Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9217c218-c43e-3e60-b0d1-ebf5a015639c.roa
File:                     9217c218-c43e-3e60-b0d1-ebf5a015639c.roa (raw, json)
Hash identifier:          8h+ITQRzlYPFlLqqM6kQwdJiE//rI0B3GOwh5EzvXjM=
Subject key identifier:   76:6A:18:45:E6:D9:12:5E:EF:05:E1:77:76:F0:03:1B:1C:8E:53:3A
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584E4559FDF2C3B1A065AFBDA400
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9217c218-c43e-3e60-b0d1-ebf5a015639c.roa
Signing time:             Tue 23 Jun 2026 21:00:12 +0000
ROA not before:           Tue 23 Jun 2026 21:00:12 +0000
ROA not after:            Mon 21 Sep 2026 21:00:12 +0000
asID:                     30036
IP address blocks:        2604:2e80:809::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 25 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:45:59:fd:f2:c3:b1:a0:65:af:bd:a4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jun 23 21:00:12 2026 GMT
            Not After : Sep 21 21:00:12 2026 GMT
        Subject: CN=7d3ea2d6-8540-4033-828d-a22528d84d63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:27:d6:84:3a:82:ca:d7:75:5f:a2:7a:b7:b5:
                    2d:9d:13:e5:96:ff:a7:0d:78:f9:ab:3b:25:72:9c:
                    69:18:ef:a3:03:e0:a0:8d:c2:45:d9:b0:f2:e1:88:
                    83:55:bd:bf:54:29:6e:b3:73:47:31:38:3b:1b:ea:
                    00:4d:a4:00:b4:53:34:18:4a:e7:af:08:27:64:a8:
                    89:3d:eb:c2:61:f7:b5:1c:76:ef:70:84:fc:83:fa:
                    e9:61:d2:e2:54:7f:a8:0b:0a:0d:aa:da:96:f2:5f:
                    a9:37:6a:bc:cd:61:f5:d6:7a:63:ab:2b:ad:e0:86:
                    bd:66:9b:55:3c:5a:f2:83:ab:bd:a1:41:65:6f:5c:
                    3a:06:ac:c9:ff:9d:c8:b4:25:1f:64:36:3d:04:a9:
                    88:00:09:89:ba:4d:72:de:41:26:09:97:af:30:88:
                    e3:7b:24:40:9d:b5:07:a7:4b:74:67:6b:3e:79:1c:
                    ca:ba:aa:8c:7d:a3:b2:26:83:10:27:0a:cd:e4:51:
                    30:f5:76:be:8e:6c:d3:a8:de:c9:1f:5e:b6:3f:71:
                    27:02:be:1b:47:60:82:78:c3:14:eb:28:c2:92:6c:
                    5a:fe:eb:20:39:4c:ac:ff:6f:77:9e:ae:e3:80:eb:
                    71:9b:74:50:c7:de:f6:ec:88:d6:d5:12:95:ae:f9:
                    21:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:6A:18:45:E6:D9:12:5E:EF:05:E1:77:76:F0:03:1B:1C:8E:53:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9217c218-c43e-3e60-b0d1-ebf5a015639c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e80:809::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:af:3f:6f:bc:6c:1a:b5:d3:58:fd:24:b2:62:83:92:9b:b3:
         02:ae:ab:c8:0f:0f:8a:31:55:76:09:e6:89:91:20:94:61:19:
         56:e6:6b:78:b4:d9:a6:68:88:30:42:e6:d5:bb:df:cd:99:60:
         a9:22:5c:62:ee:cf:49:d5:bb:47:fb:5e:38:ac:41:c8:95:50:
         1f:fa:01:d6:62:8c:43:c3:cb:75:12:f5:8f:01:c2:09:2f:57:
         31:eb:4a:48:55:3a:ba:73:05:fb:92:be:48:ae:84:cb:6b:54:
         f9:72:dc:0c:42:c5:ad:85:f0:09:d8:ff:e0:a0:dc:9d:c8:f2:
         b1:fd:2b:d2:24:2b:3c:04:2a:bc:95:c7:7e:8a:5a:a2:0b:a4:
         6c:b4:8c:96:76:dd:41:41:5d:81:5d:1c:81:da:c3:c7:5d:a9:
         73:a7:6c:d4:33:27:34:b0:a2:ae:74:66:28:ff:73:16:e1:f9:
         13:5d:da:33:1e:f9:31:fb:94:5c:fa:6e:ce:27:f9:b3:11:d3:
         76:e1:43:c3:81:5f:71:3e:dd:28:b2:dc:64:c3:12:65:8f:b8:
         51:9a:bc:61:0b:39:e1:84:d6:b1:88:1b:10:bd:21:59:ea:e5:
         07:57:1e:88:89:2b:a5:a4:86:5c:d3:36:93:bf:22:ba:a5:24:
         46:c0:14:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 05:32:32 2026 by rpki-client