Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/6cb1ba5b-fc09-38e7-ae50-de0d4ac21793.roa
File:                     6cb1ba5b-fc09-38e7-ae50-de0d4ac21793.roa (raw, json)
Hash identifier:          mEdeR57JqZ4uFX3ZUcjNeanSQkGwctJMYDg2Sa1a7bQ=
Subject key identifier:   F9:85:51:7D:18:E2:F1:BF:DD:EC:F8:C8:E7:0F:74:7D:C1:17:EB:DC
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584E74CF70EA63DC266843ED1A80
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/6cb1ba5b-fc09-38e7-ae50-de0d4ac21793.roa
Signing time:             Fri 10 Jul 2026 21:00:12 +0000
ROA not before:           Fri 10 Jul 2026 21:00:12 +0000
ROA not after:            Thu 08 Oct 2026 21:00:12 +0000
asID:                     30036
IP address blocks:        2604:2e8f:c800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:74:cf:70:ea:63:dc:26:68:43:ed:1a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jul 10 21:00:12 2026 GMT
            Not After : Oct  8 21:00:12 2026 GMT
        Subject: CN=133ea09a-1b31-4f5e-b0e9-74c51683fae8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:39:62:86:c0:8b:fb:25:11:22:00:0c:eb:ba:
                    95:77:04:50:90:55:76:c5:ec:03:5f:3b:f6:a6:ad:
                    d3:32:e9:c7:2c:e2:d9:5c:d1:37:52:5d:60:13:b1:
                    ae:d2:95:bd:e8:b7:89:66:a0:0a:2a:a5:75:3b:b2:
                    0f:ef:cb:42:e9:5b:c5:2e:62:74:d9:e0:93:e5:32:
                    f0:74:63:7a:72:d1:28:bd:95:70:03:60:f2:45:56:
                    6e:ed:c6:37:59:f8:56:ae:5f:b6:e1:bb:f2:72:77:
                    d3:41:f7:ac:fc:6a:b3:d8:40:49:d3:29:c4:53:19:
                    59:d7:4b:b5:9c:73:03:eb:ff:58:8d:52:3b:55:3c:
                    f6:35:60:31:55:1d:39:41:25:78:c6:66:87:12:72:
                    e5:7e:5c:80:e0:b4:b3:74:de:6f:db:97:02:b4:c0:
                    5c:bb:0f:ce:4f:5f:3d:b0:e6:f0:38:22:c5:93:0b:
                    ed:d4:59:bc:37:87:a2:e7:6c:7e:10:03:0e:5b:00:
                    32:7a:9a:5f:fa:f9:99:d6:f4:3e:00:2d:a6:c8:ec:
                    a8:2a:ea:bc:9a:56:12:3d:dd:77:13:13:83:c8:03:
                    28:8e:44:90:3e:c4:b5:a6:d4:b1:0b:eb:d8:3f:d7:
                    64:e9:15:5b:a1:0b:16:64:00:f4:e0:5c:40:56:aa:
                    49:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:85:51:7D:18:E2:F1:BF:DD:EC:F8:C8:E7:0F:74:7D:C1:17:EB:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/6cb1ba5b-fc09-38e7-ae50-de0d4ac21793.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8f:c800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:66:4f:c9:79:95:9f:e1:39:25:2a:3d:e9:1e:e3:cc:f9:83:
         4d:53:b2:a9:2e:0a:5c:1c:1c:5d:46:32:a1:bf:05:e8:7c:6a:
         12:56:5e:89:a9:89:a3:1d:7b:b6:28:3d:d3:5a:2d:ac:1a:ef:
         5d:3b:92:34:dc:35:ef:2d:d1:16:af:fe:a8:a0:49:bc:c1:0f:
         57:91:cd:f1:f5:2d:fc:45:be:ae:8e:f5:f0:cf:00:e5:49:2f:
         7d:ac:04:86:33:0a:de:55:2c:0c:ed:37:cd:ea:4e:89:5f:b6:
         9f:83:e2:67:57:ac:20:ac:10:4b:63:a1:bf:7c:7a:e4:37:aa:
         a6:35:18:39:d6:6c:2f:94:d7:f4:11:d4:05:93:45:7d:52:07:
         63:c9:14:a6:34:74:7c:a7:99:45:91:da:82:cb:2e:48:10:e3:
         99:f3:fc:de:c1:3e:40:1c:61:c4:68:8d:ea:c7:24:4b:6b:da:
         45:6d:8f:45:f9:10:0a:b9:a8:de:5f:aa:18:d6:ae:b9:7b:ef:
         54:43:7e:63:2d:cb:37:8d:72:7f:e9:39:48:cd:b7:38:c0:77:
         1b:3e:82:89:ce:07:68:36:c1:32:88:ed:7b:c4:34:48:56:84:
         8f:d8:50:55:81:04:46:e7:a5:c1:ba:61:df:36:ea:00:1d:8d:
         f7:13:12:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:22:31 2026 by rpki-client