Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5f2033f1-0354-3736-81c7-6243ab600dbe.roa
File:                     5f2033f1-0354-3736-81c7-6243ab600dbe.roa (raw, json)
Hash identifier:          WxQc8kQ8M48RvpXRy1UXe+1mYB+zCFpbDe2g3/bW58k=
Subject key identifier:   98:FA:89:A4:CD:6D:AD:68:F5:F9:FF:3C:9D:31:E8:47:8E:CD:9A:0C
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584D24DF6BA08EBC3EC79D1FBAB8
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5f2033f1-0354-3736-81c7-6243ab600dbe.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     30036
IP address blocks:        2604:2e8c:b000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:df:6b:a0:8e:bc:3e:c7:9d:1f:ba:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=430743c7-03c4-48e5-b396-4b66ab448911
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:91:9b:17:14:72:a6:3c:72:3e:5f:0b:ca:ad:
                    6f:2d:4c:80:f4:37:25:d8:73:8a:21:f3:c7:b1:82:
                    37:a4:a8:dd:50:6b:27:b5:97:b7:a6:36:e2:9e:26:
                    a9:03:da:69:95:80:12:49:c0:28:7a:31:0e:84:1a:
                    79:2f:4c:b4:79:fe:13:aa:57:66:3d:1a:23:4d:1c:
                    65:78:72:6d:00:55:dd:ab:51:c6:50:c7:c8:82:04:
                    d8:87:29:be:62:cf:a2:39:2a:14:f2:17:b5:7f:dc:
                    e9:25:e0:a9:5d:3c:2d:24:6d:9f:e2:c9:fe:45:bd:
                    86:d5:bd:e1:5d:ae:85:11:c2:41:9d:4c:04:b3:eb:
                    65:ff:0f:78:96:f6:12:68:2b:84:31:76:39:92:d8:
                    ea:4b:2e:38:4a:78:b8:34:24:1a:7c:b6:b0:9c:5e:
                    d6:42:b6:d8:20:1a:bf:43:eb:a0:63:bc:1c:bb:c3:
                    e3:8d:0e:18:a3:52:89:1f:25:18:a9:43:73:3e:47:
                    53:49:e2:93:1a:f9:66:77:52:ee:f6:45:dc:1c:d2:
                    c4:4a:77:6a:a8:1d:b0:ee:38:fa:cc:da:87:d3:aa:
                    78:b7:9b:63:a3:83:d4:4d:65:80:8a:20:46:92:ae:
                    fb:e0:ff:98:f5:0b:d9:27:0d:86:b4:11:60:43:67:
                    17:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:FA:89:A4:CD:6D:AD:68:F5:F9:FF:3C:9D:31:E8:47:8E:CD:9A:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5f2033f1-0354-3736-81c7-6243ab600dbe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8c:b000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:71:2f:be:9b:70:38:9c:c5:65:c4:c6:60:e0:f2:7b:e7:20:
         6e:96:4f:40:f0:5c:06:38:6f:f4:8d:70:4e:09:7c:77:55:33:
         bb:eb:52:d4:89:60:e2:3a:b3:df:61:fb:d7:1f:fc:e4:00:86:
         66:9a:84:15:8b:01:4f:ae:52:86:4b:3f:51:01:e5:63:b4:b6:
         19:87:d0:ce:41:0c:b1:56:21:71:eb:8a:0f:75:aa:18:c3:05:
         d1:c7:63:a8:52:79:dc:df:7c:26:e8:d8:df:48:4a:c7:1e:71:
         34:b4:c9:c2:68:2d:68:85:4f:62:58:69:a9:7e:4a:44:e9:5f:
         ce:63:97:b6:a6:71:45:2b:66:79:2d:48:9a:b2:5f:6a:b8:a8:
         22:fb:3f:f2:40:1c:c5:5f:a1:d2:2d:e8:76:3c:83:15:13:a7:
         99:6b:f8:b6:c7:ef:ab:06:90:68:52:db:16:67:54:3e:f3:a2:
         cc:fb:42:8a:16:cc:b0:bc:74:55:a4:20:d2:2d:55:f9:c0:51:
         84:4f:f4:b3:83:ee:04:76:2c:bd:2f:12:d8:e3:5a:e9:84:49:
         24:0e:28:ea:c1:ae:6a:91:1b:ce:05:c7:86:92:73:60:89:ce:
         ce:8c:50:af:07:5c:69:ed:47:4f:27:49:0e:93:10:8a:64:a9:
         be:d8:33:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 01:07:23 2026 by rpki-client