Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/28f00cc0-2814-3b3a-82bd-71e597880e5a.roa
File:                     28f00cc0-2814-3b3a-82bd-71e597880e5a.roa (raw, json)
Hash identifier:          5t2SkOv4/JpApWTzBCHRoK0JKcBoAz3hgUMcm9sOqf0=
Subject key identifier:   B1:F9:19:BC:2E:25:7D:6C:55:B5:B9:07:69:51:5A:44:FF:B9:4B:F9
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584DB77024DE61588166D7AC7260
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/28f00cc0-2814-3b3a-82bd-71e597880e5a.roa
Signing time:             Mon 04 May 2026 01:00:25 +0000
ROA not before:           Mon 04 May 2026 01:00:25 +0000
ROA not after:            Sun 02 Aug 2026 01:00:25 +0000
asID:                     30036
IP address blocks:        2604:2e87:e800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b7:70:24:de:61:58:81:66:d7:ac:72:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: May  4 01:00:25 2026 GMT
            Not After : Aug  2 01:00:25 2026 GMT
        Subject: CN=d9736f1e-bb73-4ec4-a03f-64beb93a8cea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:71:21:83:45:02:6e:c4:9c:87:9e:28:d6:1b:
                    67:73:80:36:2b:52:14:e6:92:aa:e3:02:30:cf:d9:
                    83:d0:e0:fd:f2:35:50:84:b3:a0:6e:49:e9:99:b0:
                    43:ed:54:29:31:d9:94:d9:39:de:0c:cc:a7:e2:f9:
                    6b:dd:d7:8a:75:fc:f9:7b:c6:b6:ce:83:48:31:9d:
                    d9:14:b5:ed:1f:85:ad:63:d8:62:d6:76:4c:f9:e1:
                    b1:aa:52:bd:a7:c4:5b:d8:ae:d9:4d:5a:8a:f7:fc:
                    f1:2f:07:fb:11:90:53:38:5e:f1:e2:78:f5:d7:af:
                    11:c3:1a:1d:60:dd:56:ef:41:41:e5:c2:8b:e7:f0:
                    0a:33:c4:65:ae:62:92:4e:3d:47:9e:6b:59:83:99:
                    b3:d0:02:0d:6f:70:14:44:5b:cc:ad:a7:cd:82:7b:
                    1f:7b:f2:5c:65:8d:ec:67:52:3d:79:8f:f0:3d:ed:
                    d4:d0:5e:19:a1:50:51:4e:0a:46:f1:45:e7:1b:75:
                    a4:6e:68:a7:a8:a3:13:84:b6:22:82:1b:4b:a6:9c:
                    22:60:07:d8:90:df:c8:84:e0:2d:69:72:a9:b6:c2:
                    ab:a9:f6:5b:26:f8:62:6d:43:fc:ca:af:34:2a:54:
                    e8:ed:1f:24:e4:a9:4b:99:7d:ee:02:10:ae:40:75:
                    bd:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:F9:19:BC:2E:25:7D:6C:55:B5:B9:07:69:51:5A:44:FF:B9:4B:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/28f00cc0-2814-3b3a-82bd-71e597880e5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e87:e800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:b0:99:a4:0d:20:6b:38:b3:67:10:d0:7a:37:28:87:50:24:
         13:b4:e7:f1:97:1e:6a:5d:b7:af:7f:c7:59:a8:20:31:e1:04:
         70:c8:a2:b0:c5:ff:9d:d2:b8:b0:bd:1c:df:8c:b1:5c:9f:30:
         ef:a4:7e:dd:75:d5:2f:92:35:09:11:ee:2e:ce:70:66:30:11:
         59:81:b9:cc:60:a8:63:7d:a0:ee:7d:65:bb:46:52:bc:7e:64:
         53:6f:2d:39:77:13:8c:62:da:e4:4a:04:3e:38:e8:4b:05:f6:
         d9:20:f7:6a:4a:24:8c:91:97:7a:0b:86:6f:59:36:af:c4:bb:
         23:2a:35:29:f3:de:ed:de:54:58:88:cb:60:4a:2d:b9:7b:04:
         9c:32:ff:13:13:cf:77:67:5a:e6:8e:f1:f7:dc:c8:6d:f4:2a:
         4b:1e:ea:a2:b1:32:e4:36:d9:b8:f5:1a:a4:b9:f0:27:e3:53:
         2e:d4:d2:73:a4:82:ea:c9:12:6d:63:82:d3:3e:e7:07:68:ff:
         48:0d:02:4a:37:6f:5e:6c:86:5d:cf:1b:09:c3:18:0c:3c:6f:
         eb:19:7d:33:2e:21:77:b0:26:ac:9d:3d:d0:5a:45:33:82:f2:
         31:ee:d9:b1:30:5d:ec:c4:e9:6f:e9:71:f2:72:e6:a8:d3:e7:
         77:cf:08:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 8 18:25:50 2026 by rpki-client