Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/10f040e4-5f83-3287-a411-0a076fd2c441.roa
File:                     10f040e4-5f83-3287-a411-0a076fd2c441.roa (raw, json)
Hash identifier:          15QdMWYTZ16iQ/qFxnZdy1cBylCI37U8tVwxnIFfz2E=
Subject key identifier:   07:2A:F9:A3:0B:2B:FD:D9:4A:79:E8:7B:DC:5D:55:3D:99:A6:70:1C
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584F497355B0CAFC6ED19AE23B00
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/10f040e4-5f83-3287-a411-0a076fd2c441.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     30036
IP address blocks:        2604:2e8d:7000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 03 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:55:b0:ca:fc:6e:d1:9a:e2:3b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=082f64ff-482e-46e6-965e-5dd2649f49fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:32:e3:0c:c4:f2:8d:f9:69:78:11:7a:26:19:
                    31:f3:43:3d:bb:3d:eb:6e:ec:f9:13:4b:f2:ec:36:
                    5c:70:e3:55:a5:4c:ef:24:dc:17:8f:57:55:bb:69:
                    6a:ce:61:66:9e:4e:1c:39:62:e3:bd:31:bd:d2:41:
                    e8:b6:32:2c:8d:81:47:7d:69:bc:42:c3:4e:da:3f:
                    2f:45:81:0d:9d:53:fa:51:84:e5:7f:1c:2b:8c:17:
                    68:4c:d7:84:7b:d5:84:fe:0d:bb:c3:ee:3e:e9:a0:
                    d7:91:2d:d8:ae:b0:0c:b0:7f:ba:a5:f5:a3:2e:ec:
                    cc:de:e6:9c:03:9a:89:a1:26:04:ec:dc:a3:41:d6:
                    b4:f1:56:1e:b7:fb:92:68:10:34:43:90:5c:df:79:
                    63:a2:11:80:d1:6f:60:d2:80:de:c9:fd:79:4b:53:
                    f0:d1:b1:81:af:85:b6:bc:79:96:58:06:5e:02:67:
                    26:83:64:e1:ab:fa:9a:4f:f8:b7:b1:a9:af:9b:14:
                    46:46:e0:bc:90:96:7e:45:d1:e6:04:79:2b:a5:d4:
                    67:41:39:33:1a:6a:71:a0:df:bb:4e:7b:04:04:ba:
                    20:dc:bf:3a:4f:a9:e8:ec:3e:f7:8e:05:d5:1b:cc:
                    45:2e:54:6a:6c:14:d7:1f:4b:70:fa:6b:c2:7c:c9:
                    09:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:2A:F9:A3:0B:2B:FD:D9:4A:79:E8:7B:DC:5D:55:3D:99:A6:70:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/10f040e4-5f83-3287-a411-0a076fd2c441.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8d:7000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:4c:47:fa:89:40:66:d6:4d:44:10:58:dd:12:41:60:c6:4d:
         27:0e:1b:78:fd:48:8d:b5:4b:cf:51:90:8c:9c:e4:8a:a7:ba:
         e3:54:61:36:96:d1:8f:75:9d:3b:aa:18:5d:b8:27:94:6c:cf:
         24:e2:a2:b9:58:ab:bf:e9:88:39:03:a5:18:c5:09:71:ae:f2:
         6d:1c:1b:ae:1e:ae:33:12:8e:9f:68:82:f3:fb:e0:9b:54:f0:
         65:f8:ba:b2:03:47:d5:c8:c4:d7:65:c1:e3:9e:2c:f7:13:21:
         3e:8a:19:7e:71:04:57:f3:b2:bf:18:19:90:90:b2:cb:9f:93:
         bd:19:34:d5:7f:2c:d4:d5:75:be:c9:d3:2d:86:44:7e:d3:88:
         41:e9:e1:7e:bc:a5:1c:c2:82:b2:78:33:d2:08:25:c5:21:77:
         38:52:5c:85:dc:61:f1:63:b8:c0:24:0a:e4:19:44:b4:7e:99:
         bf:a6:9f:69:54:2c:7c:36:2e:17:2f:10:79:97:97:40:44:7e:
         d3:e9:02:ea:fa:29:32:18:5e:44:21:a7:1d:b8:e6:58:d8:0e:
         da:c6:30:1f:e3:27:2d:c5:d2:b0:73:81:55:8e:33:8d:ab:46:
         2a:8e:f9:40:6a:fb:aa:8e:c5:dd:66:c0:c4:81:4f:56:d2:fb:
         81:fa:54:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 16:20:35 2026 by rpki-client