Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/24d66b91-511e-326a-8078-7ea7d3a8534b.roa
File:                     24d66b91-511e-326a-8078-7ea7d3a8534b.roa (raw, json)
Hash identifier:          bNKZZlxqDmbsFU/0SK5SuZJlCgdR23gcNw6KE6nd46A=
Subject key identifier:   E4:FD:80:E2:52:EB:8A:A1:8D:C4:E8:D4:3C:6A:B3:35:D7:30:72:F1
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584D2379EF6E3A5C0E8D45C34E80
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/24d66b91-511e-326a-8078-7ea7d3a8534b.roa
Signing time:             Thu 12 Mar 2026 01:00:32 +0000
ROA not before:           Thu 12 Mar 2026 01:00:32 +0000
ROA not after:            Wed 10 Jun 2026 01:00:32 +0000
asID:                     30036
IP address blocks:        2604:2e8c:d800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 13 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:23:79:ef:6e:3a:5c:0e:8d:45:c3:4e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Mar 12 01:00:32 2026 GMT
            Not After : Jun 10 01:00:32 2026 GMT
        Subject: CN=e1a1329e-2215-4b79-9f63-2d33284ed889
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:a7:ee:f5:f1:74:bf:1b:50:93:d3:c6:26:0e:
                    b9:0e:c5:5a:82:05:dc:a1:70:27:51:91:32:8e:2c:
                    04:b1:de:19:33:61:5e:80:73:27:bb:9a:f5:a9:ac:
                    cf:74:b6:35:84:59:30:ec:e7:bf:e0:3f:d7:f0:33:
                    ac:5b:93:ed:f3:f3:cb:69:3b:11:cc:61:39:2a:f0:
                    98:85:c2:86:59:84:41:15:6a:51:3d:5c:22:79:1f:
                    00:77:a3:3c:af:4d:96:4a:4d:9e:99:72:86:9c:8a:
                    df:46:91:7c:5a:3b:1e:16:01:eb:90:0d:24:b8:5d:
                    cd:5b:05:4a:e9:27:39:c9:3d:6b:75:5f:e3:9f:6a:
                    97:08:5a:2f:6c:59:1a:0c:81:09:61:62:6c:50:1f:
                    1e:09:f7:a0:51:d6:20:ec:e9:0c:c6:1c:26:de:66:
                    17:ba:03:36:b4:1b:60:13:54:bc:89:5f:98:a1:2f:
                    cc:c1:bc:68:e8:dc:c5:89:9d:28:b5:61:8d:b1:10:
                    59:df:cb:c8:7c:3d:6e:8f:28:7d:e5:e1:02:d8:d6:
                    68:78:d1:0c:20:c2:28:3d:5e:fb:5a:01:00:a8:03:
                    f1:ca:7b:24:17:36:61:c5:03:05:81:13:60:42:4a:
                    ea:f4:30:6f:dd:35:96:82:b7:e9:8a:27:30:f1:29:
                    b3:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:FD:80:E2:52:EB:8A:A1:8D:C4:E8:D4:3C:6A:B3:35:D7:30:72:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/24d66b91-511e-326a-8078-7ea7d3a8534b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8c:d800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:93:ba:a6:40:0c:bf:b1:cf:96:06:ad:8f:43:44:92:8f:6d:
         bb:14:b2:81:aa:a1:e7:db:1f:24:9d:f8:f2:de:11:8b:4c:ad:
         09:84:87:59:43:8f:ee:26:a8:0c:7a:5c:93:3f:de:af:59:7a:
         1e:5f:a1:d1:2a:99:c1:61:ad:7a:29:2d:fb:d9:ce:d2:6a:37:
         49:63:f4:66:a1:67:cd:d7:93:78:3c:73:91:ae:b2:33:87:9c:
         5c:73:b2:55:3d:d4:f5:3d:be:18:39:bc:2a:a7:61:fd:36:3d:
         6b:9c:b4:df:6a:07:c9:74:a5:ff:48:39:69:27:8f:b1:c1:a2:
         ba:e2:0d:af:05:3b:02:5b:95:27:12:6c:f0:e0:07:4e:38:73:
         3a:ff:d9:0a:af:5b:84:d1:a0:1c:aa:8b:98:f6:6a:45:f4:fd:
         40:f8:5c:ab:e7:1b:c3:7d:ad:c5:54:27:0f:2d:ca:36:03:6f:
         6b:66:a0:4f:10:8f:92:95:73:2f:e7:9e:91:cc:9a:1d:61:e5:
         cc:88:14:6e:c9:ec:a1:2b:4f:cf:e0:95:3a:3b:b4:59:f9:a9:
         5f:a8:27:de:96:58:cb:78:c1:a7:51:03:18:3b:bd:df:e6:8f:
         9b:24:22:7a:01:4f:68:d9:83:cb:ff:72:d6:9a:7a:d0:3a:8b:
         a9:95:4b:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 06:37:18 2026 by rpki-client