Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c9c4e958-6ecb-3e53-83b7-28a5ff7427c5.roa
File:                     c9c4e958-6ecb-3e53-83b7-28a5ff7427c5.roa (raw, json)
Hash identifier:          ORQ7XsUTQGk6fX1vx5tEKaYDLsLhIl/AESUg15t0814=
Subject key identifier:   2C:75:98:4D:B8:E8:5D:49:8D:63:C0:63:91:92:A2:E7:3C:8F:71:F8
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584D24E130C325BC8E277CA3F8A0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c9c4e958-6ecb-3e53-83b7-28a5ff7427c5.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     30036
IP address blocks:        2604:2e8a:e800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e1:30:c3:25:bc:8e:27:7c:a3:f8:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=6062a6cd-b032-4cf5-ad41-e0b31b1a212d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:00:d0:f7:eb:54:6b:b9:b1:91:54:28:0a:86:
                    12:e4:9b:fe:b5:87:e8:e4:58:86:b5:5b:e8:ce:29:
                    48:a9:9b:9a:fd:16:60:fb:78:6f:31:e1:6f:14:26:
                    d0:8a:e0:9b:31:0b:51:74:d5:33:d2:fa:08:13:6e:
                    cd:05:e6:24:77:50:74:6a:fc:1c:db:98:5b:02:22:
                    69:85:12:07:84:f7:15:55:ad:ce:c3:69:b8:72:9f:
                    e3:63:7e:05:70:c9:11:25:57:0a:c4:7c:9e:ac:d1:
                    e2:af:e0:b8:d6:8d:14:50:2a:b1:2d:cc:cb:0d:56:
                    2e:66:24:5a:80:6b:f4:f0:e7:f8:16:8a:d2:26:e7:
                    8a:3b:06:ea:c3:9b:6c:2c:d6:cb:25:43:7e:f5:41:
                    82:60:ee:11:4b:38:74:6c:5e:99:ee:78:a9:f8:f1:
                    02:66:0f:b0:8c:03:56:5c:75:7f:7e:ab:0d:11:51:
                    b4:cb:bf:0a:11:27:ec:14:ad:79:c9:7d:5d:69:fa:
                    68:45:05:2f:a1:6c:f4:77:33:aa:a6:4a:d8:b2:34:
                    6c:d8:cb:ed:c6:cc:b5:f0:1e:37:6a:46:68:08:0a:
                    61:53:0c:93:0d:52:90:e4:a6:48:8e:74:33:45:04:
                    cd:92:37:88:1b:40:c6:5e:46:40:a4:4f:7c:11:eb:
                    11:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:75:98:4D:B8:E8:5D:49:8D:63:C0:63:91:92:A2:E7:3C:8F:71:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c9c4e958-6ecb-3e53-83b7-28a5ff7427c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8a:e800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:a8:88:50:60:07:55:8e:bd:ae:78:8a:e6:3e:35:e9:92:0c:
         29:65:f5:66:27:1b:7f:d0:01:75:db:33:ad:a0:03:26:03:c8:
         63:44:5c:31:bf:c1:8f:9d:e5:e7:90:5a:63:16:40:27:0a:95:
         b2:70:f9:36:b4:73:e4:06:86:b3:92:9c:e4:07:ca:e0:ad:eb:
         50:0c:22:1a:a8:ea:d6:b7:ff:e9:a3:15:1f:93:77:28:b9:d3:
         21:79:d7:81:8f:f9:c7:3b:d9:f8:d7:ad:3c:03:ed:99:a6:44:
         37:ce:f0:0b:4f:d5:47:08:cb:34:a2:45:c5:ad:50:21:68:a1:
         64:d5:c3:b3:8a:93:92:3a:4d:99:68:34:07:e6:69:3d:da:9a:
         77:6a:9f:f9:1f:3a:22:c1:bf:7c:2e:7b:e0:d7:70:22:d6:00:
         31:e3:bc:9a:7d:33:ca:5d:9e:f2:64:57:81:ba:85:ee:e9:3b:
         7c:c6:32:75:88:9a:58:f6:c0:79:14:71:fe:61:c3:73:e6:f2:
         0a:6d:f9:54:77:fd:16:ad:1d:e9:55:99:d3:36:76:6b:67:d5:
         c3:bc:f5:2d:bc:5e:e9:1f:e5:b1:eb:84:0c:97:8a:8e:57:da:
         0d:16:a5:63:ea:b6:af:b1:2c:2b:a0:ac:13:0d:cc:7c:9c:a8:
         4b:93:8f:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:25:34 2026 by rpki-client