Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3a0cda59-96c5-3074-afdf-1543a11a0c6f.roa
File:                     3a0cda59-96c5-3074-afdf-1543a11a0c6f.roa (raw, json)
Hash identifier:          pVH0v8LTjhJsOcetUzpmmzE6P87tCLoyGNxp4wrXc1o=
Subject key identifier:   86:40:14:67:55:21:85:A7:3C:AD:EA:F0:5D:DD:0D:EF:0B:C6:42:D0
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584E428F1C59BC8D2B73FDF7A2E4
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3a0cda59-96c5-3074-afdf-1543a11a0c6f.roa
Signing time:             Mon 22 Jun 2026 21:00:12 +0000
ROA not before:           Mon 22 Jun 2026 21:00:12 +0000
ROA not after:            Sun 20 Sep 2026 21:00:12 +0000
asID:                     30036
IP address blocks:        2604:2e8d:d800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 25 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:42:8f:1c:59:bc:8d:2b:73:fd:f7:a2:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jun 22 21:00:12 2026 GMT
            Not After : Sep 20 21:00:12 2026 GMT
        Subject: CN=a1ead342-a818-45b0-ab29-655a2adf9480
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:37:6d:ad:71:73:ac:df:6a:7f:d4:37:88:f9:
                    0b:08:af:9e:81:24:3f:ac:45:37:68:eb:1f:51:15:
                    99:7f:fd:cc:28:21:b1:b9:d8:ad:b1:74:95:aa:6c:
                    92:1d:40:e6:17:17:bc:21:23:eb:33:23:54:9f:fb:
                    5b:4a:6c:23:cf:53:54:02:e6:8d:d8:f2:7a:26:10:
                    24:cc:39:d4:50:8d:e3:61:05:35:e2:8b:da:7d:12:
                    ad:2c:86:1d:5d:85:ba:8c:14:08:a8:13:f3:15:59:
                    b6:75:58:be:eb:cf:64:b9:f7:e9:87:35:23:73:b4:
                    7e:15:b7:61:99:fb:c1:86:a6:eb:8c:0c:53:53:ec:
                    5b:e2:0b:da:df:a2:e1:be:83:ff:ce:66:12:eb:7e:
                    96:f2:19:ab:32:9e:bf:4a:2d:4f:ba:ea:b7:74:26:
                    ba:9b:d3:9a:6a:5a:ae:e8:a8:fa:76:de:90:fb:31:
                    ea:e2:ea:b4:9d:08:d5:e1:81:50:a1:f8:1d:0a:7e:
                    96:e6:4e:d5:9c:55:34:ca:20:c2:67:4b:1a:b6:3f:
                    8a:6a:b4:9b:e7:70:6c:e7:19:be:3b:bf:4b:5c:fc:
                    f5:e8:4a:7b:64:97:7e:90:83:aa:14:64:05:68:22:
                    79:e9:40:dc:51:73:04:fb:10:36:41:92:a4:64:c4:
                    d9:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:40:14:67:55:21:85:A7:3C:AD:EA:F0:5D:DD:0D:EF:0B:C6:42:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3a0cda59-96c5-3074-afdf-1543a11a0c6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8d:d800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:45:c7:93:55:05:c6:42:25:fe:42:0a:7d:71:4c:43:ce:55:
         18:63:19:0f:f7:1f:18:c9:69:9e:40:a4:41:f1:75:0b:57:28:
         f9:42:4b:ed:68:d1:1c:97:ef:7d:45:be:89:50:e7:d2:3b:99:
         73:78:89:81:61:e0:e4:95:f6:c3:d4:9e:bc:e5:2b:ef:d4:57:
         48:bd:7c:16:10:24:d2:f7:93:58:f4:5d:6a:a1:17:9c:0d:31:
         47:b7:be:0a:7f:0d:15:17:bc:56:4b:e9:8f:dc:ce:51:b5:29:
         3b:04:c9:35:4b:e1:52:a3:57:19:92:6e:99:34:61:5e:27:59:
         62:b5:34:9b:81:ca:07:a4:00:56:d1:2a:5c:93:0a:77:c9:ca:
         9e:d8:fb:45:4a:7f:1d:13:86:64:0b:88:96:ad:07:8c:b7:1e:
         21:92:a3:43:b3:3d:0f:55:04:c8:90:3b:07:7a:03:8c:80:da:
         7e:82:0d:38:5d:ae:2f:de:17:3b:a0:95:eb:75:d6:51:f8:8b:
         0c:71:07:ee:c6:8b:65:61:37:47:e1:a2:05:8a:08:49:db:d8:
         2f:48:3b:49:0d:fc:ab:1c:00:32:45:15:a6:05:69:a8:26:5d:
         d3:13:fa:51:72:d3:ec:1e:81:61:67:66:87:32:e1:47:be:b8:
         65:8b:80:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 05:34:27 2026 by rpki-client