Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0f04fbf1-fc76-33c7-a937-cf2219b4488e.roa
File:                     0f04fbf1-fc76-33c7-a937-cf2219b4488e.roa (raw, json)
Hash identifier:          n3P4ro3HhXcoi41ULwlD+MDtqrw2V7ou08VTBzvg0HU=
Subject key identifier:   0A:08:6F:91:05:58:5C:88:16:2A:64:94:55:26:A9:CB:EC:DD:E8:BC
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584E779A2AB3506D57A4F07F8450
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0f04fbf1-fc76-33c7-a937-cf2219b4488e.roa
Signing time:             Sat 11 Jul 2026 21:00:11 +0000
ROA not before:           Sat 11 Jul 2026 21:00:11 +0000
ROA not after:            Fri 09 Oct 2026 21:00:11 +0000
asID:                     30036
IP address blocks:        2604:2e87:4800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:77:9a:2a:b3:50:6d:57:a4:f0:7f:84:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jul 11 21:00:11 2026 GMT
            Not After : Oct  9 21:00:11 2026 GMT
        Subject: CN=5a266e0a-d3e9-4609-b7fe-facf5026c060
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:5a:1b:ff:b8:70:18:46:c9:5c:9f:37:b8:cb:
                    25:7f:42:c3:f1:cd:98:be:66:97:98:fd:ba:59:16:
                    6e:29:4b:89:aa:7d:ee:0b:bf:6d:2b:70:d4:c0:fd:
                    8e:ce:75:f9:d9:07:3f:6b:09:66:41:0c:b8:6c:87:
                    5b:05:4c:c0:ac:8a:92:81:3f:1c:3e:c5:19:ea:e8:
                    80:7a:8b:36:0f:77:b3:55:60:78:85:b5:e7:b6:f0:
                    d9:06:a5:12:ba:b2:5c:d6:33:8b:18:77:d3:82:fd:
                    6b:ff:58:69:c7:29:7a:de:e0:9a:4d:f6:1f:95:c0:
                    20:00:72:4f:1e:12:8a:57:82:31:d3:c3:26:e8:cf:
                    02:bc:49:f4:95:d2:c1:97:79:c4:ed:d3:11:65:9d:
                    b7:03:65:c2:06:5e:7a:c6:41:2a:5f:d2:a1:f6:04:
                    1f:0a:54:95:76:a2:72:8a:b8:0d:e4:eb:c0:9b:fc:
                    d1:b4:0d:9c:e0:41:43:c4:ac:86:d9:f9:da:ac:be:
                    6f:99:15:84:7a:cf:a8:37:32:59:5a:57:f4:4d:e6:
                    7f:72:36:3a:c8:cd:31:2d:0f:3c:eb:7f:88:df:5a:
                    bb:bd:29:be:41:c9:2e:78:20:c4:de:50:52:ef:48:
                    32:7f:bb:b8:a9:f3:1c:02:1c:43:6c:60:89:dd:fc:
                    01:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:08:6F:91:05:58:5C:88:16:2A:64:94:55:26:A9:CB:EC:DD:E8:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0f04fbf1-fc76-33c7-a937-cf2219b4488e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e87:4800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:07:79:46:e1:b5:f8:1c:16:38:a4:e3:2b:70:05:53:bb:50:
         60:92:0c:10:83:6a:1b:eb:dd:35:d2:23:eb:f3:4e:97:1c:9e:
         7d:e0:69:7b:fd:7a:05:23:27:12:ac:22:06:eb:fb:dd:fd:9d:
         ab:e4:29:df:04:98:a8:3f:65:4c:fc:aa:73:7a:5f:c7:a8:00:
         3a:4d:35:7d:b4:b1:57:71:8e:87:25:49:74:bf:84:33:97:09:
         8d:f2:6b:11:f1:1d:53:e0:22:2b:e2:50:21:4a:72:fd:54:d1:
         99:8b:79:3c:f1:34:75:b3:f3:a2:8b:4c:68:bd:6b:43:6a:16:
         23:bd:93:dd:07:8d:ae:fe:88:d1:2a:ed:4f:17:f8:69:03:4c:
         e1:aa:61:d3:a7:3f:9f:4f:b4:1a:97:aa:8b:58:29:5a:ff:bd:
         15:18:ae:ea:4b:1d:f5:67:e7:54:f9:ad:ec:85:aa:de:d3:67:
         1f:88:46:40:21:0a:3d:bb:8e:8c:f5:50:f6:0b:1b:9c:d0:e0:
         0b:75:0c:74:1b:4b:63:f1:1f:11:73:ec:80:d2:f0:65:71:fd:
         93:a5:4d:ac:74:05:1a:b1:eb:c3:fd:ec:4f:a4:6c:ba:da:0c:
         d1:cd:20:4c:26:b3:88:d9:0a:85:d8:bd:88:68:0b:27:1d:bf:
         ee:fd:1e:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:10:09 2026 by rpki-client