Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/94ba60b7-9059-3e2a-9f37-8d5a827ffaa5.roa
File:                     94ba60b7-9059-3e2a-9f37-8d5a827ffaa5.roa (raw, json)
Hash identifier:          Xs41ZP18KIQGoZbdIRSDMHaunc7hE0tKsbKC8tk2WsQ=
Subject key identifier:   4F:F5:92:D7:FF:7F:64:74:E6:80:60:6C:75:58:82:E8:F8:8A:F2:25
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584D1707F041B78DB6DCEB066480
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/94ba60b7-9059-3e2a-9f37-8d5a827ffaa5.roa
Signing time:             Sat 07 Mar 2026 14:00:41 +0000
ROA not before:           Sat 07 Mar 2026 14:00:41 +0000
ROA not after:            Fri 05 Jun 2026 13:00:41 +0000
asID:                     30036
IP address blocks:        2604:2e8b:9c00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 13 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:17:07:f0:41:b7:8d:b6:dc:eb:06:64:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Mar  7 14:00:41 2026 GMT
            Not After : Jun  5 13:00:41 2026 GMT
        Subject: CN=54f13478-c980-4158-aa13-cee3d49c6c8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:09:84:54:b1:72:47:43:f5:22:22:89:0a:fe:
                    61:05:f7:2e:07:f8:03:be:50:e7:27:ba:42:1a:98:
                    97:6e:6e:7f:7b:a1:1d:6d:a3:c4:39:7e:f3:3a:03:
                    2d:c5:37:33:98:f8:89:1e:f2:86:0c:c9:8a:72:cf:
                    0b:00:6f:da:d8:b8:e4:1e:64:93:ea:4d:d8:a5:1a:
                    e0:f1:6d:a0:4c:8c:52:33:16:17:d5:1a:86:05:43:
                    ec:ff:2b:6f:b7:76:32:8d:42:b4:02:26:0c:2e:01:
                    f4:13:2e:69:8d:b4:18:a5:34:54:fe:91:8a:c2:21:
                    06:6f:fa:92:67:37:57:8c:e7:48:63:c4:ab:92:4c:
                    aa:f5:30:d2:c9:63:fc:81:12:92:3e:55:0e:37:de:
                    36:90:cd:68:3f:78:38:8e:93:6c:39:48:80:0f:7f:
                    a4:2a:b6:2f:57:45:2c:92:e9:2e:ea:95:f8:33:fb:
                    b3:2d:58:15:58:05:26:e9:c4:38:3e:5f:20:ee:c5:
                    5b:8e:37:5e:45:f4:41:22:ec:06:2b:8e:ad:10:87:
                    0c:c2:31:45:cf:0e:72:4e:c5:95:ee:f8:a3:01:8f:
                    4a:70:e4:52:6f:c9:14:fc:6e:42:e7:64:e1:77:b6:
                    d6:9e:32:7f:6c:83:bc:ad:07:87:dc:6c:b1:9c:0a:
                    12:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:F5:92:D7:FF:7F:64:74:E6:80:60:6C:75:58:82:E8:F8:8A:F2:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/94ba60b7-9059-3e2a-9f37-8d5a827ffaa5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8b:9c00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:f7:ed:6d:bb:0e:8d:23:12:0c:6b:3d:6e:c3:2f:10:61:ef:
         73:bf:ac:65:9e:3d:35:7e:ab:7f:52:0f:9b:c7:f4:7d:da:2c:
         89:4f:70:7d:44:6b:72:64:29:51:25:4b:11:55:46:a9:9d:7c:
         6b:ae:02:b2:95:89:6b:58:99:9f:7a:4c:36:39:95:5b:28:4a:
         f9:45:07:16:0e:c2:ab:86:4d:93:e2:54:89:a2:e3:4a:ab:75:
         90:69:eb:36:9d:2a:c4:27:c6:e9:b7:9c:db:2c:ef:5b:6c:e3:
         ae:77:9d:32:c7:ce:05:4e:1a:1e:76:08:3f:37:9e:a2:bf:ef:
         22:56:db:2a:1e:67:53:2b:05:53:43:09:0d:54:de:23:62:1c:
         57:34:10:6a:32:8a:9f:f2:7f:37:32:a7:a4:fa:ce:90:e1:69:
         e7:9b:09:dd:55:92:6c:b6:5b:34:4c:89:ac:c9:50:c8:08:ec:
         42:18:0d:f0:bd:5e:72:bf:1f:50:f2:68:4d:5c:18:63:61:0a:
         0a:dd:ca:96:68:9d:38:6f:01:c1:e3:ad:07:84:18:ba:2a:5d:
         8d:81:9e:b8:91:7e:2f:1b:7d:b8:8b:57:c7:b3:ff:ee:d1:bd:
         88:94:b1:09:2f:f1:2d:c8:e2:f0:76:55:68:49:24:a7:c6:4e:
         b7:fc:bb:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 06:37:22 2026 by rpki-client