Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/123f721a-ef6b-3594-aee1-809863a3160b.roa
File:                     123f721a-ef6b-3594-aee1-809863a3160b.roa (raw, json)
Hash identifier:          h+Z7FeeZ1s7+JUdrO1JXXOrV0ZLhQNrtxAsVPPjFHvg=
Subject key identifier:   3D:00:3D:AA:4B:66:81:F4:B3:A2:D9:98:F0:8B:3B:4A:F8:F7:6A:DD
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584F497471BC113C9A2FB519EB00
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/123f721a-ef6b-3594-aee1-809863a3160b.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     30036
IP address blocks:        2604:2e8c:a000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:71:bc:11:3c:9a:2f:b5:19:eb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=0c9efce8-87d6-47a5-87d7-05707e774e49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:e1:06:5c:4a:e1:31:88:20:52:13:b2:ba:4b:
                    fc:40:20:b4:f8:e1:b5:e5:f9:4e:f0:b7:aa:7e:8b:
                    3e:f4:ef:b9:3d:af:64:13:ac:b0:01:89:8b:86:7a:
                    94:ca:a9:b0:ba:ab:96:2c:49:4a:78:be:8d:14:30:
                    9c:e2:3f:2e:17:f7:6c:d0:75:51:5c:78:35:9a:77:
                    f6:95:a0:f3:8d:64:95:1f:ba:a7:96:d8:e6:35:1b:
                    fa:ad:f4:08:55:ff:b3:53:0d:20:49:5b:fb:75:89:
                    c4:9d:59:0e:53:f2:6d:7f:ae:5e:07:6e:42:51:ab:
                    6f:79:4b:74:ee:45:58:04:25:83:c5:7b:e1:81:3d:
                    dd:32:f0:e7:66:a4:45:1c:b5:05:43:db:f3:17:0f:
                    4a:2f:b5:c1:79:5f:7b:91:eb:fc:39:43:84:6d:14:
                    87:78:eb:2b:48:25:2f:b6:12:cf:da:6b:f6:b7:80:
                    f0:65:5d:39:bc:e4:9d:6b:2f:46:1b:3d:1a:52:8a:
                    a6:55:74:f4:ab:c0:6b:fc:93:6b:10:a9:57:4e:a0:
                    55:75:36:66:d2:2e:33:50:c6:67:a9:69:05:42:cd:
                    85:d5:bc:62:d5:df:ec:18:99:ae:0c:74:89:53:af:
                    9a:37:f3:90:0f:0a:6b:40:5b:e4:93:31:fb:01:74:
                    4c:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:00:3D:AA:4B:66:81:F4:B3:A2:D9:98:F0:8B:3B:4A:F8:F7:6A:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/123f721a-ef6b-3594-aee1-809863a3160b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8c:a000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:17:1d:09:d9:a2:38:1a:92:ac:63:87:b6:78:06:80:91:97:
         b4:a3:53:be:53:87:31:c2:95:e5:69:f8:d9:5a:18:c5:c2:b4:
         22:a7:fb:5d:30:4c:f1:83:41:ec:12:5f:31:75:be:22:7f:59:
         cb:7c:7b:ea:a9:92:0b:79:bb:4c:83:28:33:98:4b:6f:9f:80:
         9d:7d:06:91:e1:7c:f8:21:2e:a1:e2:92:60:fd:57:81:db:65:
         e3:6c:af:41:ef:b4:54:1b:1e:a5:20:0f:22:4d:2e:43:b2:17:
         77:a2:86:d8:43:3c:77:b1:9c:97:35:f2:f8:8c:fa:1e:40:af:
         41:85:41:3a:a9:8a:22:b8:eb:d7:7e:a0:fd:29:79:52:30:2e:
         ea:ae:1f:7a:7b:0e:26:e5:d2:8e:80:8a:5c:e0:af:24:b6:ec:
         45:6d:7a:6e:89:ae:d1:3c:0e:95:c9:1e:b1:f0:87:da:79:8b:
         e0:15:7a:cc:e4:99:6e:cb:60:47:1a:36:79:d7:0e:a0:26:6c:
         8a:74:4f:23:9e:d4:98:68:4e:c2:bd:bf:7e:ae:a5:f7:9c:04:
         b8:69:f2:4e:45:40:e0:1a:17:8d:9d:c0:d0:79:df:fd:d4:74:
         aa:47:b9:e4:9b:92:8a:c4:42:93:19:c7:ae:b2:db:0d:43:4d:
         96:4f:f3:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 21:16:45 2026 by rpki-client