Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/505bf877-aa7d-3ec4-a4be-262e5b55a6d4.roa
File:                     505bf877-aa7d-3ec4-a4be-262e5b55a6d4.roa (raw, json)
Hash identifier:          IRO+8ZR21ocuvE9F3E/TXRuuGlvcUVgUKxAh0CrSeRA=
Subject key identifier:   6F:65:6C:D8:A2:ED:A0:E2:08:E9:5E:0A:D5:3E:6D:74:AC:5C:5A:DA
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584F4972BAE41AC35E1980D3A300
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/505bf877-aa7d-3ec4-a4be-262e5b55a6d4.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     30036
IP address blocks:        2604:2e8c:4c00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:72:ba:e4:1a:c3:5e:19:80:d3:a3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=4a982d42-41ca-4ef5-9be1-f11bc9b98bfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e5:f1:13:70:4e:01:ef:92:54:42:4d:f0:f0:
                    65:3e:1b:8c:e4:62:4b:2d:7b:c4:ba:48:1a:2a:6e:
                    60:19:85:bf:7a:c5:19:64:41:95:5c:ec:e0:7b:87:
                    4b:ed:24:b3:36:03:1d:bb:8e:75:ee:bc:e7:a3:c1:
                    fd:33:f6:ec:f8:67:61:86:07:37:80:c3:a8:d6:2c:
                    37:55:57:88:dd:86:f7:b3:5f:59:1b:fc:72:df:2b:
                    da:87:5a:97:9c:98:5e:c0:04:c7:6a:26:3a:6c:3d:
                    6a:64:17:d3:64:65:08:bb:c6:83:a0:2f:5e:e9:50:
                    db:80:8d:a5:22:0c:b6:ce:88:d6:bd:23:f9:08:de:
                    5a:35:87:1f:99:63:11:cc:5a:14:a7:db:06:ba:73:
                    c8:85:28:00:0c:e7:40:d3:1f:af:a3:b7:ee:36:76:
                    1e:3a:92:21:c0:ee:58:74:3e:9b:90:6a:2b:26:df:
                    3b:11:61:ec:e3:26:1e:ad:87:b6:56:a7:78:b9:5f:
                    9b:dc:61:4c:05:5f:19:74:c6:c9:de:73:a0:70:48:
                    85:50:02:e0:1f:4b:df:d2:67:49:d7:cc:49:35:7f:
                    a3:03:4b:e5:08:eb:85:35:2a:4a:f1:d9:da:b4:a9:
                    53:3c:33:ff:64:11:62:97:07:15:e4:4b:f7:86:36:
                    fe:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:65:6C:D8:A2:ED:A0:E2:08:E9:5E:0A:D5:3E:6D:74:AC:5C:5A:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/505bf877-aa7d-3ec4-a4be-262e5b55a6d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8c:4c00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:c7:4a:71:c5:64:b5:82:88:f9:cc:1a:af:c7:3d:2b:73:ef:
         fc:ac:d9:dc:ab:16:2d:d0:19:35:d3:47:34:df:c0:29:ed:0e:
         7c:2b:4a:ee:17:88:42:50:98:e9:b8:44:65:1c:b9:c4:c4:1f:
         bf:e4:e1:8f:62:14:30:ae:8d:09:e3:09:dc:01:1d:6f:06:3f:
         e2:5a:fe:fe:b6:96:d8:23:37:e0:1c:37:4f:68:e2:a1:91:6c:
         5d:a1:c1:8b:c5:c0:b1:dd:1c:2e:b3:b8:27:1c:a2:e6:25:f7:
         9f:18:b2:7b:a0:58:c3:e7:0d:f0:4e:b8:e2:9d:dd:16:f7:be:
         87:6e:f2:01:60:83:32:77:83:30:0c:f1:0e:80:f3:c8:44:5d:
         5f:51:09:8b:aa:da:d4:7d:9f:0b:79:e8:06:7c:80:3a:8a:fa:
         29:0e:7f:f8:bb:9c:77:c2:de:89:9c:eb:91:c2:da:b8:20:56:
         40:5e:06:42:1b:0d:a9:5c:d6:1b:bc:1c:a3:1d:b5:7d:a9:16:
         79:7b:90:f0:c4:ff:a3:a6:42:99:e6:f3:61:84:56:81:3b:9e:
         6c:6e:8d:d1:ae:4d:9f:82:04:bf:83:74:fc:ca:f1:2a:75:9b:
         63:56:b9:bf:71:b6:74:94:35:dd:50:fe:5b:0b:d0:74:f8:76:
         4c:73:f7:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 00:50:46 2026 by rpki-client