Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c35e098e-b550-340e-8fcb-693dcd6370c6.roa
File:                     c35e098e-b550-340e-8fcb-693dcd6370c6.roa (raw, json)
Hash identifier:          zeANtFKiacdcpXJZKasM6JIV0FNApmGI4pXHKVZ7zjQ=
Subject key identifier:   AC:99:F7:6B:75:52:2B:FC:B3:3D:A0:FC:14:8D:C2:BF:A2:66:CC:85
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584EBDDC64F6126A75180EC0CF40
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c35e098e-b550-340e-8fcb-693dcd6370c6.roa
Signing time:             Thu 06 Aug 2026 01:00:12 +0000
ROA not before:           Thu 06 Aug 2026 01:00:12 +0000
ROA not after:            Wed 04 Nov 2026 02:00:12 +0000
asID:                     30036
IP address blocks:        2604:2e8d:c400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bd:dc:64:f6:12:6a:75:18:0e:c0:cf:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Aug  6 01:00:12 2026 GMT
            Not After : Nov  4 02:00:12 2026 GMT
        Subject: CN=7a48a630-4606-453c-b777-7388e57db0a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:11:f1:07:94:a6:03:bb:c1:8f:b7:fe:b3:aa:
                    86:fc:74:24:e7:0c:ec:55:ea:66:dd:75:17:bb:16:
                    9d:0b:44:0e:52:59:9c:66:b9:92:c2:10:7d:5d:ef:
                    60:4c:8f:0f:08:91:bc:9e:20:95:fd:87:63:87:14:
                    36:43:c7:c5:77:cf:46:10:11:03:f3:5e:29:9e:8f:
                    fb:dc:2f:54:99:8f:a1:24:38:28:4c:a0:44:3c:9f:
                    cc:3e:4b:a7:0c:2b:d0:2f:f7:bc:07:54:30:3b:c9:
                    a6:b1:25:ec:e3:a4:39:99:b3:66:bf:ee:72:7b:11:
                    cb:be:c2:17:7d:6e:b8:6c:dc:2a:04:fd:4e:3a:99:
                    10:42:13:a7:12:9f:69:c9:ae:43:d6:79:81:f2:10:
                    58:d3:38:ad:53:ba:12:f8:06:50:5a:e4:f6:dd:6c:
                    5a:52:6a:4d:06:31:cb:a5:81:4d:95:ae:bf:e6:ba:
                    43:bd:2e:d3:e8:42:0e:2f:75:f9:23:a8:e6:15:49:
                    57:fd:31:0c:cf:10:9a:e1:e3:f4:b5:93:8d:33:97:
                    22:71:a9:fb:49:25:29:8f:0a:04:38:e8:62:1c:c9:
                    35:80:1a:1b:9a:12:13:f4:b3:82:8b:a0:0d:9c:5e:
                    40:6f:6a:d2:c9:f8:7b:df:5f:ca:8e:21:ad:34:72:
                    59:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:99:F7:6B:75:52:2B:FC:B3:3D:A0:FC:14:8D:C2:BF:A2:66:CC:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c35e098e-b550-340e-8fcb-693dcd6370c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8d:c400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:11:9a:19:82:d6:99:41:cf:5c:66:ba:f2:08:27:7c:8e:fa:
         37:02:c5:ed:8a:eb:83:d5:de:07:58:08:06:cf:99:00:b4:f6:
         d6:92:a3:1b:52:d8:6f:a5:99:64:52:f1:4f:10:e9:09:c0:25:
         e2:25:8b:0b:71:81:14:dc:7f:b8:09:92:8a:61:e2:0d:a9:55:
         d5:6c:ab:dc:7b:06:a9:77:45:57:6f:b7:37:fb:f4:f7:e0:a9:
         a5:c4:53:9c:7c:6a:a2:14:5d:60:a7:5e:f0:75:06:b9:71:b5:
         8c:6e:1e:43:a4:ab:d8:58:95:34:57:3c:04:bb:f2:de:c2:ea:
         08:f6:61:1d:b9:f5:97:24:dc:bb:b7:8f:3d:35:90:7e:a5:20:
         38:5c:dc:ba:83:e4:fb:da:95:d3:85:3b:45:50:7b:4c:83:3d:
         5c:9a:79:29:6b:9b:c5:f3:6b:a0:5f:af:30:f7:a7:b8:9f:3b:
         37:1f:26:cf:ab:29:73:b6:55:6d:7a:e6:76:5b:4b:39:43:42:
         1d:f0:d1:8a:ac:85:23:37:7d:96:c3:fe:36:c3:80:64:4c:d2:
         a2:61:fb:44:8b:f6:1d:2c:d0:d9:59:01:cf:f7:99:db:0d:d4:
         54:48:ec:52:26:19:dc:1a:e9:e8:6c:17:36:df:d8:00:5b:e7:
         b5:17:59:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:45:15 2026 by rpki-client