Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2a464f50-8c3b-3771-984c-9ec60ce1ecef.roa
File:                     2a464f50-8c3b-3771-984c-9ec60ce1ecef.roa (raw, json)
Hash identifier:          JItXRYPxkwLzSM6m1mFh5hDFUizM2xNMbCjwukTlYeE=
Subject key identifier:   54:C7:12:E6:F7:7E:03:FE:FD:63:70:C4:5B:33:30:61:18:13:05:3F
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584D24DF80506223EC54BD36EE80
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2a464f50-8c3b-3771-984c-9ec60ce1ecef.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     30036
IP address blocks:        2604:2e89:c800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:df:80:50:62:23:ec:54:bd:36:ee:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=1c2a5d8a-6ffe-415d-94e1-0f1fdaf28a09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:51:7f:0c:b1:40:9f:f2:ad:d2:2d:fa:b1:1e:
                    f2:5f:9e:19:c9:6e:96:41:93:02:a1:7a:2d:78:af:
                    85:7f:fb:3d:cd:b4:ed:db:80:12:a4:34:3a:43:da:
                    59:7d:1a:83:40:7d:ce:7e:76:34:77:e2:f2:28:58:
                    e0:7b:db:a3:ff:6e:77:6d:0d:d0:39:d1:59:75:f1:
                    50:95:58:f4:48:c7:b6:40:ce:7d:5b:34:4b:66:cd:
                    3c:8e:fb:65:a0:ba:cd:48:e8:17:e8:99:75:13:4d:
                    07:c8:a4:b5:d3:9a:95:25:a6:aa:e8:ed:10:6c:ba:
                    2d:f7:54:03:05:e6:ba:3d:85:19:b4:9b:ae:08:5b:
                    1a:d4:d3:39:60:6f:8d:8c:54:48:91:78:a9:3f:fd:
                    63:3b:96:f3:5d:9e:16:be:2a:d0:54:de:ce:67:29:
                    75:cb:8d:08:a7:c0:f3:2f:55:48:c0:3e:ca:6b:1b:
                    6c:d9:4e:1b:49:57:51:81:78:18:17:2b:33:c0:4e:
                    a9:1c:9a:72:ea:a1:ef:f4:fd:7c:92:c9:d6:e0:81:
                    76:7d:c1:67:90:0a:1f:81:61:4d:d6:49:a2:ca:3a:
                    d1:76:8a:c1:b6:4c:b1:80:be:3e:39:7e:42:f3:06:
                    e4:53:6d:77:39:17:40:e8:62:a0:42:66:e6:8d:a0:
                    d5:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:C7:12:E6:F7:7E:03:FE:FD:63:70:C4:5B:33:30:61:18:13:05:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2a464f50-8c3b-3771-984c-9ec60ce1ecef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e89:c800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:8c:4d:2b:78:e3:70:c2:8f:cb:d9:a6:ed:db:b3:d1:98:ab:
         7f:bf:6d:be:dc:11:66:e5:72:07:78:9a:48:88:a1:5e:a8:69:
         57:58:17:ce:63:59:ee:da:20:46:e9:dd:21:d0:7b:6c:5b:d8:
         59:77:6a:da:3d:f6:4b:e3:41:da:9b:c9:1f:f2:ef:f0:18:d7:
         48:6c:5c:49:a9:fe:03:b3:25:1f:49:35:65:62:bd:cf:bf:25:
         85:d7:d8:83:d0:28:8f:58:04:5f:d2:1c:ad:32:d2:77:0b:ac:
         d8:d3:5d:c0:89:e0:53:77:11:a4:15:65:05:9c:9c:b7:cd:c2:
         da:8e:4f:f3:b6:c3:05:a2:dd:ba:c1:dc:13:ed:1d:0d:1d:43:
         43:07:6f:80:e0:20:bf:f0:e8:bb:6d:a4:cb:2d:01:9b:97:6d:
         f5:0b:8d:26:d1:d7:14:56:79:fc:bc:6d:c5:91:52:79:73:3b:
         19:c2:56:63:7d:af:8f:f1:82:cd:8e:be:f4:cc:bc:fb:0e:e3:
         4d:8f:54:bd:d9:77:e3:5c:1e:f0:b2:fd:92:30:2d:90:0f:fe:
         49:a5:be:26:40:92:c8:ec:02:07:bc:b2:f2:07:e1:1e:31:55:
         e2:02:6f:df:b9:8f:c4:78:51:e4:72:59:a9:90:0a:a7:12:a8:
         50:c6:95:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:11:31 2026 by rpki-client