Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bf89dd6a-88cb-3df4-ba01-72fb10210bfd.roa
File:                     bf89dd6a-88cb-3df4-ba01-72fb10210bfd.roa (raw, json)
Hash identifier:          L0Z0/pzL24uvdh7a0l/nKgQf6ANcJ01hJzfjYmf9Vg8=
Subject key identifier:   57:AE:E4:DC:63:50:30:32:15:87:5A:DA:1F:2B:B6:E3:CE:C1:F3:DF
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584EA797BC255628A959D92D2580
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bf89dd6a-88cb-3df4-ba01-72fb10210bfd.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     30036
IP address blocks:        2604:2e88:7000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:97:bc:25:56:28:a9:59:d9:2d:25:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=03db1e25-bff1-4ae1-82b6-52dadd71f6f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:20:e5:f5:5e:2e:49:b2:83:0e:eb:d7:72:bb:
                    c4:18:f5:03:77:f2:77:41:d7:b8:6d:56:5b:d1:b3:
                    b4:77:9e:4b:22:64:e7:9c:50:f0:f7:21:98:5d:1d:
                    4b:b3:73:f1:af:97:e9:e5:85:70:30:78:e8:4e:35:
                    15:44:d9:9a:d4:27:38:9b:03:d9:e1:5d:53:86:f5:
                    08:cc:ae:aa:12:e7:4e:92:e3:ea:9a:0c:bb:f1:0a:
                    18:71:76:7a:45:7c:2b:e1:cc:23:ce:ae:b4:3e:ed:
                    d4:2e:07:04:e1:f9:0a:1e:a8:d9:de:ea:60:c1:73:
                    2f:7c:ab:4e:8a:7c:7f:54:8b:a7:63:e7:93:72:13:
                    14:1e:f5:28:21:cb:b2:14:a4:6f:9e:ef:40:a4:94:
                    dc:fa:6f:c3:48:d5:f4:6d:29:2a:aa:ee:a1:09:e0:
                    52:aa:ce:88:a2:73:66:d4:7f:ea:50:82:a3:a5:39:
                    ea:f9:8e:36:7c:bb:b5:1b:4f:bc:b2:49:05:bb:1a:
                    4f:2b:28:76:1c:71:b6:40:98:e8:13:a7:c1:c1:a5:
                    15:90:6c:60:fe:7f:f0:ea:34:65:e4:a1:2b:f3:c4:
                    df:8f:a9:50:76:3e:a6:bb:2d:13:5c:9c:3d:fe:b0:
                    e3:93:fe:69:b8:c9:95:62:16:88:fe:dc:8c:f4:6d:
                    97:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:AE:E4:DC:63:50:30:32:15:87:5A:DA:1F:2B:B6:E3:CE:C1:F3:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bf89dd6a-88cb-3df4-ba01-72fb10210bfd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e88:7000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:aa:fc:23:e6:26:2a:f8:fa:8e:20:8c:03:23:61:31:3f:c6:
         d1:50:ad:4f:02:ed:40:bd:cb:86:c1:41:29:99:2a:49:f4:73:
         b8:48:98:0a:3c:f1:ce:59:39:77:07:7b:9e:96:c7:61:6e:96:
         c4:36:7e:ba:d2:27:50:6f:c0:e4:88:ee:ec:f3:67:fb:88:ac:
         8f:8a:a3:4d:73:3c:b4:03:fa:65:48:e1:5b:a3:c5:ec:40:48:
         da:3a:37:94:16:ca:e3:9d:62:bb:d5:8c:39:05:b0:1e:db:1e:
         c8:39:a3:78:bc:f2:12:4c:8e:e8:91:11:2b:34:12:7b:9f:49:
         74:49:e4:d7:9f:c9:61:e7:b6:37:73:16:8c:58:ee:34:3c:e0:
         6b:b2:f5:e9:dc:8b:57:07:5b:ee:51:cc:e7:d1:4d:47:f6:3c:
         42:db:1c:c2:69:03:13:84:a5:36:e4:ab:de:61:51:a2:89:ef:
         d6:ac:7f:8c:ac:e3:47:a6:8a:ae:53:aa:a8:7a:b3:20:51:64:
         7f:ff:0b:96:b9:f2:4b:b9:ed:bb:bf:36:33:60:67:35:46:91:
         37:f1:ea:4e:bf:d4:16:1e:44:1e:8b:e2:1d:96:bf:55:ce:57:
         68:ba:9c:78:ee:c1:b6:07:ab:2b:3f:4e:82:db:07:4c:e7:87:
         53:2e:32:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 02:26:53 2026 by rpki-client