Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/562ebad0-50b9-3779-9ee7-2ac4637c1fa4.roa
File:                     562ebad0-50b9-3779-9ee7-2ac4637c1fa4.roa (raw, json)
Hash identifier:          Xvv/gbvqdSsWgCXKHhSAj+lwziaFYdOTk5BWPguGuAQ=
Subject key identifier:   8F:B2:F5:1C:25:33:17:29:DB:CC:B4:45:89:89:1D:CA:A8:8E:1F:B4
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584E4559CCC6A309D0B2F356D200
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/562ebad0-50b9-3779-9ee7-2ac4637c1fa4.roa
Signing time:             Tue 23 Jun 2026 21:00:12 +0000
ROA not before:           Tue 23 Jun 2026 21:00:12 +0000
ROA not after:            Mon 21 Sep 2026 21:00:12 +0000
asID:                     30036
IP address blocks:        2604:2e80:801::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 25 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:45:59:cc:c6:a3:09:d0:b2:f3:56:d2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jun 23 21:00:12 2026 GMT
            Not After : Sep 21 21:00:12 2026 GMT
        Subject: CN=cb9b728c-c7ca-4984-bacd-a6af7c4c7fcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:8a:54:d2:24:d5:39:47:29:d0:66:68:25:2e:
                    64:34:c8:33:a4:2b:cb:90:4b:63:98:bb:de:70:82:
                    6b:26:9e:6c:65:89:92:57:f1:b5:fd:6c:ba:3c:7f:
                    f9:b1:39:8d:38:e5:d2:2e:ad:4b:36:1e:85:81:1e:
                    04:fe:69:49:15:49:7b:f7:12:72:00:92:08:cc:6b:
                    f3:85:43:dd:5e:64:4f:da:95:7d:5b:be:4d:fa:64:
                    53:9d:de:12:a0:2d:25:a9:69:95:2d:2d:fa:d9:e3:
                    3e:2e:31:82:c3:b6:8a:54:63:27:d8:2c:5d:eb:16:
                    31:bf:40:90:16:c7:5a:48:2a:40:63:bd:3e:8a:6e:
                    a6:5d:cb:1c:77:a8:c7:bc:45:a1:08:7e:9b:6a:e4:
                    86:bb:b1:e2:da:85:ba:d4:c8:d2:9f:6d:e7:b9:ed:
                    7f:c4:22:0e:d5:5f:0f:9e:79:ea:30:10:2d:6f:73:
                    99:ee:ec:fa:fd:cf:7a:ed:fa:38:26:69:6d:83:21:
                    bb:17:dd:e4:86:96:70:f7:fb:69:ee:c0:05:53:c5:
                    7a:eb:a3:0b:93:3a:0e:ec:30:4b:e0:d7:bb:0b:9c:
                    a2:d0:8b:a7:a5:af:7c:86:7a:0a:e9:e1:ef:43:a6:
                    63:a2:22:08:eb:2d:8d:03:b9:83:19:d2:a8:d4:43:
                    a9:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:B2:F5:1C:25:33:17:29:DB:CC:B4:45:89:89:1D:CA:A8:8E:1F:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/562ebad0-50b9-3779-9ee7-2ac4637c1fa4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e80:801::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:20:8d:c9:16:be:94:54:f4:a3:7c:2c:d0:b4:2a:1b:32:94:
         15:38:75:42:46:ec:b4:d5:86:99:44:2e:8f:20:2d:1e:0a:78:
         7e:d4:6f:05:27:33:44:bc:e1:a0:cb:97:af:ff:51:c9:1a:65:
         26:10:f0:29:6e:f2:aa:18:51:3b:be:e3:6b:09:91:23:68:ed:
         84:3f:ff:b6:bf:45:4f:08:ed:0b:f1:b7:db:46:4f:c0:88:37:
         38:b7:87:d5:4a:39:79:28:43:5f:f1:f9:46:80:b7:9b:f8:ba:
         c4:c7:6b:05:35:b7:b7:ab:78:17:b0:4a:cd:9f:f8:ca:d8:36:
         9b:2b:ed:34:e4:87:4b:e1:71:75:3d:63:41:d6:26:14:24:f5:
         1e:79:ad:a1:de:7e:3b:04:27:80:f0:20:7f:70:e2:cd:4c:1e:
         b4:e1:8a:0c:8b:c6:38:5a:7d:f1:8c:10:42:56:7f:9b:01:e1:
         8f:7c:11:b4:96:50:bd:7f:1d:31:44:f0:c4:5d:b2:a3:b1:19:
         fd:c1:af:e1:5e:91:65:d9:f4:63:b1:16:23:f5:3e:0e:1b:b5:
         32:5a:f7:96:9b:3f:eb:cc:67:20:6b:c7:d4:e5:7c:c3:db:57:
         47:9f:3f:e5:5a:fd:1e:12:35:6a:f7:c0:b2:cd:cb:9b:1a:40:
         e7:50:0f:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 03:19:02 2026 by rpki-client