Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/767fddc9-7679-30d8-a32c-3cfd94c9d259.roa
File:                     767fddc9-7679-30d8-a32c-3cfd94c9d259.roa (raw, json)
Hash identifier:          3604aMQSMNQm2ILiK87EmH09W7HunZY2Df/bfXWA8Ck=
Subject key identifier:   61:33:50:A9:AD:DD:26:EE:D8:FF:DE:A8:93:32:B7:ED:E3:3B:FC:DF
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584DA28018CC0A8547FACBB24340
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/767fddc9-7679-30d8-a32c-3cfd94c9d259.roa
Signing time:             Sun 26 Apr 2026 13:00:30 +0000
ROA not before:           Sun 26 Apr 2026 13:00:30 +0000
ROA not after:            Sat 25 Jul 2026 13:00:30 +0000
asID:                     30036
IP address blocks:        2604:2e87:d400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a2:80:18:cc:0a:85:47:fa:cb:b2:43:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Apr 26 13:00:30 2026 GMT
            Not After : Jul 25 13:00:30 2026 GMT
        Subject: CN=78933e2e-c3bf-49b0-88e3-b0244223b0d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:24:7f:5e:ea:7a:46:f9:04:fd:04:46:5b:65:
                    1e:31:ed:0a:60:04:69:26:f5:f6:4c:f9:e9:83:b2:
                    6d:f7:32:d0:4e:5e:00:18:4a:09:66:2d:a9:0b:2d:
                    13:9c:0e:85:e9:55:55:62:21:d5:c2:73:d7:1b:e0:
                    68:c5:9f:93:28:80:0e:b2:bb:48:14:81:27:a1:0d:
                    6a:dd:cb:e1:16:45:08:c8:3c:b0:d3:64:46:e1:cd:
                    0b:05:d3:48:dc:9e:ac:25:4f:4c:52:b8:9d:e0:8b:
                    75:76:6a:4a:6f:29:27:b1:fa:cf:17:3d:0f:fe:8d:
                    5c:97:6c:4c:53:d3:92:40:77:a9:93:80:15:ae:bc:
                    21:b3:40:4c:51:8a:19:b6:8f:3c:88:be:03:50:b6:
                    f0:f0:ae:eb:a2:8d:f5:17:03:78:d7:22:28:80:8f:
                    a4:12:d3:63:29:d8:db:72:a8:cb:a2:ff:70:01:76:
                    32:30:a0:53:0d:61:ed:d2:16:26:27:bc:34:50:5e:
                    3d:2a:2e:15:75:87:c2:c3:61:cd:35:c6:dc:a0:d4:
                    35:92:e4:4d:ee:fd:2b:92:b5:2d:6e:59:37:37:1c:
                    51:d7:00:79:d2:ff:12:71:36:bf:c2:5f:62:df:6b:
                    8f:e6:e8:91:4f:d1:2b:39:97:4e:e9:6f:16:34:64:
                    a6:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:33:50:A9:AD:DD:26:EE:D8:FF:DE:A8:93:32:B7:ED:E3:3B:FC:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/767fddc9-7679-30d8-a32c-3cfd94c9d259.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e87:d400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:b3:92:c6:4c:53:65:3f:45:94:e5:e6:71:2f:d6:a5:d5:78:
         c9:f3:43:25:af:39:e9:0f:0a:f7:47:e6:60:42:0d:f4:a9:83:
         60:d8:d8:fe:c5:35:33:7b:62:32:64:f0:b2:5c:9a:6b:30:d8:
         a7:0d:d2:63:3a:5a:46:9d:ad:90:e8:47:6c:23:c5:35:b2:d3:
         62:af:2d:c3:ab:83:1a:5f:06:25:73:e7:f2:95:23:00:26:fb:
         08:86:68:aa:5c:8d:7b:fd:a5:9b:d4:1b:8b:e1:14:4f:0e:cb:
         38:8a:06:fd:3e:ec:20:c7:1a:7a:98:d3:9a:2d:fe:5b:22:e5:
         ca:d9:d0:39:ee:74:f5:e1:12:b7:b0:65:9e:12:49:91:5c:d0:
         30:19:9b:51:01:7f:35:88:49:dc:3d:9d:38:b4:18:3d:f6:03:
         d7:43:7b:92:68:78:ad:52:7d:bf:c9:37:91:d5:0a:ec:34:77:
         63:de:a3:a6:5d:f2:ea:29:16:c9:68:4a:32:38:9b:67:b0:89:
         dd:4c:c9:49:ff:d5:9b:46:e1:72:c9:26:22:97:2c:72:c5:0f:
         a6:3a:80:0e:41:bf:f7:b0:3f:2a:51:74:26:5a:fc:77:aa:c4:
         25:69:69:52:7a:01:1a:65:98:0e:6c:03:ad:dc:4a:8a:13:ba:
         ce:80:15:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 8 19:34:34 2026 by rpki-client