Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9f58e746-fc08-3bea-ac49-140fc48166a6.roa
File:                     9f58e746-fc08-3bea-ac49-140fc48166a6.roa (raw, json)
Hash identifier:          KmNPpQd38jYX7xDtX9wIxCkJ0Wj6ptPxkYcMZTVP+j4=
Subject key identifier:   14:34:D9:40:E2:C6:4D:79:C5:EC:53:68:43:EC:62:21:9C:FA:23:77
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584F4986F82CACE93996E4C262B0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9f58e746-fc08-3bea-ac49-140fc48166a6.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     30036
IP address blocks:        2604:2e8c:ac00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:86:f8:2c:ac:e9:39:96:e4:c2:62:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=879b65b3-e65c-4c1e-85fc-c8bcecc27ece
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:55:0b:bb:1a:c7:de:b7:a5:21:fd:95:41:4b:
                    e4:ca:ba:e4:9d:e0:bb:2b:27:8f:e6:e5:82:de:d2:
                    3a:18:89:7e:fc:0f:60:bd:cc:bf:9b:ec:d2:19:ce:
                    60:91:cf:0b:d1:fa:fc:0b:d2:50:9d:16:8a:4d:ce:
                    f9:36:42:a9:ec:03:5b:42:5b:64:0c:4b:e7:65:c6:
                    da:4d:b7:90:3b:ec:9e:de:99:9a:3a:50:ae:b3:c8:
                    c3:8b:77:57:ff:05:9b:e3:eb:4f:70:66:3e:da:b7:
                    41:ab:4e:99:c6:01:c2:ed:fd:d9:c6:ed:b5:30:2d:
                    5f:69:95:f6:29:fc:2e:dc:68:91:fc:56:24:53:41:
                    12:12:55:cb:d0:fe:ca:15:b8:f4:02:bf:50:f3:f9:
                    86:62:3f:0c:a3:94:b9:96:38:de:36:5e:53:56:ac:
                    54:25:7a:a2:d9:7d:cf:6d:40:4d:5b:c4:59:53:69:
                    ae:a1:ca:7a:b1:b0:18:53:4d:d2:ba:b3:8c:c8:c2:
                    3e:39:bf:82:73:15:33:3b:29:5d:b0:81:43:a0:8b:
                    33:d0:86:96:df:a4:fd:c1:14:af:4b:65:a0:71:15:
                    65:de:01:30:cb:73:aa:1a:d8:d0:aa:b3:fe:a0:2c:
                    f5:eb:d6:df:96:8d:f4:9d:e5:5c:93:c7:ac:7f:90:
                    c4:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:34:D9:40:E2:C6:4D:79:C5:EC:53:68:43:EC:62:21:9C:FA:23:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9f58e746-fc08-3bea-ac49-140fc48166a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8c:ac00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:32:d4:da:7a:4c:fe:ca:8d:7f:c6:c3:27:1e:10:3f:2f:97:
         6f:53:9a:8a:5f:f8:af:22:6c:fe:56:43:ea:8f:34:71:92:63:
         a5:53:c2:82:31:9f:c4:3f:d2:87:1f:56:4e:cd:86:bd:9f:4e:
         eb:dc:18:a3:ff:00:0f:37:4f:b3:5c:22:f0:1c:c6:91:22:ab:
         80:43:e2:16:7b:3f:ae:86:38:59:f7:2b:64:fd:d6:5c:ee:37:
         a9:52:64:42:f7:c9:4b:4e:fa:00:67:6d:e5:41:59:69:cd:8e:
         5c:4d:dc:a9:e5:76:3b:0e:62:90:11:75:7e:60:bd:61:fd:0f:
         1c:23:02:ec:31:75:25:5a:00:ac:b1:db:08:f4:43:e9:0c:cc:
         10:51:64:50:2f:27:fd:09:99:87:8c:1b:34:0a:87:95:b9:8f:
         83:03:2d:2e:2a:1b:dd:14:be:11:77:8a:68:74:b0:96:55:5b:
         77:bb:5f:0f:4d:0d:25:a3:31:4e:5f:e9:cc:c7:0e:8b:6f:d6:
         27:cf:ba:15:0b:45:25:0a:73:87:7f:60:f5:ef:1d:92:ed:f6:
         b5:71:49:9b:a7:f8:8a:66:3c:f4:63:49:93:75:99:a3:55:02:
         9e:18:06:f9:48:23:b2:fd:23:02:06:01:d7:24:cd:66:81:69:
         21:43:db:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 16:00:46 2026 by rpki-client