Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/73ff8c3e-a71d-3510-8df9-108a0af3b48b.roa
File:                     73ff8c3e-a71d-3510-8df9-108a0af3b48b.roa (raw, json)
Hash identifier:          oQ2s+StnSsT8AidAyrBdAg5qcsWkeMkj5/o3ffrmdns=
Subject key identifier:   13:33:F0:DB:0C:EF:CD:3C:9D:07:4A:E3:0B:8F:B4:E2:81:D2:8A:76
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584EAA520D170F29ED1BE473D700
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/73ff8c3e-a71d-3510-8df9-108a0af3b48b.roa
Signing time:             Thu 30 Jul 2026 01:00:12 +0000
ROA not before:           Thu 30 Jul 2026 01:00:12 +0000
ROA not after:            Wed 28 Oct 2026 01:00:12 +0000
asID:                     30036
IP address blocks:        2604:2e87:6400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:aa:52:0d:17:0f:29:ed:1b:e4:73:d7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jul 30 01:00:12 2026 GMT
            Not After : Oct 28 01:00:12 2026 GMT
        Subject: CN=22caed47-e46d-4dcb-b9a8-15ecd741c59c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:dd:26:68:e3:c8:a0:00:9d:36:8c:f3:9d:26:
                    98:0e:f0:6a:34:6f:57:93:b8:26:2f:a2:1d:d0:b1:
                    e8:f2:8b:3d:0c:79:d0:67:e1:a6:c2:7d:d8:04:4c:
                    64:da:1c:68:a0:64:47:0e:01:bb:ef:09:f7:5b:e6:
                    84:1e:90:9d:e0:7b:fd:b9:f1:04:a5:5d:8d:20:c9:
                    59:4f:40:09:cc:d1:69:49:13:88:ef:5d:81:22:8e:
                    fb:2c:ad:b4:76:e3:2f:3e:6a:75:0d:cf:99:95:8a:
                    2d:f5:94:77:2a:bc:0d:29:bf:13:3f:8f:fe:34:ec:
                    50:f1:86:e2:1d:2a:65:b1:ad:39:77:e9:03:c5:22:
                    ad:23:b0:e4:20:6b:86:f4:0a:22:de:f4:7f:86:cc:
                    73:2a:d3:44:87:94:80:34:e2:e1:f2:b5:ee:e0:59:
                    02:99:0b:eb:04:1f:7d:a6:18:54:1b:31:cb:66:83:
                    bc:4a:a1:97:8e:b5:de:c8:91:c4:71:7e:3b:c4:40:
                    a2:9a:b4:01:b2:8e:ea:5b:d3:01:c1:b0:e2:be:24:
                    be:10:0d:ba:7a:a4:f2:e8:4a:d9:55:21:11:35:be:
                    3c:7f:10:a5:b5:d4:b7:0a:4d:4c:b0:3e:72:0b:a0:
                    92:87:0a:c7:f4:be:4a:64:99:d4:13:6a:60:e8:ae:
                    56:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:33:F0:DB:0C:EF:CD:3C:9D:07:4A:E3:0B:8F:B4:E2:81:D2:8A:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/73ff8c3e-a71d-3510-8df9-108a0af3b48b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e87:6400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:ab:be:98:71:07:c8:40:95:24:07:3f:b4:5a:6b:1e:8a:ca:
         a7:51:33:e6:29:a6:d4:96:9b:49:1f:66:21:10:af:30:d8:45:
         4e:42:0b:74:e4:dd:fa:6a:e5:ec:96:8e:cb:21:0d:b2:a8:3d:
         d4:fa:73:94:b1:8a:db:3c:58:c8:b1:eb:4b:92:e0:fa:5f:90:
         ea:4e:63:2a:50:fc:6b:99:f5:00:c6:1b:c5:54:79:8a:de:70:
         05:06:d6:5a:3d:76:2c:8e:e6:a6:58:ae:c1:4d:dd:65:75:41:
         16:cb:72:99:f6:96:0b:7c:03:b7:3b:f1:61:be:ac:d2:db:29:
         c1:77:1f:0b:ff:b5:3a:ef:5e:d9:ab:e2:36:24:5f:d2:7b:b6:
         62:70:6b:96:5f:82:4d:c6:eb:9f:e3:90:cb:f8:03:a5:2f:44:
         2d:5b:f7:0a:bb:b0:13:5f:11:cd:b1:82:a6:a3:46:df:66:16:
         21:2c:15:6c:a9:2b:88:06:d6:e7:70:7e:00:da:05:25:84:c6:
         53:6d:71:64:9c:c4:4d:a3:2c:f5:5d:c7:81:47:77:41:b2:81:
         46:54:fd:6e:a6:c9:a1:c2:69:c2:6f:4a:0f:83:c7:68:ac:51:
         76:8a:bf:48:5e:98:7b:f3:86:f6:17:33:f4:71:b1:cc:c4:41:
         bb:45:ab:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:46:02 2026 by rpki-client