Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bf600fd6-981b-3baa-a0ae-30f271c6bb29.roa
File:                     bf600fd6-981b-3baa-a0ae-30f271c6bb29.roa (raw, json)
Hash identifier:          2Dy/L/AlR16f9S5vHTj8zKxWg3ND0yce8kWNYcrF6wE=
Subject key identifier:   A7:CA:E9:43:99:D4:D9:9C:03:42:D6:69:F3:5B:06:62:AF:1A:AD:E2
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584D1707BD89D592A62B803EEE20
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bf600fd6-981b-3baa-a0ae-30f271c6bb29.roa
Signing time:             Sat 07 Mar 2026 14:00:41 +0000
ROA not before:           Sat 07 Mar 2026 14:00:41 +0000
ROA not after:            Fri 05 Jun 2026 13:00:41 +0000
asID:                     30036
IP address blocks:        2604:2e88:8000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 13 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:17:07:bd:89:d5:92:a6:2b:80:3e:ee:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Mar  7 14:00:41 2026 GMT
            Not After : Jun  5 13:00:41 2026 GMT
        Subject: CN=03773d77-06a1-4ab5-bf17-a50e81c2e52e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:07:09:7f:4f:e8:28:e2:b7:f0:6a:37:75:c7:
                    c6:1a:ac:1a:42:99:56:4c:d7:c5:8a:f3:83:2f:08:
                    3a:98:4c:07:ab:3e:b2:da:b9:da:3a:d6:4b:7d:04:
                    4b:a9:a0:13:81:ab:ae:fd:ed:f0:c7:ac:dd:e3:80:
                    ce:40:73:a0:40:95:7a:ea:6c:b5:39:a7:82:1d:88:
                    31:43:34:6d:ad:85:37:4b:bc:ba:4d:42:12:69:7f:
                    fc:88:bd:c7:a3:24:b5:4c:65:04:0d:6a:3e:99:55:
                    9b:ec:e9:3b:39:5a:1d:f4:9c:cd:79:a4:96:ee:62:
                    b4:78:4b:33:45:f3:79:d0:e8:cd:ba:30:7e:b5:c9:
                    41:94:f4:ac:48:82:0f:12:60:71:e5:17:a1:e9:fb:
                    94:c5:3a:b2:f1:59:97:36:10:eb:1e:6a:28:9c:d3:
                    1b:8c:0a:ac:9d:7d:24:c8:57:8f:63:be:7e:58:fb:
                    1d:de:f5:6f:e4:89:06:b8:dd:ea:77:62:f0:74:4e:
                    77:81:6e:de:c5:6d:2f:21:04:74:b7:ed:c6:7a:2d:
                    e5:ce:fd:1d:d0:c3:43:2e:d7:ce:19:b7:33:63:58:
                    d2:a6:8d:ab:32:3a:e9:97:ec:06:75:5c:a0:45:1f:
                    3e:47:52:89:36:60:82:b5:9a:01:f8:74:4a:f2:39:
                    79:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:CA:E9:43:99:D4:D9:9C:03:42:D6:69:F3:5B:06:62:AF:1A:AD:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bf600fd6-981b-3baa-a0ae-30f271c6bb29.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e88:8000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:68:d4:11:ff:ee:3c:96:28:58:56:0d:13:95:46:25:9f:13:
         1d:bb:ca:5d:d4:c9:88:ed:4b:a3:98:6f:87:0c:98:d1:a8:15:
         80:b5:24:7e:7f:4d:77:a7:03:47:cf:1b:46:1d:36:1b:ed:42:
         6f:03:c8:2d:6f:1d:54:54:0f:61:a3:71:86:12:90:aa:ff:df:
         be:4b:b7:3a:94:06:2c:0c:8b:43:24:a4:9d:f4:88:bf:3a:13:
         09:6a:87:fa:c9:ee:10:b5:84:d9:9a:7a:94:06:f6:99:ba:c3:
         24:73:25:6a:c5:27:29:7a:f7:31:e1:4f:80:e6:f5:19:fd:a9:
         6e:0f:0a:05:54:bc:bd:00:4f:9d:80:58:7a:a2:d6:60:9f:5e:
         62:64:da:31:63:4d:24:96:a0:ee:db:9f:d5:77:62:c6:3d:af:
         0b:e2:74:c8:62:c0:27:99:e5:b8:8f:6a:92:a9:f5:9b:6e:c0:
         04:b4:cc:71:fa:4f:53:c5:67:ae:c9:cc:21:e4:ac:54:5c:04:
         ea:e6:c1:a1:d3:d7:6d:93:22:ab:e9:61:9e:e6:e4:45:bc:20:
         98:c9:06:80:0a:d4:47:bc:16:0a:5f:2f:10:88:1d:d1:25:93:
         5b:41:72:64:2a:d2:46:31:c3:7a:ce:2f:a4:df:a4:bf:46:90:
         a8:62:d3:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 06:37:14 2026 by rpki-client