Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3285643d-b737-3920-88da-c90fcffe3fb4.roa
File:                     3285643d-b737-3920-88da-c90fcffe3fb4.roa (raw, json)
Hash identifier:          w8YHr+1+sAbkDgrdikq6Aac6hk0iBt2+TfeT7T6oCL4=
Subject key identifier:   A5:C4:EF:EF:2D:44:08:9D:8D:7A:D1:B2:E1:2D:A9:67:A7:D8:91:DB
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584F497472C2680E1FFA2EF1E520
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3285643d-b737-3920-88da-c90fcffe3fb4.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     30036
IP address blocks:        2604:2e8a:6c00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:72:c2:68:0e:1f:fa:2e:f1:e5:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=9e03c9d4-bc40-4ea0-95ab-b539c9bb58b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:5d:2a:cf:48:29:85:ef:a6:56:b1:6e:85:6b:
                    23:96:73:a5:49:6f:a8:66:9b:12:fb:53:7c:79:c5:
                    3f:df:6f:4c:51:0c:99:fa:fa:a2:0c:54:79:e3:40:
                    40:73:33:15:16:97:8b:6a:e8:f5:e7:19:8f:a6:14:
                    be:93:73:a9:0b:58:b0:0b:5a:c1:a7:77:c8:f4:f7:
                    a7:0e:98:55:74:10:76:18:8f:13:0e:83:27:87:b9:
                    c5:c8:04:0a:8c:50:c0:00:6e:31:14:71:8e:a1:d9:
                    ec:c1:f8:19:b0:31:cb:71:3d:f7:d2:51:2c:2f:ee:
                    82:6c:43:b0:57:cf:31:d5:3d:b9:45:9e:62:ab:2f:
                    12:8b:d7:2a:ff:0b:f6:21:dc:ea:67:df:36:63:8e:
                    2e:ac:9f:7a:04:80:64:3a:c4:35:2e:19:02:a4:8a:
                    c1:fb:4c:58:6c:fd:20:69:49:c0:b9:e8:4c:a6:bc:
                    ec:3e:2e:69:33:fd:8b:ad:91:ac:a7:1e:7c:a9:b4:
                    a8:65:71:83:f7:f2:44:34:99:2c:23:50:d7:f1:74:
                    db:df:ae:a6:1c:26:7c:52:1c:b1:6e:36:25:2d:60:
                    ce:cc:2b:62:1e:40:7f:62:2f:24:05:87:62:69:73:
                    8a:30:4c:0c:aa:f6:2a:d7:a4:98:cc:f1:58:60:c0:
                    57:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:C4:EF:EF:2D:44:08:9D:8D:7A:D1:B2:E1:2D:A9:67:A7:D8:91:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3285643d-b737-3920-88da-c90fcffe3fb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8a:6c00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:9f:dd:40:6a:b9:39:19:a6:13:74:e5:18:e0:59:31:0d:bb:
         e3:65:40:b2:fd:ad:92:9a:9b:bb:92:b1:bf:30:56:5b:8b:aa:
         ba:c5:23:dc:4f:00:ff:d6:c5:fd:70:10:3d:6f:1b:75:0d:19:
         d4:57:b4:56:ff:e5:f0:af:ee:f9:4a:d6:bd:44:cf:d4:af:10:
         4a:f1:3a:73:07:00:3a:d3:a3:74:43:1d:7f:33:c1:ff:b3:10:
         89:40:da:29:2f:21:f2:3f:55:b7:8a:65:d7:16:68:47:f3:f4:
         60:e0:0a:04:7c:9f:3b:26:dc:5c:c7:22:53:06:f3:8e:fb:fc:
         3d:4e:23:7b:91:6b:e8:cf:52:ad:2a:5e:92:d3:73:06:fd:9d:
         bc:89:1b:aa:74:66:56:7b:41:7a:9e:7f:b9:ba:67:cb:9e:9d:
         66:7b:89:60:40:bb:2e:d2:b5:3b:9e:1f:89:21:9b:32:3a:b2:
         fe:16:19:54:a6:9e:d5:a9:32:0d:6f:32:e5:31:6d:97:8b:0b:
         a4:bd:7f:34:c5:ce:13:b5:53:36:d2:65:80:c3:dd:d6:db:5e:
         a2:1a:6f:9e:b4:8e:b3:66:de:bf:5c:cd:19:fc:7f:fb:d9:aa:
         ff:44:cf:2d:35:c3:27:6f:95:48:d0:39:e4:2d:cd:c9:5e:ea:
         1f:72:1a:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 07:13:47 2026 by rpki-client