Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8ccf73ec-1a35-30a4-a92c-21ab107c192e.roa
File:                     8ccf73ec-1a35-30a4-a92c-21ab107c192e.roa (raw, json)
Hash identifier:          GeHxJA+bDmyG7mxnAnIHx3k2XsK+DYlHq9IMs1KE2yg=
Subject key identifier:   82:D0:86:AE:78:1B:E3:9B:57:B9:97:99:93:CA:D4:F5:DB:AE:C4:96
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584F49737269CF99FF7D436A2EA0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8ccf73ec-1a35-30a4-a92c-21ab107c192e.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     30036
IP address blocks:        2604:2e8e:6c00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:72:69:cf:99:ff:7d:43:6a:2e:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=b209d157-2b0d-451b-bb79-2a80544a4297
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:84:1f:f0:f2:89:04:b9:db:37:9d:2a:03:ad:
                    0f:2e:ec:3d:8a:e6:16:74:ff:2f:4d:2f:8d:83:5e:
                    c9:4c:57:7c:31:14:38:1e:e1:5f:85:00:2d:f6:b2:
                    9d:ed:1d:43:62:81:32:f3:3a:10:2e:4f:52:19:b7:
                    4c:52:dc:0e:16:6c:63:af:18:53:af:f1:6b:85:e9:
                    18:f7:d5:94:4d:c6:6e:c9:b6:6b:b6:a4:f3:65:41:
                    ed:02:fd:a1:4a:c3:8c:22:17:b9:22:c2:34:5a:ef:
                    1f:5d:10:62:3c:f6:87:95:00:10:a5:0d:a8:d4:3a:
                    1f:27:37:3d:b6:f4:3b:b2:b1:03:3d:3e:4d:c9:b5:
                    76:96:3e:08:35:ef:eb:66:d1:94:78:1f:83:05:82:
                    32:83:4a:88:2e:22:94:9c:09:a9:2f:1b:a5:44:9e:
                    d5:19:11:49:c7:6a:a9:70:44:c4:02:7b:94:4f:dd:
                    e2:ef:3c:cd:de:20:4e:c3:dc:04:6a:5b:90:3d:fc:
                    9c:61:ac:f4:b1:87:a6:5b:2b:ef:9d:df:17:67:11:
                    a7:2e:65:94:18:db:4c:fd:3c:57:ce:da:4a:1b:ff:
                    da:3a:ea:18:38:71:4c:84:a0:61:3a:13:6e:51:22:
                    d5:fa:92:6c:5e:7c:c5:25:ae:dd:3e:fd:21:b7:3c:
                    e0:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:D0:86:AE:78:1B:E3:9B:57:B9:97:99:93:CA:D4:F5:DB:AE:C4:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8ccf73ec-1a35-30a4-a92c-21ab107c192e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8e:6c00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:78:7a:e2:4c:43:5c:39:da:19:a2:88:02:0a:25:4b:ad:7c:
         e1:b7:34:0a:95:7a:9e:2c:0e:f6:ee:66:16:9e:14:51:3a:93:
         a2:e3:c2:74:7c:39:3a:f9:33:a1:9e:c5:a6:11:d6:8e:51:bd:
         01:5a:15:f7:1c:ca:07:9e:7a:b3:61:d0:45:2d:6b:63:42:f1:
         4e:35:1d:ff:eb:c8:8a:7e:48:80:4b:28:9d:37:f9:32:f2:97:
         50:e4:b9:1d:ad:e4:36:5a:f4:85:94:3e:29:6f:bd:16:7a:84:
         fb:32:0f:83:97:86:1a:c0:fe:12:6a:a7:a1:9b:9d:07:bb:af:
         08:96:5c:9e:a7:fb:f2:ec:03:51:4e:bf:79:40:19:30:e6:12:
         01:bb:a2:29:d8:2d:d6:aa:62:2f:38:88:2b:da:22:51:df:2c:
         9c:e7:a4:57:38:3d:50:5f:2c:3a:96:d9:5c:47:a1:e4:2a:77:
         e5:0e:77:08:ca:79:9e:46:13:43:64:da:2d:4e:ae:d6:ad:74:
         be:05:ae:c9:b6:ec:66:6e:dc:bd:0f:7f:5f:03:19:05:ea:69:
         94:55:2e:a8:a4:27:54:78:1a:aa:c7:7d:23:85:b8:9c:ad:05:
         3f:a3:d1:a0:b6:1e:f2:ef:b1:d7:18:bb:04:72:44:6e:86:a6:
         41:41:8e:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 17:10:03 2026 by rpki-client