Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/64b1e2f1-ad00-3d38-9458-4083658cba9d.roa
File:                     64b1e2f1-ad00-3d38-9458-4083658cba9d.roa (raw, json)
Hash identifier:          bU4jVjJ1Qir77r0Wk0XOoJxnC5zFtswGaSl+SrPXpbQ=
Subject key identifier:   77:84:47:3F:A4:9D:38:62:0C:37:72:09:F7:65:CA:F1:36:45:57:E6
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584EA79D2B36912769ED17CB0F20
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/64b1e2f1-ad00-3d38-9458-4083658cba9d.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     30036
IP address blocks:        2604:2e89:5400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9d:2b:36:91:27:69:ed:17:cb:0f:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=d227d23d-a07a-4f88-b904-236b3f0340b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:14:20:ab:2b:cc:8f:3c:b6:c0:27:7f:d3:19:
                    f8:8d:90:bc:b5:fc:f9:6d:34:9f:69:21:48:ec:db:
                    46:a7:3b:ec:6c:2b:6f:43:3d:43:cf:ad:6c:ac:6f:
                    5f:15:ae:54:bf:c2:3e:2a:96:53:0d:c3:55:7f:17:
                    c9:f1:1e:6a:29:85:d0:6f:31:7b:c7:3e:d8:21:b0:
                    10:53:9e:9b:6a:fc:99:22:b1:2b:42:d2:a7:dc:f1:
                    12:15:29:56:23:8c:03:c1:6e:17:03:6e:65:34:84:
                    d8:45:1d:aa:d5:be:e7:15:fe:56:93:e3:b6:14:9d:
                    c9:97:b2:87:c1:21:81:72:e3:72:60:3c:fc:4d:62:
                    12:f4:5d:21:e0:51:d0:69:ec:41:45:d8:fb:ce:54:
                    a0:47:53:ab:15:17:bb:92:90:14:71:d9:97:a5:ab:
                    14:b6:2e:ef:ef:43:50:35:e6:0a:cf:f3:66:da:b9:
                    f7:b3:aa:7c:4e:b4:8f:f2:b0:88:51:bb:0c:13:db:
                    35:e9:6a:1e:40:e1:6a:98:87:e8:ec:a5:30:df:e6:
                    bd:86:0e:df:3b:0b:d7:e0:61:be:3d:ef:7f:93:04:
                    51:f6:58:16:eb:cf:d0:07:38:05:20:4c:0b:c9:40:
                    ae:5e:41:99:6d:d5:d8:e1:d6:67:a9:22:2f:dd:6a:
                    42:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:84:47:3F:A4:9D:38:62:0C:37:72:09:F7:65:CA:F1:36:45:57:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/64b1e2f1-ad00-3d38-9458-4083658cba9d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e89:5400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:0e:52:56:3b:aa:6f:36:a2:1b:5c:15:b1:9b:75:bf:d0:2f:
         49:68:54:ab:f6:30:0f:f8:a6:a0:87:a1:de:31:54:33:b2:42:
         3e:d8:2e:2c:fd:c8:f7:98:38:f2:b8:86:97:af:ff:f6:d0:8f:
         e3:1f:e9:66:2b:ec:1c:c6:ff:ae:c2:ac:f1:1e:1c:fe:33:b8:
         5d:b4:64:26:e4:fa:4e:97:28:28:1b:22:06:88:04:c5:c6:01:
         3b:f2:78:d9:10:4c:69:e3:c8:1d:ce:7c:a6:43:c9:7f:03:c0:
         ae:0a:b7:53:81:73:3e:95:4d:53:29:94:0f:8b:c7:bf:2b:b6:
         66:dc:05:4b:b0:af:cd:7f:45:73:90:19:39:fe:ea:b2:99:88:
         9e:19:cf:ab:9e:bd:62:82:f2:05:cc:d8:97:c7:64:26:b2:be:
         1a:b3:97:3a:a5:f7:eb:4e:54:0e:80:67:e1:18:0c:0f:8f:37:
         b7:40:8e:e9:88:bf:52:19:6c:db:98:b8:19:7c:16:58:c8:92:
         ba:ca:90:e6:1c:41:35:22:b2:e0:be:34:cd:96:fa:52:1f:a3:
         93:5d:2c:6d:12:3d:eb:24:62:c0:83:0a:b6:9a:b7:b7:b2:a0:
         22:41:72:ac:8b:2d:48:e5:b3:fe:a2:0c:8d:67:53:bd:91:a3:
         3f:3e:4a:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 02:29:26 2026 by rpki-client