Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/63cfb442-e4d5-3cf8-a15b-9742ca5f7b5f.roa
File:                     63cfb442-e4d5-3cf8-a15b-9742ca5f7b5f.roa (raw, json)
Hash identifier:          yH3CIeV9zcSb28wRZdaAD75/lrMPBMcwYgqrc6wiAiE=
Subject key identifier:   71:63:88:71:B5:C4:36:A7:0E:39:DD:EF:6F:B5:9D:AD:17:A8:FD:8A
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584D143D5874ED8489FBA3E705C0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/63cfb442-e4d5-3cf8-a15b-9742ca5f7b5f.roa
Signing time:             Fri 06 Mar 2026 14:00:40 +0000
ROA not before:           Fri 06 Mar 2026 14:00:40 +0000
ROA not after:            Thu 04 Jun 2026 13:00:40 +0000
asID:                     30036
IP address blocks:        2604:2e87:fc00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 13 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:14:3d:58:74:ed:84:89:fb:a3:e7:05:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Mar  6 14:00:40 2026 GMT
            Not After : Jun  4 13:00:40 2026 GMT
        Subject: CN=097cabe6-dbec-45ef-9ed3-707cce45726c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:cf:24:50:c3:c3:76:d1:6e:68:af:91:aa:0b:
                    0b:1e:56:c2:14:a3:18:1b:52:1d:4a:73:a7:94:37:
                    dd:e5:0b:46:f3:dd:c1:95:97:66:51:ac:31:cf:81:
                    01:50:24:33:b6:43:3d:85:4c:e9:06:1f:da:e8:c4:
                    63:18:28:7c:19:7e:87:ac:1b:90:e8:b0:fe:56:2b:
                    e3:0a:ae:a8:ba:94:9f:90:07:3c:ad:80:bd:05:81:
                    ed:7c:69:78:44:99:de:ba:df:4b:4b:6e:d8:cf:71:
                    a3:8d:bb:b1:d5:af:e6:9a:3e:38:51:59:3a:8d:8e:
                    b2:d1:e4:db:ca:a0:35:cc:92:72:49:8e:a1:39:cd:
                    7e:db:dd:7e:f7:8b:75:a8:c8:1d:f6:80:4b:4b:eb:
                    f9:da:e2:31:16:f9:6b:e5:61:0a:0e:6c:29:b5:e6:
                    20:29:16:23:7c:28:45:65:23:f5:26:50:a5:b2:da:
                    bb:9c:52:fe:76:49:b5:e6:ef:75:94:7c:67:36:85:
                    35:64:93:94:96:4d:97:f4:3e:9e:fc:6f:9b:f7:83:
                    46:b0:aa:06:1d:d9:f7:fe:4b:8d:67:e4:ac:84:f3:
                    c6:78:c6:b5:0c:9e:2d:d7:bd:7b:28:b8:73:95:92:
                    56:04:51:e0:b2:65:2f:8a:ee:88:c2:2f:48:b3:79:
                    13:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:63:88:71:B5:C4:36:A7:0E:39:DD:EF:6F:B5:9D:AD:17:A8:FD:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/63cfb442-e4d5-3cf8-a15b-9742ca5f7b5f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e87:fc00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:3a:03:f5:c4:41:dd:79:82:71:f8:e0:dd:8f:3e:db:e0:e1:
         ad:ae:78:75:76:7a:0a:4a:e2:ef:d9:57:88:bc:12:11:56:2e:
         8f:35:4b:2b:fd:43:75:63:26:73:e4:8c:45:5f:36:a6:dd:c5:
         db:ef:f7:55:c3:45:2f:f9:be:7b:76:e5:2c:7f:67:70:f9:fb:
         71:1e:0a:0c:f5:37:54:d0:89:c7:ef:90:c9:a3:e5:da:aa:d9:
         c3:bc:56:ed:d3:ec:6e:48:06:52:04:7b:a3:61:0a:0e:1b:ef:
         d8:25:1c:24:b5:4d:44:53:1e:f9:ac:29:19:73:25:ce:ef:74:
         5b:c0:3f:2a:2f:a4:68:f2:1a:d2:b2:7d:e4:5a:ac:e5:15:0b:
         f8:53:29:a3:cd:34:24:10:32:fa:35:4d:f3:be:ed:08:5e:fb:
         fb:b5:54:73:48:a0:41:8e:5b:c1:28:00:10:19:60:04:2b:43:
         f7:b3:6d:33:03:56:c3:db:73:64:b7:c6:86:6b:7c:d3:e5:33:
         64:8a:f1:72:f6:17:c2:a7:6a:19:8b:aa:38:12:c8:d1:6f:22:
         e9:c2:f6:fc:fb:c0:bf:69:ca:6d:7f:12:26:24:4e:dd:bf:74:
         b0:d0:d3:eb:ba:31:db:c1:70:0b:55:11:98:b2:4c:1a:ec:09:
         7c:ca:09:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 06:35:07 2026 by rpki-client