Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/473f7632-25d5-3bd3-aa34-135b373772ce.roa
File:                     473f7632-25d5-3bd3-aa34-135b373772ce.roa (raw, json)
Hash identifier:          TY6nNQOyyA5EgCUP3SWFTr04tbaYVuNhElUmCn0x6nI=
Subject key identifier:   F6:AC:45:94:86:E6:50:A8:8E:5B:70:E4:47:67:CD:0F:D7:45:6B:2F
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584EE4F1EE00F83D28BEA26A1100
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/473f7632-25d5-3bd3-aa34-135b373772ce.roa
Signing time:             Thu 20 Aug 2026 01:00:12 +0000
ROA not before:           Thu 20 Aug 2026 01:00:12 +0000
ROA not after:            Wed 18 Nov 2026 02:00:12 +0000
asID:                     30036
IP address blocks:        2604:2e87:8400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e4:f1:ee:00:f8:3d:28:be:a2:6a:11:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Aug 20 01:00:12 2026 GMT
            Not After : Nov 18 02:00:12 2026 GMT
        Subject: CN=cae2a570-4a15-4b3b-b364-3102cf72fce4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ef:8c:8e:7d:16:0e:ee:ca:e5:c1:36:d6:76:
                    37:f7:8d:5e:42:3a:34:a9:eb:e6:16:f6:04:a0:ab:
                    41:2b:34:c5:5d:09:33:db:a7:fe:58:2a:ef:d4:bb:
                    54:a9:0a:4c:1d:e2:b7:62:a5:9d:d5:bc:29:04:b4:
                    7d:73:1c:7e:f0:ca:c2:ac:6a:67:44:56:4b:33:d3:
                    67:31:7b:fc:0f:6c:a4:f4:98:d1:06:f0:a1:46:e3:
                    fd:ff:c7:19:f8:49:3a:d6:08:eb:ce:3d:e0:27:44:
                    d5:77:a3:87:f0:47:6a:ba:bf:3b:8e:1f:61:6f:6c:
                    d2:4b:31:bb:95:e2:5d:e8:14:8f:bd:89:4f:aa:b7:
                    a9:3f:c5:b0:41:04:9b:85:92:1d:6e:50:b2:7a:3e:
                    78:cd:2a:5e:05:3b:fe:23:9f:28:41:b0:b5:bd:47:
                    a0:dc:6b:9f:9e:9f:82:68:95:ff:90:30:87:8e:53:
                    42:4c:af:63:03:66:56:ef:b3:22:6d:12:2a:79:bf:
                    a3:3f:cd:10:0d:99:d0:44:27:f2:e9:53:8d:9e:8b:
                    01:bc:02:69:92:1e:83:18:09:92:85:ea:45:60:8b:
                    6f:91:05:fe:67:16:70:10:97:1b:87:3a:36:72:33:
                    c1:6b:24:37:58:cb:8d:6e:83:8e:49:2c:30:28:72:
                    59:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:AC:45:94:86:E6:50:A8:8E:5B:70:E4:47:67:CD:0F:D7:45:6B:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/473f7632-25d5-3bd3-aa34-135b373772ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e87:8400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:6c:19:c0:a4:fa:51:e5:95:a9:17:fe:ba:97:23:7c:82:dd:
         bb:c5:28:2f:96:80:3a:7f:c0:fa:f3:1a:e3:aa:7e:d1:33:d8:
         db:e9:ed:6f:b2:2e:a6:45:57:b5:0a:17:4b:6a:ca:2d:a1:8f:
         b9:c2:42:fd:17:f7:36:00:10:1d:3e:22:7d:6a:f4:83:bd:4a:
         eb:59:04:31:35:16:92:b7:25:74:a3:4e:b9:b2:c5:60:af:5d:
         6d:28:52:6a:51:0b:ba:c6:66:22:75:09:5f:e5:2c:c1:f9:f2:
         b5:fe:77:40:f1:ef:21:47:f8:84:b5:a7:c6:06:0d:83:84:3e:
         18:17:a6:19:ae:e0:97:64:f7:11:37:02:0a:5b:bb:60:41:3d:
         b3:c3:a4:2b:7e:5a:69:ae:9e:36:ba:0e:69:c4:69:ec:a4:39:
         21:fa:8d:8c:f8:55:08:5f:fb:c4:df:dd:f9:16:0e:6a:4b:0e:
         7f:e6:bb:db:dc:b9:3e:7d:81:d6:55:0d:81:b1:e6:97:f9:16:
         96:03:40:24:16:34:92:d2:48:6f:8f:0e:ce:9e:8f:f4:ec:68:
         30:84:fb:b0:9d:41:97:b1:4f:d4:30:6a:48:6d:4a:52:65:f8:
         04:81:30:29:14:78:b7:17:88:f1:d2:ea:90:1d:e5:f1:18:90:
         9c:65:28:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:47:33 2026 by rpki-client