Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a08f4c9a-fef2-36ee-9e67-2f92048c493d.roa
File:                     a08f4c9a-fef2-36ee-9e67-2f92048c493d.roa (raw, json)
Hash identifier:          zDxhUt6Lq7/q7b4ctEeCHbnmt+MGI7GTncp/61ecncs=
Subject key identifier:   E9:37:0F:9C:2C:80:1E:88:81:08:53:25:21:F1:50:04:87:DE:25:E8
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584EA79720EA189DFF355CDBA080
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a08f4c9a-fef2-36ee-9e67-2f92048c493d.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     30036
IP address blocks:        2604:2e8f:2800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:97:20:ea:18:9d:ff:35:5c:db:a0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=2b932b56-383a-4272-b4ac-d724e78fccd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:42:ca:f2:b4:91:02:a0:7f:81:80:e6:25:f9:
                    c2:94:eb:49:a9:46:d5:c4:2c:f2:19:d0:74:38:39:
                    ab:1a:68:0e:9c:d4:8b:be:83:a8:29:8e:73:81:d9:
                    2b:1e:d6:4b:9f:c5:fa:c7:ee:74:90:b0:10:3e:ae:
                    7d:51:fb:02:b5:6a:f6:86:43:c7:4a:89:1b:d1:b5:
                    2c:24:a0:07:92:26:ef:c5:30:88:7e:58:34:cd:63:
                    a5:6e:3c:5d:1e:09:c2:ed:5b:52:58:3b:10:3e:1a:
                    8f:7c:5f:cf:7e:9b:89:86:fa:46:31:78:7e:5f:5f:
                    04:3f:04:6f:6f:b4:32:cf:7e:84:c4:09:e1:bd:26:
                    e5:50:54:62:3b:1a:ed:8f:a4:36:57:98:d5:38:ad:
                    c0:3e:fe:fc:1e:dc:7a:70:d0:e1:0f:0a:7a:25:fa:
                    1d:7a:22:69:84:b4:21:94:c0:01:27:b4:9a:ce:37:
                    52:30:d5:04:f5:40:e2:8e:76:8a:71:59:92:94:21:
                    bd:28:5c:7f:8b:57:df:09:8c:0e:17:21:8f:53:33:
                    09:58:be:e0:af:67:65:f4:01:f4:b0:87:e3:97:3a:
                    e6:69:a2:2f:42:db:78:01:36:6b:c0:0b:fb:29:17:
                    68:ee:f1:e2:0b:56:a1:fc:e5:cc:1f:d5:b4:1d:d3:
                    dc:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:37:0F:9C:2C:80:1E:88:81:08:53:25:21:F1:50:04:87:DE:25:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a08f4c9a-fef2-36ee-9e67-2f92048c493d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8f:2800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:83:0c:09:ca:f3:b0:64:10:6f:43:5d:04:71:25:df:9b:04:
         60:b2:c4:e1:71:1a:9f:ba:dd:66:c0:83:26:97:f6:02:d2:39:
         a8:fd:de:b0:72:f1:a7:4d:e5:2b:c3:67:c7:54:31:7c:96:dd:
         09:10:70:5d:68:4f:6a:b8:b6:d5:3c:8a:21:59:ba:1a:21:3d:
         34:00:4e:15:08:4e:00:d6:e0:4e:7e:4d:e0:6a:f9:f9:67:57:
         6f:71:9b:29:0c:e8:1d:4f:15:a0:be:e8:f6:70:85:90:5f:73:
         4f:49:3c:e6:ea:d6:ad:14:c3:fa:df:c0:d5:93:c9:82:c3:b6:
         87:f1:ff:92:a7:83:23:e4:5c:cd:9a:2b:ee:24:44:7c:89:de:
         84:8a:c4:8a:71:14:59:04:79:81:8b:08:34:88:20:f3:29:30:
         03:7f:2a:04:e6:49:9b:07:81:39:98:9a:10:a7:da:e5:c2:8f:
         69:ea:ae:6b:76:b4:0e:bd:a5:d4:3d:bf:62:17:ec:b0:5f:e6:
         9d:e3:e2:5a:ee:d5:0c:43:a6:bf:28:e8:75:d9:99:4c:0b:63:
         68:9e:32:75:16:ae:6c:f3:d4:08:c1:76:76:57:f1:01:88:93:
         1f:ef:59:aa:5e:75:29:4a:56:b5:10:46:a2:5a:49:b3:70:86:
         15:7c:19:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:47:07 2026 by rpki-client