Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/474a9147-b845-3ae9-8166-38a9f07904b8.roa
File:                     474a9147-b845-3ae9-8166-38a9f07904b8.roa (raw, json)
Hash identifier:          XBdiP0H2gvnHgUDZaAqtBsKqudnKSvKM4JtxLBox+/8=
Subject key identifier:   F6:6B:C5:D6:48:45:C8:2D:48:1C:3A:57:01:7E:73:1C:DD:3A:CD:11
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584E3069AD7B1130E228A686A4C0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/474a9147-b845-3ae9-8166-38a9f07904b8.roa
Signing time:             Tue 16 Jun 2026 09:00:12 +0000
ROA not before:           Tue 16 Jun 2026 09:00:12 +0000
ROA not after:            Mon 14 Sep 2026 09:00:12 +0000
asID:                     30036
IP address blocks:        2604:2e8f:f000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 25 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:30:69:ad:7b:11:30:e2:28:a6:86:a4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jun 16 09:00:12 2026 GMT
            Not After : Sep 14 09:00:12 2026 GMT
        Subject: CN=4cd4af15-9e5b-47a8-8932-499f696a7bdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:7d:d3:43:69:00:c3:fa:45:92:71:fc:91:cd:
                    78:74:ea:ee:54:8e:5b:d7:ef:69:9d:36:6f:c0:42:
                    4b:61:ce:2a:1d:3a:be:e1:69:c9:e3:ee:9d:74:24:
                    1a:b6:a6:1e:c9:b4:33:d8:b2:19:80:de:bb:2b:51:
                    ca:30:0e:cc:75:4a:7a:a2:55:4d:90:f6:60:1f:46:
                    b6:47:35:d0:72:d3:f6:14:f7:24:d4:12:55:a0:e6:
                    fc:b4:9f:a7:ea:ce:86:a0:dc:af:ac:78:b0:3d:e1:
                    c4:e6:7d:f5:3d:79:fe:06:79:43:84:4e:83:80:47:
                    ca:03:db:f5:1a:93:24:2c:25:6b:ac:53:f8:30:f1:
                    85:d3:a3:d0:9b:40:87:d5:1c:9a:41:bf:68:f6:0f:
                    cc:93:2e:2a:84:09:cd:90:04:d3:bc:9d:61:bc:a7:
                    53:66:02:ae:e6:9a:ec:6c:ea:6b:29:e6:18:77:5a:
                    d5:19:58:8c:36:24:d5:3e:2e:5b:14:2a:89:d2:25:
                    e6:8e:04:db:7c:df:91:59:ac:79:40:20:42:ce:ad:
                    bf:e0:ea:f4:32:bc:23:b8:59:e7:ad:b4:80:11:3a:
                    73:a7:8d:4a:87:45:2c:df:25:7d:68:6e:4e:e0:19:
                    18:e3:01:cc:33:7b:59:ac:2e:72:60:08:4b:68:76:
                    00:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:6B:C5:D6:48:45:C8:2D:48:1C:3A:57:01:7E:73:1C:DD:3A:CD:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/474a9147-b845-3ae9-8166-38a9f07904b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8f:f000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:3b:d6:8b:a5:03:de:ba:51:39:6a:2e:f0:c7:71:f6:9a:94:
         53:0c:f2:57:fc:aa:0f:89:28:9b:2c:6e:1e:e8:7f:ed:2d:d2:
         3e:da:1f:da:17:4b:79:4f:ed:f7:59:d6:a4:65:34:8b:45:06:
         e6:3e:ce:79:dc:eb:4d:d8:60:be:b9:61:61:e4:38:fa:4b:9d:
         aa:9b:f9:9d:75:c6:d1:77:8c:b3:da:6a:a1:b6:ba:de:70:48:
         aa:4c:35:16:25:8a:69:8e:1a:02:fb:f4:c6:10:27:ba:32:96:
         2f:f7:61:6c:89:0a:e7:9e:b8:0d:f4:e7:98:95:0c:49:f2:71:
         4b:e1:1e:c0:c1:76:ae:7a:12:fc:6c:2b:66:98:84:d4:ad:b6:
         73:a4:b2:cf:53:b9:9d:59:8e:57:ec:ce:29:d4:1d:b4:bc:08:
         2d:30:eb:1b:ea:d2:82:71:04:34:6f:e9:29:45:ce:7b:73:25:
         51:63:69:85:38:c9:c3:c7:cc:f0:d7:ff:1e:40:30:31:a9:87:
         5f:72:c0:45:9f:fa:5f:38:64:b5:89:b5:38:46:43:43:f5:df:
         60:5e:76:56:86:d2:a8:69:ef:e7:31:45:e9:2c:69:d8:8b:77:
         19:f0:b9:fe:b7:39:3f:3b:0c:58:ba:b9:0f:1c:22:2a:0f:a7:
         7e:bd:4f:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 03:23:37 2026 by rpki-client