Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c1ad2cc5-4739-3685-8f6e-1113e0e20e4a.roa
File:                     c1ad2cc5-4739-3685-8f6e-1113e0e20e4a.roa (raw, json)
Hash identifier:          x+Hz/JzMMvSvqvWgM25MZT+n9jl0yZJBwyAoqWBCPWI=
Subject key identifier:   4F:E3:23:FB:11:4B:B9:64:F3:48:77:A2:4A:D6:31:93:54:CD:C4:F5
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584F4973499ECF49AB5A8FBC7F80
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c1ad2cc5-4739-3685-8f6e-1113e0e20e4a.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     30036
IP address blocks:        2604:2e88:3800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:49:9e:cf:49:ab:5a:8f:bc:7f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=cb67f494-9737-4227-b44b-3f175900e662
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:a8:8b:68:0a:ce:82:f4:62:b9:53:fd:ad:48:
                    f9:ad:d8:7e:b8:2f:71:18:b0:63:4f:a4:31:5f:00:
                    a1:46:f2:97:b5:76:58:d7:cc:c1:11:b9:95:07:fe:
                    c5:d0:68:e0:48:be:07:80:87:7c:45:1d:fe:c0:46:
                    44:81:c7:10:7d:13:db:3e:77:ce:20:d2:59:59:2a:
                    62:f7:7e:e6:6e:9c:f5:d0:e2:ca:8b:39:84:2e:f2:
                    08:46:e4:11:02:9e:3e:cc:3e:47:8b:bd:af:ae:50:
                    56:f9:b9:60:4c:4b:2f:35:40:a1:81:cf:be:c9:7b:
                    90:e2:64:74:54:8f:c8:e1:e2:87:d6:eb:10:a6:a2:
                    88:d9:83:a9:db:48:85:cd:3e:2e:47:b1:b5:bd:45:
                    79:60:c0:56:36:b1:25:a4:c3:87:82:3b:14:e3:39:
                    b0:4e:98:02:07:6d:52:8c:11:3f:37:4d:36:20:71:
                    d8:2d:5d:bf:61:8d:2e:fc:30:c3:36:17:c0:8a:58:
                    7b:26:48:66:70:c1:dd:2b:dd:01:44:81:71:34:13:
                    35:49:e0:e9:39:56:e1:67:6c:2d:6a:8e:bb:b6:f0:
                    3a:8a:f5:aa:90:7e:55:3e:e8:53:4e:6a:6c:aa:d8:
                    12:0a:16:ee:f3:e7:38:63:5b:1a:8f:3e:82:1c:45:
                    3b:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:E3:23:FB:11:4B:B9:64:F3:48:77:A2:4A:D6:31:93:54:CD:C4:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c1ad2cc5-4739-3685-8f6e-1113e0e20e4a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e88:3800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:1e:0b:c8:43:99:91:19:87:0e:60:e5:fd:12:c4:a7:e4:ea:
         c7:10:6e:70:55:3f:75:13:f0:03:6c:70:04:e3:4b:c3:c1:16:
         1c:7b:7b:2a:10:9b:ec:69:22:12:d8:63:e9:9c:00:b3:45:14:
         3d:b5:21:1d:f1:76:d6:72:1a:81:67:66:09:85:54:4e:98:e0:
         ba:ee:10:6a:11:52:bc:ca:34:61:d6:15:27:d6:e3:1e:51:1a:
         e1:61:32:cf:d9:b1:04:8e:b0:02:ad:b5:37:f5:33:be:51:89:
         a1:33:4c:f8:61:88:33:3b:ab:fc:20:03:6b:03:2b:a2:b0:d7:
         e9:e7:1c:f6:28:7e:3d:59:58:31:e9:0e:ac:68:44:97:76:24:
         51:44:90:4d:a1:57:1d:ac:2f:f6:ff:9c:f8:b0:c9:ef:13:70:
         f7:83:58:c8:cc:8e:e3:dc:12:c2:3b:ba:af:35:16:a5:69:74:
         ff:7d:d3:54:d3:83:5e:f1:fe:3c:95:be:7b:55:9a:1e:f6:5a:
         51:56:fc:78:d9:2e:9e:49:1a:56:e8:cd:4a:be:e9:42:9b:f9:
         a7:1a:f2:6e:5b:e5:81:a4:ee:4e:11:dd:e2:a4:60:1f:2a:0c:
         ba:27:14:30:48:5d:4d:d7:2a:23:77:e6:c2:e0:d7:d1:72:cb:
         ae:11:4b:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 18:31:03 2026 by rpki-client