Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/35833895-0e41-32bf-815e-27e190285c7d.roa
File:                     35833895-0e41-32bf-815e-27e190285c7d.roa (raw, json)
Hash identifier:          45CbZUmfda/y2vtfJ5ocBm7OYUHBzkb0b2LNI0nSuN8=
Subject key identifier:   21:5E:1B:0B:B3:7C:D4:A4:84:9B:35:71:BF:D5:39:2C:AF:10:28:6D
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584EA7A0A8143D3FBF73B2324760
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/35833895-0e41-32bf-815e-27e190285c7d.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     30036
IP address blocks:        2604:2e8b:fc00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:a0:a8:14:3d:3f:bf:73:b2:32:47:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=33d099ee-136e-4770-a7ad-05ac739024b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:ba:ca:53:91:f5:80:a6:5f:05:77:e6:59:1a:
                    ed:78:e0:b6:6f:72:b9:82:ce:83:de:2b:f9:7a:1a:
                    bc:9e:62:f9:0e:c3:57:c0:3c:90:e3:8d:fb:ea:a4:
                    b2:94:e1:99:bc:eb:51:d3:c2:98:5e:43:90:02:6b:
                    5d:02:08:80:9d:f7:99:a0:99:0c:5f:2c:1d:f2:78:
                    58:e3:98:30:e8:e0:11:bc:38:c7:33:49:75:9f:24:
                    14:b4:bb:9c:73:ec:1a:cc:a8:2a:e7:23:68:82:ec:
                    8b:02:60:0b:14:fd:c4:96:57:6f:ed:f6:b8:7a:f6:
                    fc:b3:d4:46:e5:12:ff:a9:08:74:bf:ed:82:09:bb:
                    a4:63:21:35:83:48:a5:7a:dc:7f:20:bf:ae:f7:e3:
                    1b:8c:c1:da:aa:51:ae:18:13:db:50:40:b0:72:9d:
                    59:5e:ed:9f:71:81:09:6a:be:35:bd:32:e2:ba:db:
                    09:87:c8:b9:aa:d6:4a:8d:7b:d0:b8:66:4e:c0:ba:
                    5c:94:95:d4:43:6e:75:4d:5c:3f:7e:27:0c:ec:66:
                    9e:d9:fd:62:0d:c5:aa:88:ac:42:6d:e4:3d:85:4c:
                    88:9a:74:09:e9:8c:a2:e8:7e:4d:42:82:3d:55:d7:
                    ec:39:ff:b8:f2:ae:7c:6b:ca:47:15:9c:fc:24:f3:
                    7e:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:5E:1B:0B:B3:7C:D4:A4:84:9B:35:71:BF:D5:39:2C:AF:10:28:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/35833895-0e41-32bf-815e-27e190285c7d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8b:fc00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:d3:0a:19:f9:20:1d:87:fc:c0:5a:7f:d0:fa:4d:57:af:ac:
         5b:d9:09:cc:8e:02:93:ad:0d:5f:fb:13:b1:29:fc:8f:15:f2:
         68:55:c5:c5:0c:36:6a:e8:38:b2:4b:72:f9:67:ff:03:0a:8d:
         84:69:ba:43:a0:2b:f9:78:4c:13:76:4d:8e:d7:ed:78:10:a2:
         b0:d8:bc:84:0d:b4:48:82:bf:9e:56:b6:e2:0c:5b:46:f5:c0:
         63:b8:86:b7:2f:e3:d0:7f:07:98:83:44:0b:35:3d:8a:ab:4e:
         53:98:69:76:a5:ef:18:eb:55:f3:af:91:db:84:3a:49:dc:dc:
         51:8f:0a:a1:5c:b2:8f:91:4a:cb:c3:4e:d3:0f:ef:9d:21:9f:
         03:63:e3:26:3f:0d:7f:37:1d:08:76:b9:38:42:b5:2b:e5:74:
         41:10:76:0b:aa:93:cd:e1:ed:b3:08:c1:33:9c:ba:b6:23:c2:
         88:e7:b4:9a:71:27:ce:f8:6c:7b:af:51:ad:df:32:71:26:70:
         51:f2:bd:dd:82:f5:d8:f1:1b:3a:d0:71:fb:b5:34:43:99:85:
         22:5d:a6:91:43:57:c3:80:24:cf:28:0e:58:01:1b:68:ff:6a:
         a4:96:ef:2a:3c:48:c7:f4:0b:8b:a0:09:19:c0:2d:7c:19:1f:
         35:7c:9e:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:47:45 2026 by rpki-client