Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1750f3c1-cbc5-3e75-8753-38976bb0acdb.roa
File:                     1750f3c1-cbc5-3e75-8753-38976bb0acdb.roa (raw, json)
Hash identifier:          jhms24cimWccAjQSrjAgtoG9YJLUBwiTpRKhbrfBTGk=
Subject key identifier:   FF:3B:ED:33:90:46:13:5E:F1:D3:BE:98:5F:9C:23:B8:C6:E3:B7:F5
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584D24E12802AAE1C274F0C63D80
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1750f3c1-cbc5-3e75-8753-38976bb0acdb.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     30036
IP address blocks:        2604:2e8c:4000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e1:28:02:aa:e1:c2:74:f0:c6:3d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=945a70eb-c68a-406e-81c7-0b41c1341d00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:df:be:6c:ef:0f:bd:88:f8:3d:54:0f:53:7d:
                    e9:a2:dd:eb:80:bc:83:77:8d:8a:15:45:af:49:ed:
                    c9:2e:83:18:b5:ed:ba:07:8f:2e:31:82:80:a2:a9:
                    f8:04:b9:32:3c:3e:5a:d4:c2:f3:1f:55:7f:41:1a:
                    34:6f:15:46:1b:5f:bc:70:c1:b3:db:4e:7a:f0:e7:
                    16:6d:52:6c:33:ed:a0:6b:5b:ef:ec:fd:40:9f:fa:
                    34:73:33:da:c1:b3:2e:fb:78:62:8d:59:cd:a5:3e:
                    b5:d6:c5:c3:ef:82:e3:5e:c0:5f:46:3f:60:e2:28:
                    d7:cd:3f:1d:a6:fa:c1:12:cc:8f:a8:5e:45:4d:b5:
                    53:84:66:32:ae:9d:bb:c7:9d:3d:b4:a8:06:77:03:
                    c6:1a:68:65:2a:8d:c3:90:2e:2d:35:6a:8b:71:b0:
                    ca:10:5e:11:a2:8b:25:46:d8:aa:b1:67:7b:e3:a0:
                    62:5d:fd:13:19:59:04:df:c6:75:86:ed:01:93:28:
                    f4:af:c6:2b:49:26:a7:a6:13:8f:e3:87:c7:52:6c:
                    9f:94:03:12:1b:69:7f:09:f4:e2:a0:f5:e3:b8:6c:
                    65:05:86:36:16:54:1f:07:8d:58:e1:3f:e2:7e:4b:
                    bd:ef:d9:be:3b:7c:73:79:b3:eb:2a:68:ba:32:a4:
                    b7:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:3B:ED:33:90:46:13:5E:F1:D3:BE:98:5F:9C:23:B8:C6:E3:B7:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1750f3c1-cbc5-3e75-8753-38976bb0acdb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8c:4000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:76:ec:49:a0:09:38:6f:36:2a:ce:0f:8c:54:81:e3:14:92:
         f0:91:7b:9e:e9:e6:3b:c2:27:c2:d1:f2:c7:85:57:32:cc:da:
         53:c7:21:94:0f:e2:6d:71:59:e5:bd:55:35:60:ab:75:24:89:
         89:35:f6:af:54:55:59:ff:e2:ab:38:b6:d7:b6:46:40:af:57:
         44:a4:15:41:b6:22:2b:51:29:f3:70:e9:2b:ff:70:a4:a4:bc:
         ca:6b:3e:f6:d9:76:38:6b:53:f7:f8:0f:07:b5:42:2c:0f:a8:
         76:ff:2a:f6:4b:30:89:41:06:f7:ac:8b:09:26:5a:be:a2:42:
         2d:ad:34:ae:00:71:fb:73:07:6d:71:df:5d:ee:80:09:74:6b:
         bf:32:92:97:76:68:d2:9e:35:1e:85:e5:e9:0a:7f:35:85:54:
         bd:c0:23:3a:97:a8:94:3d:2f:42:fa:90:46:f4:3e:bb:54:ca:
         e2:aa:8f:62:32:4a:05:cc:08:42:fe:00:6e:9b:2c:f1:1e:e6:
         d0:ac:79:91:ef:c6:60:29:19:4f:a6:13:71:10:23:aa:a7:3e:
         25:06:42:1d:50:5e:65:07:c5:a2:35:52:5e:a1:19:99:05:3a:
         ae:c4:8f:0b:d9:0d:09:de:fb:48:72:fb:ea:64:a4:2b:46:b5:
         09:b7:3b:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:09:02 2026 by rpki-client