Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d7ec127c-dc96-3fe9-b8df-08d51522bf68.roa
File:                     d7ec127c-dc96-3fe9-b8df-08d51522bf68.roa (raw, json)
Hash identifier:          sCI6dqtK5QzsVDYcAJdPCET23bgpHb/j42sH0s7p5qA=
Subject key identifier:   C6:1E:9D:CA:FC:8F:DE:37:91:F9:5A:10:54:59:76:8C:D0:45:56:B7
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584F4988077916AF39BF73D23200
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d7ec127c-dc96-3fe9-b8df-08d51522bf68.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     30036
IP address blocks:        2604:2e8a:dc00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:88:07:79:16:af:39:bf:73:d2:32:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=2897d87d-9e81-475c-b027-08a7d3ced5c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d4:6d:04:cf:96:d6:93:a4:b7:1e:7f:9b:99:
                    a5:5d:04:65:29:10:65:9e:9a:9f:bd:1d:c5:44:41:
                    47:d5:41:17:ce:f9:f1:a7:8e:e2:37:4a:63:28:d0:
                    11:5b:51:22:70:87:02:65:ff:66:3c:b0:9b:d9:2c:
                    30:f6:4d:68:40:93:cc:17:33:17:8d:e8:ec:48:9f:
                    7b:76:84:22:68:e0:97:b8:78:d0:a4:f7:8d:da:59:
                    f2:40:a7:cc:a2:53:33:ae:0b:27:5c:64:85:3f:90:
                    5d:37:47:d8:56:aa:c9:b4:2b:74:5f:1c:34:c6:d3:
                    5a:04:61:30:46:35:00:3e:e9:6d:ae:de:0b:99:2b:
                    21:3d:1b:36:ae:1f:ee:b5:12:3f:14:0b:29:86:ef:
                    a5:41:ee:94:be:51:1e:5b:6c:6c:ec:e0:d6:10:af:
                    b6:3c:45:dc:76:43:00:78:3c:40:02:8a:ba:94:fd:
                    28:14:2e:09:01:2c:25:57:63:3d:de:fe:14:4f:dd:
                    19:5d:68:10:91:dc:f2:a3:7b:68:fd:87:ce:44:63:
                    d5:47:26:e7:10:b7:24:a0:ab:c5:cd:fb:c4:48:f4:
                    ab:28:51:ba:2d:06:77:b9:09:48:a7:65:66:84:e1:
                    46:cc:34:73:8f:69:81:ea:4a:fd:4d:95:1a:04:73:
                    e1:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:1E:9D:CA:FC:8F:DE:37:91:F9:5A:10:54:59:76:8C:D0:45:56:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d7ec127c-dc96-3fe9-b8df-08d51522bf68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8a:dc00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:f0:6b:30:3e:42:80:5a:70:7e:a1:13:57:4b:70:b0:5e:49:
         08:e7:3b:de:97:f0:2f:03:cf:77:4d:bb:bd:aa:85:64:bb:6e:
         23:41:aa:18:74:a5:6a:d0:95:7c:76:61:69:c2:01:bb:0b:df:
         ef:75:fe:f8:46:d7:b8:03:dc:43:8c:01:3e:71:5c:3a:73:00:
         9b:97:23:d3:2f:ca:78:97:5e:f2:c1:54:c2:49:e1:88:ca:96:
         23:6f:d1:ee:3d:6a:f8:aa:7b:87:73:07:59:e0:a0:52:c1:d6:
         89:1c:75:aa:7d:fb:91:21:7b:ac:7f:4c:93:dd:aa:77:eb:99:
         3c:cc:32:dd:f4:c7:1a:9f:a4:bb:99:cd:c6:54:73:16:cf:d7:
         c0:b4:f5:06:8f:76:4e:18:72:35:3e:3b:a1:91:4f:85:cd:86:
         ed:1b:18:c7:d9:22:20:4a:c7:7f:ce:43:09:22:0a:00:b4:ea:
         72:4b:15:df:03:ca:ae:31:04:b0:9f:f3:74:5e:86:d1:08:d7:
         b6:1e:cd:10:ec:7a:bb:89:38:1c:09:50:5e:da:a9:fb:72:75:
         79:00:61:d6:ce:b0:d8:e2:ac:60:54:d4:95:78:be:7c:dd:bf:
         3e:81:60:e8:22:de:f8:0a:f8:51:76:2c:a6:63:49:1f:d5:e4:
         58:c2:de:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 21:15:26 2026 by rpki-client