:8a:95:6c:46:48:0f:7d:
                    30:2b:bd:74:af:95:10:fe:5d:2f:ed:b2:c1:63:61:
                    16:c5:a8:a1:71:04:3b:8c:07:42:10:f2:aa:0d:83:
                    c0:a1:4a:0f:b7:e0:2b:4e:23:7e:fb:13:29:9f:cb:
                    4a:11:1d:90:2a:11:57:2b:d6:0c:bc:6d:f6:76:84:
                    9f:99:a3:84:f2:80:e6:7c:2d:12:21:64:79:e5:22:
                    6b:aa:2f:d8:c9:91:a9:2d:95:32:43:b7:b9:c2:f2:
                    6b:da:e7:79:f0:6c:e7:b3:ed:4d:de:b6:82:74:81:
                    9a:a2:ef:5a:86:bb:5c:14:c2:f5:d7:b2:77:bc:d0:
                    f7:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:C3:39:F8:3D:0D:BC:1F:32:A9:33:52:1F:2E:FB:27:B4:69:9D:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/20b3826e-59dd-3539-8074-35e75f0e0bf0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e86:3c00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:c8:be:eb:72:0f:26:9f:1a:fe:2b:f8:10:bd:44:76:76:f7:
         cc:0b:0e:ee:83:48:90:c5:25:75:c1:bd:53:29:c7:95:c7:74:
         ab:cf:85:4d:91:eb:85:da:6e:c5:2c:eb:7b:b2:76:4d:08:b6:
         8b:c9:75:8c:68:b9:22:7b:e7:7b:6f:26:04:3a:c9:84:a2:e4:
         6d:55:02:47:09:1e:0c:11:8c:7b:9e:0e:70:06:43:1d:f6:5b:
         12:d5:b0:28:ee:30:38:d9:36:8a:dd:00:c1:89:cd:ad:83:ae:
         0a:bc:3f:ad:ec:6a:70:bd:6c:a6:9d:a9:9f:bb:69:40:ef:3e:
         d6:10:e7:28:e4:5f:e2:86:e9:53:5f:ce:5e:42:cd:54:b9:80:
         64:4c:f9:cf:8e:3a:29:dc:e8:5d:44:70:ad:e0:9a:21:41:aa:
         69:f4:46:a6:8a:d0:5b:22:76:c1:f4:be:58:dd:fb:5f:e1:0b:
         fe:07:3d:1b:e9:95:39:47:78:d0:b2:90:c0:98:e5:a6:cc:38:
         c5:e5:18:24:09:f4:9a:fd:6a:e8:59:07:d1:c9:0b:bb:89:9e:
         c0:e9:f2:b2:c8:db:0c:c6:da:e3:ef:5a:ca:59:3d:1e:78:80:
         0a:8d:9f:61:2d:e2:2e:ac:f8:2e:82:66:27:02:54:d0:2b:cd:
         08:b3:7a:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 00:59:47 2026 by rpki-client