Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/7c45ddde-9bbb-3d35-9b11-aa413b04b813.roa
File:                     7c45ddde-9bbb-3d35-9b11-aa413b04b813.roa (raw, json)
Hash identifier:          n6WmmHxt9KTxI0WrzkXDmbgdmwH1d+JXjJq9Di+15+I=
Subject key identifier:   B2:7C:C3:CF:01:98:64:DB:0F:4A:86:7E:25:A3:42:33:BA:6E:03:37
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584EBC77074CD711E74675009A80
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/7c45ddde-9bbb-3d35-9b11-aa413b04b813.roa
Signing time:             Wed 05 Aug 2026 13:00:12 +0000
ROA not before:           Wed 05 Aug 2026 13:00:12 +0000
ROA not after:            Tue 03 Nov 2026 14:00:12 +0000
asID:                     30036
IP address blocks:        2604:2e8f:8c00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bc:77:07:4c:d7:11:e7:46:75:00:9a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Aug  5 13:00:12 2026 GMT
            Not After : Nov  3 14:00:12 2026 GMT
        Subject: CN=e93bca58-2c67-438f-891d-cfd102cd6169
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:3b:31:25:4e:3a:64:4c:e8:93:0d:50:1c:e7:
                    e0:89:89:04:bb:fd:2b:39:71:be:8e:0e:82:c7:36:
                    28:9e:76:c8:66:c7:56:20:67:35:33:ff:71:a7:98:
                    33:28:cf:81:95:ab:a9:34:55:85:4a:01:86:1a:af:
                    0e:03:66:65:29:15:83:1b:86:65:17:8a:9f:3e:b3:
                    ea:ac:5d:0e:a6:17:45:0d:e5:4d:47:e9:ac:a5:1f:
                    6e:bc:d1:33:0e:15:6c:2b:25:5d:95:eb:f3:de:82:
                    ee:fb:da:ff:8d:50:13:25:81:fd:95:4d:98:0f:11:
                    2a:f9:1f:9c:c1:86:70:78:3a:aa:db:7e:c0:5f:3e:
                    d9:ff:46:8a:65:fc:cf:b8:05:c9:5b:49:a8:b1:e2:
                    23:75:73:74:f2:2a:22:06:17:f6:0c:80:bb:6f:f0:
                    2a:11:c3:1d:3c:b7:ff:15:f7:29:45:24:f0:8d:13:
                    25:d9:c2:56:52:a6:b7:51:3d:ea:5a:0d:06:0b:fc:
                    09:ec:fc:53:fb:86:3b:21:81:c5:f1:2b:61:eb:86:
                    ac:18:3c:02:83:ed:7d:69:00:8e:9a:52:90:4f:ac:
                    f8:6b:6e:07:b1:18:a7:92:d8:c3:9e:2c:33:98:90:
                    99:3e:e4:55:66:02:f1:f5:c7:1d:d1:c6:28:fa:df:
                    47:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:7C:C3:CF:01:98:64:DB:0F:4A:86:7E:25:A3:42:33:BA:6E:03:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/7c45ddde-9bbb-3d35-9b11-aa413b04b813.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8f:8c00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:5d:7e:1e:15:bf:d6:83:20:d9:09:c4:0f:1b:9b:73:42:10:
         35:01:05:e2:ff:5f:d0:68:a9:2e:9c:af:b3:fc:76:11:f9:58:
         dd:af:46:02:7d:ae:a3:81:9a:18:81:35:6e:0f:f3:c3:c0:b7:
         b8:c4:4c:a8:83:6e:79:56:cc:09:c4:e1:e2:da:c6:b4:50:60:
         11:f4:83:56:3d:33:e2:a7:bf:f0:13:1e:65:0b:b8:03:07:11:
         8d:b9:75:4c:66:84:f1:3c:6d:ad:55:7f:4d:43:2a:8e:11:b5:
         e3:9d:92:08:7f:51:75:8e:86:23:3c:09:72:59:91:2a:6b:fd:
         b7:4a:4c:48:aa:f4:34:a1:8b:e7:5c:3c:05:9f:29:32:6b:a6:
         8d:60:a1:54:3f:a5:bd:6b:da:e2:92:f3:18:a6:70:35:58:bb:
         71:17:7a:3e:cf:57:7f:c3:7d:3e:36:21:60:28:de:da:9a:29:
         01:6c:d4:70:9b:3e:b6:2c:35:d3:aa:cf:7f:1a:a8:cf:24:ce:
         ca:21:73:b3:43:03:ef:44:81:0d:7a:f1:e3:91:ff:03:44:94:
         e2:8d:bb:5d:5e:4d:32:d9:2d:fb:39:0a:05:c1:c7:28:41:24:
         35:e4:21:89:1a:e7:78:bd:58:65:27:f8:0f:85:f1:06:95:87:
         de:a0:1b:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:44:09 2026 by rpki-client