Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ce2c6172-fcf0-3cb0-b63c-32da4a18dff8.roa
File:                     ce2c6172-fcf0-3cb0-b63c-32da4a18dff8.roa (raw, json)
Hash identifier:          IRVwysKWdz0heVkIovkjNU2HW8wnqt+tVMrtismrAkc=
Subject key identifier:   D4:CF:7C:D1:16:28:7F:5A:A9:01:46:91:55:C7:B6:9F:CC:56:F8:5D
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584F549DAE8CD6460ABDD4238500
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ce2c6172-fcf0-3cb0-b63c-32da4a18dff8.roa
Signing time:             Tue 29 Sep 2026 01:00:12 +0000
ROA not before:           Tue 29 Sep 2026 01:00:12 +0000
ROA not after:            Mon 28 Dec 2026 02:00:12 +0000
asID:                     30036
IP address blocks:        2604:2e87:c00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:54:9d:ae:8c:d6:46:0a:bd:d4:23:85:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Sep 29 01:00:12 2026 GMT
            Not After : Dec 28 02:00:12 2026 GMT
        Subject: CN=8f7b6ae5-f341-4345-8319-d7bcb4681cd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:9a:9f:94:2d:6c:14:4a:bc:6f:97:8b:da:e7:
                    e5:ea:d0:d5:9f:4b:ec:5a:41:cd:2b:3c:aa:fc:27:
                    09:f8:d0:43:1c:f0:f4:a9:6a:ae:a0:4a:37:49:1c:
                    b9:72:f8:0d:b9:8e:c1:ef:16:5f:bf:79:89:18:a7:
                    25:d7:0c:44:bf:85:67:30:58:ed:1a:70:f6:52:33:
                    32:97:69:fd:dd:47:bc:56:e5:cc:e2:d9:cd:e1:6a:
                    55:08:31:f7:92:40:d8:a8:c8:19:75:ec:99:28:96:
                    f6:ff:6f:26:21:7e:09:90:46:fd:d5:a6:15:b3:90:
                    7e:3c:21:ef:07:45:31:13:28:d5:18:aa:85:61:0f:
                    0e:a2:72:53:47:59:20:5a:6d:37:6b:fc:93:9e:89:
                    02:ad:e9:67:fd:ed:ad:0b:c2:98:a8:f2:3e:a8:d2:
                    0e:d5:bf:03:37:2d:00:16:15:bd:4d:72:3e:96:65:
                    52:5e:18:37:6b:1c:6f:d5:16:4c:20:03:ac:b2:67:
                    0c:0f:ec:8d:f0:72:be:23:0d:8f:79:6e:9a:2b:4f:
                    2e:4b:d1:d1:ab:b4:7e:1f:dc:1a:5b:d4:7b:45:2c:
                    9a:dc:8a:8c:0f:56:11:9e:59:da:15:7e:62:86:a8:
                    8f:3f:92:6a:90:14:8a:53:56:05:4f:4d:5f:d0:a7:
                    09:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:CF:7C:D1:16:28:7F:5A:A9:01:46:91:55:C7:B6:9F:CC:56:F8:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ce2c6172-fcf0-3cb0-b63c-32da4a18dff8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e87:c00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:1f:5e:e3:90:02:a5:3a:bf:67:a4:18:a4:a8:12:8e:91:c2:
         b3:ef:eb:bd:9b:d1:3a:53:e3:e9:3b:f2:65:b8:78:be:08:a1:
         66:91:2a:7b:83:73:60:85:98:48:dc:16:00:34:d9:71:e4:2f:
         cc:d5:06:18:d3:23:5f:0a:06:79:5e:70:64:0d:b6:a6:de:48:
         f2:40:d3:47:5a:a2:bd:68:1d:50:af:07:84:34:ea:9c:7c:cb:
         6d:37:70:b8:94:c9:c5:b5:8d:f4:bf:fd:63:d5:a8:1b:86:68:
         c9:59:0a:3c:74:a5:1e:55:ea:f1:e4:8a:8c:f5:e2:09:4c:fe:
         a6:81:e4:3b:59:38:c5:3b:f7:e8:1c:0c:f8:9e:5c:d5:71:4b:
         7f:df:54:30:6b:44:68:bd:e2:46:df:17:90:ee:6d:c8:f2:fa:
         54:f3:f6:32:3d:61:13:10:55:8a:04:2e:f6:61:f8:11:4c:68:
         c9:71:ae:47:44:98:f5:f8:ac:c2:1f:07:13:c9:a5:ee:30:b8:
         11:9f:9d:a8:98:e3:1b:70:b1:1a:cf:89:fb:ac:3a:9b:31:e7:
         e5:45:d3:44:a0:96:90:dd:80:be:8d:3f:bc:ce:63:02:d9:58:
         5a:26:46:22:96:d2:3e:57:2c:8f:f4:d2:73:6e:3d:44:40:c1:
         31:53:1f:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 15:57:09 2026 by rpki-client