Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/11f3a5ba-88d1-3212-b2be-cc8b4d14e41c.roa
File:                     11f3a5ba-88d1-3212-b2be-cc8b4d14e41c.roa (raw, json)
Hash identifier:          6HEiupEM3jgan7Ma599mdsSIrwd2L5AKRrVy1A3izmo=
Subject key identifier:   B1:29:4A:1A:95:AE:C9:32:55:8F:2F:21:F2:B2:E2:A2:84:4C:F5:AA
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584D24E1278ADD73001694BB3F80
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/11f3a5ba-88d1-3212-b2be-cc8b4d14e41c.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     30036
IP address blocks:        2604:2e8e:7400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e1:27:8a:dd:73:00:16:94:bb:3f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=b3c9892c-571d-4b1d-99b8-7e3ea8c8b76a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:eb:74:82:a0:c4:85:5a:48:01:34:cf:16:cc:
                    d7:60:72:ba:7c:2d:51:8a:96:6d:5d:6f:9c:8c:03:
                    33:b1:c1:07:68:aa:22:d9:00:42:4a:ac:f2:9a:2a:
                    c7:01:c0:57:37:e4:4a:8c:6e:88:6f:c7:e3:1e:06:
                    53:fc:17:e1:37:2d:f4:03:37:ec:0e:63:eb:09:60:
                    31:ab:92:8c:8f:73:f6:2d:17:53:8a:51:40:46:31:
                    4a:41:ec:6a:ff:f1:c3:8d:bb:82:9b:68:db:b8:44:
                    ca:67:2b:7a:57:6e:64:fa:3e:48:9c:ab:81:14:42:
                    c3:23:b5:67:61:f2:43:ad:82:89:93:e6:02:58:5b:
                    ca:e5:dd:45:2b:94:a6:09:f6:65:2a:b2:71:b3:2f:
                    a9:36:7c:d3:17:d9:98:87:8e:63:f3:21:fd:f7:9e:
                    8a:45:9f:3c:19:96:84:d0:3b:e7:2b:81:06:d7:17:
                    46:a8:22:11:13:63:f5:d6:56:90:81:67:bb:a2:fd:
                    a7:0d:fa:7b:97:d5:31:3c:d2:86:be:a6:cf:82:17:
                    21:a1:2e:46:56:5a:d7:d1:d0:53:15:80:4d:d7:96:
                    58:83:32:9f:cd:22:d4:c7:74:e4:30:90:6b:9d:9e:
                    7b:c5:ea:d3:cb:02:d9:8e:5d:b1:d0:34:9f:02:ec:
                    3a:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:29:4A:1A:95:AE:C9:32:55:8F:2F:21:F2:B2:E2:A2:84:4C:F5:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/11f3a5ba-88d1-3212-b2be-cc8b4d14e41c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8e:7400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:85:42:8b:f6:2f:62:97:17:d7:83:9d:7a:b3:a1:b7:b7:35:
         b2:a5:50:c6:72:e7:22:0e:62:13:2f:22:53:e2:0c:53:82:af:
         a1:24:c7:0d:97:68:e0:9f:c3:b6:97:a8:2e:d3:ee:53:e9:6b:
         34:e0:b2:fa:51:d2:23:e7:6c:6c:23:80:07:cb:34:7e:bb:d6:
         2e:f6:80:70:ac:e3:1f:23:75:97:6e:c7:56:5c:3b:3d:13:3d:
         21:e1:e9:49:ac:3d:9b:ba:5a:11:4f:81:2a:df:e5:22:f7:84:
         7b:7b:9b:d4:bb:26:37:eb:04:03:95:64:53:4a:77:52:34:e6:
         2c:d9:e9:e9:23:93:05:d9:0d:44:7a:80:37:78:89:b4:89:0b:
         fe:61:50:65:15:94:eb:ad:3d:aa:54:4d:07:9a:7d:f9:72:83:
         68:50:5d:cd:b5:16:2d:35:8f:b7:3a:68:ca:75:79:6c:a1:7b:
         4b:89:75:aa:5d:86:57:4d:22:9b:c4:c7:1a:88:75:5e:57:4f:
         e8:3a:ed:44:48:22:97:e9:53:b8:28:a1:02:f0:d5:e3:de:e4:
         62:d5:2d:cb:03:b9:a3:2c:f4:87:27:cf:56:82:d3:9b:3f:90:
         44:9a:3b:c0:eb:e3:88:e2:13:79:06:df:00:41:8c:d7:aa:63:
         e8:85:2d:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:50:53 2026 by rpki-client