Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1709fa4c-bb86-3fd2-9d2d-7651d02de31e.roa
File:                     1709fa4c-bb86-3fd2-9d2d-7651d02de31e.roa (raw, json)
Hash identifier:          +QvwJIzIV0PeW0c74i5zL3EB3MpWrPLVjEsMd3NfEFU=
Subject key identifier:   FE:EC:57:5A:AF:1A:62:E2:CD:E4:32:69:16:A2:D3:51:8B:EC:B9:8A
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584F4988E343ECF08511F6EBB180
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1709fa4c-bb86-3fd2-9d2d-7651d02de31e.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     30036
IP address blocks:        2604:2e8a:6800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:88:e3:43:ec:f0:85:11:f6:eb:b1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=4ead7a01-b6cf-4a2d-a472-d9104c4087e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:2b:73:1c:75:26:32:06:8c:8b:b0:38:d9:85:
                    c8:74:48:29:b4:3c:df:6a:de:31:f2:0f:bf:6c:4c:
                    1c:87:58:86:08:04:5d:ba:87:cd:db:df:49:0c:bd:
                    f8:cd:e4:57:a4:4a:58:e1:b2:6f:76:55:4a:9b:f4:
                    23:f3:cb:c6:33:d5:d9:e2:2b:fd:21:44:b9:0b:a3:
                    35:82:d8:dc:b5:6b:21:94:79:1e:db:04:40:f3:19:
                    7e:be:28:5e:45:d3:01:d1:74:35:f1:ba:5a:c2:7b:
                    33:6c:2e:ee:7e:41:2d:bc:dc:85:8e:d7:42:2b:f3:
                    3c:de:50:51:dd:60:3a:2f:f2:bc:95:1c:71:e2:6a:
                    3b:37:41:53:c6:6c:14:56:1a:23:63:86:b4:fd:97:
                    c9:5c:00:1f:d4:6c:39:46:13:7a:a7:a6:b7:15:ca:
                    c8:d3:d6:11:7f:47:c3:32:66:9b:39:4b:91:c8:0e:
                    9c:6b:92:60:7d:cc:6c:6c:d8:4e:3b:b7:ed:4e:22:
                    86:cd:4d:10:22:5a:73:69:51:97:be:a9:ba:13:6e:
                    b9:31:f5:ae:39:1f:03:0a:7a:d2:cd:c5:25:6e:89:
                    53:d2:58:9c:c5:fe:34:1a:bc:7e:e7:65:81:64:75:
                    91:98:2b:6a:f0:3b:18:8c:7c:e9:ed:34:ab:68:ba:
                    d8:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:EC:57:5A:AF:1A:62:E2:CD:E4:32:69:16:A2:D3:51:8B:EC:B9:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1709fa4c-bb86-3fd2-9d2d-7651d02de31e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8a:6800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:6f:56:8a:62:db:9c:3e:9b:63:0f:9b:a3:f4:80:ab:a0:dd:
         fc:46:55:76:ec:bd:db:ef:bc:b9:5a:5c:7a:10:e5:31:2a:6a:
         68:ac:1b:a0:bd:36:31:cc:65:87:9b:07:16:18:27:da:b9:fb:
         4d:2b:35:35:a5:17:f4:c7:a7:22:8a:ac:6c:50:b3:4e:23:88:
         a6:03:df:69:ac:e8:1c:34:d2:4d:9c:6e:08:6c:3e:b8:11:79:
         10:22:77:e5:18:df:54:c2:fe:eb:50:c2:0e:28:14:ed:24:45:
         50:9d:c6:ab:c3:29:f3:2c:7c:e0:dc:50:ef:74:32:b2:ff:68:
         09:ea:83:07:b3:33:be:79:4b:98:4e:ed:0e:1f:24:7c:62:24:
         a1:40:6a:e9:1e:72:a9:d6:87:84:8c:4a:b6:00:dd:c9:53:7f:
         c2:a6:6f:ec:e6:2f:d3:44:de:8b:ec:48:e9:e4:1c:75:51:ed:
         99:00:9b:0c:ef:dc:88:79:45:b8:3a:94:4c:48:4e:e3:8d:27:
         5c:a7:3d:3a:67:88:00:6a:b4:dd:ac:81:59:18:8f:f5:f3:c9:
         28:bc:4d:a7:f7:b9:68:91:1a:8b:42:c5:51:26:27:0e:61:cf:
         5f:9d:a1:a5:6f:c1:6c:a5:ce:c2:05:3a:05:20:cd:6d:09:9c:
         e8:f8:67:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 08:50:32 2026 by rpki-client