Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/7a36cfd8-c5c8-3752-917a-0b4da8f99dfe.roa
File:                     7a36cfd8-c5c8-3752-917a-0b4da8f99dfe.roa (raw, json)
Hash identifier:          rFUi1ZS6SOzpJNLOXbVtBAmQdlFWbcV4Gpsz+42ZVyc=
Subject key identifier:   6A:2E:A8:8E:4E:51:11:8C:12:81:03:8F:11:93:2D:12:AE:A4:10:C2
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584D1707F05AA853A88EF2A6F900
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/7a36cfd8-c5c8-3752-917a-0b4da8f99dfe.roa
Signing time:             Sat 07 Mar 2026 14:00:41 +0000
ROA not before:           Sat 07 Mar 2026 14:00:41 +0000
ROA not after:            Fri 05 Jun 2026 13:00:41 +0000
asID:                     30036
IP address blocks:        2604:2e88:1000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 13 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:17:07:f0:5a:a8:53:a8:8e:f2:a6:f9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Mar  7 14:00:41 2026 GMT
            Not After : Jun  5 13:00:41 2026 GMT
        Subject: CN=2c5da200-50a5-4546-a0b1-cc6d2a8c81fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:1f:e5:08:36:44:46:05:1e:37:e2:a5:46:3c:
                    34:c2:79:41:1a:ae:9f:7b:26:e6:fe:3f:4f:0f:d2:
                    c7:b1:fa:dd:3a:6d:3c:36:e4:02:47:40:b7:c2:ff:
                    77:96:6a:b5:34:c5:4a:b2:8a:84:cd:46:de:5f:bb:
                    da:a5:a4:34:f2:6f:78:10:7e:24:6b:31:bc:ee:e1:
                    87:f1:26:13:01:f8:e7:df:72:f5:0a:75:d5:c0:24:
                    19:13:be:88:a6:50:54:d9:12:42:5a:fd:02:f0:7d:
                    61:72:ab:a8:39:85:7b:d6:08:7b:62:ee:4e:53:09:
                    0a:8c:7a:44:a6:72:49:fa:4a:33:74:c7:9a:91:6f:
                    14:48:37:a5:57:4e:be:76:ad:24:20:3a:01:7d:75:
                    4a:51:20:42:13:05:50:4a:45:74:0a:3a:fa:b4:4c:
                    64:4a:fa:fc:4d:ce:e7:4a:97:4b:58:fc:93:36:ad:
                    24:2b:06:1c:ee:81:9d:f1:27:c1:d2:8e:b7:70:66:
                    31:ce:d2:f8:d3:49:b3:18:5f:e6:3b:1c:f4:05:4a:
                    5f:c6:2c:09:32:06:fb:4c:a5:9d:b2:80:5e:78:e7:
                    41:d0:99:41:24:ca:4b:d5:7c:0f:7d:7e:c9:e4:4f:
                    4b:03:15:fc:c1:04:b7:c2:44:00:da:e5:2f:f7:c7:
                    03:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:2E:A8:8E:4E:51:11:8C:12:81:03:8F:11:93:2D:12:AE:A4:10:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/7a36cfd8-c5c8-3752-917a-0b4da8f99dfe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e88:1000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:d2:02:39:c6:be:5b:d1:fa:fc:63:09:53:c5:2b:59:a3:23:
         1c:f1:12:3a:2e:89:fe:06:71:a6:4c:4f:01:1a:f5:0d:d9:b9:
         2c:59:f2:0b:f8:20:d8:5c:da:7a:5b:85:3b:ff:eb:55:a3:86:
         5d:71:20:1c:f4:f7:30:f0:32:b9:12:67:cb:fc:6c:56:17:f2:
         49:c9:f9:d0:ab:73:e4:ad:b4:98:13:79:3e:48:d0:38:79:2d:
         c5:ac:1f:34:8b:c4:24:ff:fe:a9:76:54:39:79:91:32:9a:b4:
         60:f6:23:13:3a:f2:0a:13:ad:f9:17:03:fa:a6:3c:ac:b4:16:
         6b:d1:df:eb:07:c1:c4:5f:26:31:d9:48:2b:6c:0a:4e:ff:c4:
         ed:48:30:ae:ab:57:ca:18:92:b5:62:e5:83:6f:5d:85:6e:83:
         6c:dd:cf:a4:60:38:78:99:89:14:e1:79:2f:26:48:18:bf:24:
         b6:e8:1e:30:0d:f5:7b:eb:1d:2c:be:5e:48:a3:b7:85:85:7e:
         44:f0:9a:36:5a:d9:6c:66:31:f5:36:4a:cf:12:8a:d1:1d:1b:
         b9:56:cc:a5:67:3c:9f:4a:fd:ee:c9:b0:3e:de:fd:d6:0a:00:
         d2:70:96:75:a8:30:42:3e:75:bc:10:8c:5e:c1:5b:c5:21:1f:
         10:a1:df:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 06:35:04 2026 by rpki-client