Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/6a50300f-0751-350e-aad5-af7472ef7302.roa
File:                     6a50300f-0751-350e-aad5-af7472ef7302.roa (raw, json)
Hash identifier:          duDRHHfQBSJANpBASY7Ijq7B/q9MKkOLj1qqnOiALOs=
Subject key identifier:   1A:FC:ED:C1:84:86:81:B4:E9:01:CC:3F:93:D2:5B:AE:5E:D2:DE:3F
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584E46BF2386FFFBE1D1D3BD6EC0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/6a50300f-0751-350e-aad5-af7472ef7302.roa
Signing time:             Wed 24 Jun 2026 09:00:12 +0000
ROA not before:           Wed 24 Jun 2026 09:00:12 +0000
ROA not after:            Tue 22 Sep 2026 09:00:12 +0000
asID:                     30036
IP address blocks:        2604:2e87:8800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:46:bf:23:86:ff:fb:e1:d1:d3:bd:6e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jun 24 09:00:12 2026 GMT
            Not After : Sep 22 09:00:12 2026 GMT
        Subject: CN=4ab66194-5482-4f7b-955d-00c9dd6fe2a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:7a:ac:a5:52:8e:57:cc:7e:35:24:2c:1c:b1:
                    e9:77:3a:4a:b6:e8:58:5a:4d:6e:24:23:21:9b:6d:
                    41:9f:e7:e3:6e:6b:b0:2a:bd:5e:d7:b0:b6:cd:21:
                    c3:ae:2a:e4:bc:d5:73:df:08:26:05:ac:e6:b3:9e:
                    b8:71:46:cc:10:ff:58:79:9f:6b:ff:0e:0c:1b:93:
                    fb:c6:16:e8:5c:9b:25:2d:13:a4:75:24:62:fe:62:
                    ee:aa:ff:33:79:13:eb:2b:47:36:1e:d9:9c:6e:90:
                    ee:37:a8:f0:ea:34:f2:d3:0e:71:d8:d1:1f:dd:a0:
                    b7:07:56:2d:8f:09:f8:9b:10:c1:ab:b2:31:cf:b5:
                    dc:f2:6c:df:78:57:39:4a:3a:98:a0:a7:1d:d9:9c:
                    f7:ee:6f:a7:0e:d9:2e:8b:04:28:82:d9:ec:34:dc:
                    3f:ac:80:11:6b:38:38:01:ab:83:f8:77:16:50:17:
                    ef:c6:00:60:eb:9a:d3:a4:fd:79:4f:01:09:7a:09:
                    59:e9:ef:70:9a:c3:ee:0a:02:49:cc:e4:e6:ee:8c:
                    b6:89:2d:6b:cf:fe:14:5a:36:e6:21:ed:8f:50:e2:
                    11:59:69:6b:8c:3a:01:b8:a5:10:3d:1e:40:9c:39:
                    13:79:3e:97:87:f3:3b:b1:68:fa:1a:f8:25:4d:19:
                    82:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:FC:ED:C1:84:86:81:B4:E9:01:CC:3F:93:D2:5B:AE:5E:D2:DE:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/6a50300f-0751-350e-aad5-af7472ef7302.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e87:8800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:8f:fd:24:14:f0:7c:a5:8c:ff:e4:ab:e0:d3:58:43:59:38:
         a7:72:e3:75:ca:a1:66:d9:68:63:d7:49:02:00:3c:42:72:c9:
         ee:aa:9d:4b:c4:11:7e:b6:ba:e4:cc:72:89:c2:a2:03:51:d2:
         5d:d8:b3:0d:4c:c5:c2:4b:f8:81:10:72:5f:38:47:11:16:6f:
         31:34:9d:9b:a1:14:d3:da:76:cc:2e:9d:65:c7:8c:41:78:b8:
         06:6c:98:46:cd:35:f8:85:4d:9c:d3:5a:db:3a:32:21:e4:f9:
         f1:f7:9a:60:47:d4:3c:d2:11:aa:dc:2c:11:92:94:c4:2c:3b:
         82:30:ef:67:b1:9e:57:8b:38:c5:63:2f:7e:e6:a1:86:80:c4:
         2d:88:71:fd:24:33:ad:79:8e:84:39:5a:16:42:fc:7f:ca:f7:
         3f:d6:b2:18:9c:87:fc:98:92:08:37:dc:6d:d5:9f:77:46:12:
         51:eb:25:c2:0a:e3:ba:63:23:6d:2d:38:0e:06:a1:a4:d5:b2:
         0c:b2:c6:15:aa:59:75:e9:f2:1b:05:66:af:6e:a7:dd:73:79:
         6d:94:0f:9a:46:d3:0c:fc:57:5a:5e:8e:08:b1:eb:28:ac:84:
         34:8d:a0:c5:aa:e7:2e:e8:7a:0d:b6:b6:78:20:f2:be:5e:d4:
         a3:8e:22:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:14:11 2026 by rpki-client