Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/6083b039-817d-33f6-bc48-b8d74bd94452.roa
File:                     6083b039-817d-33f6-bc48-b8d74bd94452.roa (raw, json)
Hash identifier:          VDw9mMrSfJ/aLqqp72wGwqOJwDX+stTReLi9FQ2b9aA=
Subject key identifier:   2F:1B:85:B6:57:1B:19:B6:C0:D5:B4:19:13:C0:FB:1A:3D:5D:23:7F
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584D27AAC3846858DF8BB0D923F8
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/6083b039-817d-33f6-bc48-b8d74bd94452.roa
Signing time:             Fri 13 Mar 2026 13:00:40 +0000
ROA not before:           Fri 13 Mar 2026 13:00:40 +0000
ROA not after:            Thu 11 Jun 2026 13:00:40 +0000
asID:                     30036
IP address blocks:        2604:2e8b:b000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:27:aa:c3:84:68:58:df:8b:b0:d9:23:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Mar 13 13:00:40 2026 GMT
            Not After : Jun 11 13:00:40 2026 GMT
        Subject: CN=750bc32e-a9b5-4710-b27f-9631cd44cb8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:9f:32:b8:e0:67:4a:b2:1d:46:69:67:4a:39:
                    72:af:db:00:e7:6e:d0:b7:a6:dd:b3:92:81:0c:f4:
                    5c:12:fd:6e:b5:67:bb:be:31:82:07:dc:74:42:a4:
                    ff:7e:6f:52:24:fc:4f:55:db:bc:67:a6:28:2a:a2:
                    e6:9b:a1:bf:7e:a8:5a:08:ae:f3:0e:8a:43:1b:91:
                    87:ea:f1:66:4e:0f:06:8d:b0:8c:bd:9d:e8:a2:bb:
                    79:92:bf:c2:7c:7d:78:3d:99:df:ef:c1:7f:d6:d4:
                    48:37:2a:80:f9:a6:8a:4e:5b:f4:4a:3a:5e:8d:e3:
                    94:83:33:e9:18:6b:13:49:04:00:54:5b:a5:7d:49:
                    66:44:e9:76:5c:00:3c:a0:d7:3f:1f:a8:c1:4d:bf:
                    33:3e:ed:5c:47:41:19:6e:41:cf:ea:e3:c9:76:94:
                    a6:3b:8c:c2:7e:43:aa:ae:9a:22:fd:eb:d4:9d:64:
                    95:7f:53:6e:b1:b9:11:ff:bf:51:b2:81:52:0b:60:
                    75:73:52:67:09:e6:eb:8b:ab:6c:25:63:85:b1:7f:
                    ae:50:1d:49:8a:19:5f:10:0b:d5:2f:5a:98:3b:93:
                    ef:ec:ec:a3:81:27:0a:ac:b4:38:0d:8c:83:61:66:
                    f8:9c:be:f1:bc:e2:2a:e1:2b:0d:e9:5f:80:3f:29:
                    a6:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:1B:85:B6:57:1B:19:B6:C0:D5:B4:19:13:C0:FB:1A:3D:5D:23:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/6083b039-817d-33f6-bc48-b8d74bd94452.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8b:b000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:81:57:ae:9c:08:f6:2e:48:8d:b5:4b:5e:0d:f7:12:99:0d:
         dc:8e:49:1d:96:13:1d:ae:c0:60:8f:84:08:42:72:1f:01:16:
         c0:08:ae:5b:f8:86:4f:4a:2d:c2:9c:16:a1:bc:64:42:b8:05:
         fa:06:78:6c:0d:cb:ef:70:65:f2:73:37:f1:f2:b8:3d:30:f3:
         f2:d4:a6:9f:64:3c:83:d6:8a:e2:d6:4a:02:21:85:f2:c7:f8:
         99:10:c6:84:f7:68:47:7b:08:9a:d7:42:66:7d:ba:92:d3:2f:
         4a:5d:5b:4f:57:64:c9:ee:a1:5d:ed:95:1b:40:df:0b:22:bb:
         26:00:ae:b2:e7:55:74:d0:df:ed:88:86:84:de:be:ee:b6:37:
         5b:13:49:c7:cc:c7:01:ce:17:2b:e7:d9:9c:ef:8d:38:12:1a:
         ca:64:c7:fb:1a:49:25:09:4f:f6:a9:90:f8:c1:72:c9:c5:df:
         e6:64:c0:80:49:e3:1a:14:d4:ee:06:3d:d7:9a:c9:fb:82:35:
         84:61:14:be:f4:2f:06:c4:df:af:6f:3e:95:a6:34:d9:3f:b1:
         0e:75:ac:bc:7e:b6:79:26:6c:71:1e:d9:20:4a:6f:bc:0b:55:
         ef:42:be:b7:db:dd:36:9d:6b:01:15:aa:a0:55:30:6f:2d:35:
         83:b3:28:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:29:40 2026 by rpki-client