Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c37c3f8a-b3df-3062-8f89-06b362e16716.roa
File:                     c37c3f8a-b3df-3062-8f89-06b362e16716.roa (raw, json)
Hash identifier:          3vA5PEq48dgjHP6q8U3Y/K7QEz7wJyTOEE1d9M+1tuc=
Subject key identifier:   C6:D6:03:BC:2E:02:4E:3F:B0:E2:78:B1:2B:76:BA:A5:49:7D:46:41
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584EA7A0AB8DD0DDF1CE122EB374
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c37c3f8a-b3df-3062-8f89-06b362e16716.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     30036
IP address blocks:        2604:2e8e:8000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:a0:ab:8d:d0:dd:f1:ce:12:2e:b3:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=d851af65-e056-4674-8559-aac338996f70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:8b:29:7d:a4:54:0c:66:10:7e:f2:8e:5a:7d:
                    0f:2a:e7:98:2f:e5:1d:36:55:28:06:60:c0:14:41:
                    64:03:a8:91:c5:6f:b8:d3:a0:af:22:a7:02:e1:a0:
                    ec:e7:8b:69:22:95:1d:d6:52:9d:c4:08:b5:b0:4e:
                    36:b4:37:ac:80:05:68:7d:2f:d0:4c:11:d7:86:62:
                    48:fb:24:b1:7b:84:14:6e:b1:04:e3:ed:12:81:f6:
                    0b:dc:54:4f:7b:bc:5e:cc:c0:16:85:ec:bd:12:e4:
                    94:fd:72:9c:b0:58:6e:c1:41:25:fd:69:9e:f6:66:
                    16:f0:c7:85:55:74:eb:50:ef:33:3f:d1:1f:8d:7b:
                    28:cd:74:f9:48:45:5a:d6:0d:83:26:24:c8:2d:49:
                    77:32:b5:a6:c5:5a:5b:74:ea:38:2a:b4:a3:31:c9:
                    cb:7c:5c:41:ad:bf:f6:53:97:ee:79:80:2d:66:69:
                    2a:bc:97:95:a3:b3:72:34:d9:1e:7f:87:0f:f4:8e:
                    17:a8:fe:b9:76:43:0c:fa:67:33:53:20:b3:88:d5:
                    b1:56:8d:cb:4a:c1:e7:23:d9:f5:6c:15:ad:cd:c3:
                    7e:9b:15:5b:48:a9:39:c2:57:8a:ea:d0:31:b3:aa:
                    7e:9e:ff:73:f7:82:db:ed:42:23:b6:cf:c5:bb:c5:
                    b7:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:D6:03:BC:2E:02:4E:3F:B0:E2:78:B1:2B:76:BA:A5:49:7D:46:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c37c3f8a-b3df-3062-8f89-06b362e16716.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8e:8000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:cd:60:9e:8f:93:2f:42:46:3a:ca:8c:12:8c:07:11:f9:f7:
         03:73:a6:2a:e4:d9:ab:b3:0d:79:01:37:13:0f:f7:d7:60:9a:
         9a:8a:82:42:73:97:70:b8:28:1d:c8:02:8b:cf:9f:4f:1b:f2:
         05:78:11:a8:72:5c:85:97:76:11:78:20:ec:32:80:08:97:75:
         f6:da:42:fd:ad:5e:58:dd:0c:4f:99:4c:44:eb:2b:39:2b:63:
         68:ed:1d:ca:13:d8:ac:81:a8:41:70:2b:8f:e4:81:d6:57:1d:
         9b:48:ff:e6:f3:50:4d:8a:b7:ea:74:81:56:4a:77:60:c9:32:
         8f:5c:21:be:18:8b:d8:bb:72:66:90:bc:d4:cd:e0:4a:50:e4:
         b5:ff:29:9a:d6:a5:8f:dc:5d:57:3a:3c:ff:ab:4e:c3:0c:14:
         e7:a2:53:60:e2:b0:9a:ca:ac:cf:6a:15:1f:3d:0b:68:fa:d7:
         d1:76:45:3b:5a:13:0a:a3:88:11:2a:16:c2:2c:35:81:81:4b:
         6d:1c:b3:71:d9:67:5e:63:39:32:28:df:97:d1:f2:e6:bb:34:
         86:1d:00:f8:e5:b2:33:71:9d:eb:0b:e1:60:8e:7b:df:03:f5:
         e3:7d:f7:ae:50:02:42:ca:31:c5:ff:6f:08:c6:c5:44:66:4f:
         1d:cf:79:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:46:32 2026 by rpki-client