Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8b803c2b-e03d-3c57-ad76-5b6b9ca21863.roa
File:                     8b803c2b-e03d-3c57-ad76-5b6b9ca21863.roa (raw, json)
Hash identifier:          5EpTBsa+w+LxpE0sZfNDeTx2FcdNZItu0aPcNpo8VXQ=
Subject key identifier:   3C:F6:DA:05:BA:6E:A4:42:33:2E:57:99:7E:6E:3D:FF:2D:1D:6B:0F
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584F4974447B5B78A20F694CA600
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8b803c2b-e03d-3c57-ad76-5b6b9ca21863.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     30036
IP address blocks:        2604:2e8e:d000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:44:7b:5b:78:a2:0f:69:4c:a6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=aa14f56d-a423-45d8-888c-7246c5a41100
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:70:6e:44:2d:5f:d0:ae:6a:de:9d:b9:16:a1:
                    c7:08:12:7a:40:16:77:18:99:95:a0:3a:a2:53:eb:
                    f9:d9:39:63:0a:a1:2c:2d:31:5a:a1:ba:c5:88:2a:
                    b0:62:17:0c:68:b9:64:59:90:04:8f:80:2f:06:60:
                    78:66:6e:93:bd:6e:19:21:c4:d6:ed:64:6f:ea:4f:
                    67:e0:9a:e7:2a:90:ae:9c:f5:f5:e6:0a:14:c1:b3:
                    0f:65:9f:9a:43:c1:9e:e9:2e:b8:e5:82:54:ca:fb:
                    43:db:48:7c:65:25:e5:07:be:9f:2c:a4:ee:96:aa:
                    3b:74:f6:90:5f:27:44:09:6f:ee:9d:2d:7d:e7:d0:
                    cf:a7:1f:75:6a:00:57:56:f0:01:1b:09:19:cb:a4:
                    29:e8:16:98:9e:d0:75:dc:36:3a:a8:65:b6:99:f4:
                    ec:14:f9:95:5c:f9:02:fc:9d:d5:b8:f3:17:42:33:
                    7e:bf:66:bf:a2:d3:a3:66:3f:27:d5:cf:8a:27:f6:
                    50:a7:5e:12:3f:0e:a5:91:da:e5:a9:57:19:8c:a4:
                    55:82:01:ca:02:0b:17:18:e0:b4:fb:f2:7c:a3:b7:
                    88:d2:a4:00:c8:29:ee:2a:77:9c:46:ef:64:b7:98:
                    46:1e:90:88:f0:04:86:a2:ec:cb:34:43:5a:eb:09:
                    35:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:F6:DA:05:BA:6E:A4:42:33:2E:57:99:7E:6E:3D:FF:2D:1D:6B:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8b803c2b-e03d-3c57-ad76-5b6b9ca21863.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8e:d000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:2b:45:cf:97:5e:94:e9:2d:3e:af:4e:cf:39:88:bf:fc:3a:
         55:9c:ca:54:7b:25:88:59:fd:fb:bd:4e:ea:5f:0c:03:9e:21:
         81:31:6a:87:cd:6f:f5:15:1f:ab:61:08:e6:6e:d4:fa:43:39:
         59:7e:17:19:7b:f2:d6:0a:bc:21:3f:60:ca:c9:44:bd:90:a5:
         31:68:97:ce:f1:d5:4a:f2:a9:fd:9a:e5:6e:4c:70:fc:b9:91:
         df:45:2c:18:c1:51:19:4b:28:bc:4a:cf:c2:a5:f2:a2:c9:e4:
         30:96:32:5d:84:b3:61:16:3e:d7:bb:a7:14:05:13:9a:c0:7d:
         c9:3b:29:07:91:ef:92:8f:ae:42:7e:b1:5b:d1:08:b9:85:3d:
         47:c3:3b:dd:5c:2a:46:c7:3d:82:2a:52:04:78:54:8e:98:47:
         31:cb:e1:f1:10:f5:22:29:72:7f:73:44:dc:b3:ba:5a:68:f6:
         37:a9:3b:e6:8c:36:9b:07:49:d0:57:7b:77:19:1d:59:68:28:
         4d:54:ea:bf:65:ca:7a:8e:37:43:6b:aa:b4:57:89:1e:6f:43:
         10:c8:da:0d:de:bb:39:38:bd:dd:3d:11:58:09:c1:36:42:92:
         66:da:5e:b5:00:d1:74:f0:5c:1f:eb:36:c2:19:7c:d8:b9:a2:
         8d:f6:37:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:43:54 2026 by rpki-client