Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/dad7d379-8f6b-36b2-90ae-dfb56c93e94d.roa
File:                     dad7d379-8f6b-36b2-90ae-dfb56c93e94d.roa (raw, json)
Hash identifier:          pUfD9pFtUZTAAjMxeRI+8dOIDjbdzk1gckyTfYXdByk=
Subject key identifier:   EA:1E:9C:1C:D4:F7:66:52:26:AB:F5:49:70:35:F2:04:1E:FA:F5:EF
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584D24DF78541EAFB1EEA7C65900
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/dad7d379-8f6b-36b2-90ae-dfb56c93e94d.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     30036
IP address blocks:        2604:2e8a:2800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:df:78:54:1e:af:b1:ee:a7:c6:59:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=2798b920-6304-4b7e-9a7e-a0eb31e8ea72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:60:0d:11:79:df:a4:38:b9:3c:a7:07:15:78:
                    d3:b2:58:63:7d:69:cb:f3:dd:ab:c5:d0:02:d8:1e:
                    65:bf:ea:dd:78:b7:f2:93:ce:64:72:18:bb:bf:93:
                    6f:53:6c:d4:41:a4:c5:54:57:55:14:6b:a2:45:fb:
                    7e:d4:99:2f:b3:1c:f1:8e:c8:8f:52:5d:f9:8d:e0:
                    83:7e:05:65:4a:2f:b0:f6:a5:d9:34:ee:07:95:cd:
                    68:81:a0:34:e8:44:07:18:52:4d:c1:3e:e1:17:1e:
                    cf:59:de:f3:65:80:0b:f3:4b:be:a9:57:9a:0e:cc:
                    ac:a0:dc:a7:ea:0d:59:37:bf:0c:af:c6:83:60:4c:
                    42:aa:42:14:4a:37:45:bc:94:92:06:1b:db:8e:9f:
                    10:90:8e:56:c6:87:a0:45:89:14:95:f3:7f:50:17:
                    85:5b:1c:d0:35:94:93:4e:26:40:03:54:5e:e0:34:
                    91:43:ff:b4:21:1b:21:2d:72:7c:89:b7:95:34:0f:
                    b0:5f:98:c5:4d:90:9f:a4:8e:8e:47:db:93:d6:39:
                    6c:24:4d:47:ff:37:09:dd:d7:7b:58:2b:a8:c7:8f:
                    63:2c:8d:eb:bb:2f:19:c2:1b:27:89:2e:c1:74:5d:
                    a4:6a:ec:f3:01:61:66:3b:89:50:93:f5:05:9e:8b:
                    e6:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:1E:9C:1C:D4:F7:66:52:26:AB:F5:49:70:35:F2:04:1E:FA:F5:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/dad7d379-8f6b-36b2-90ae-dfb56c93e94d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8a:2800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:13:2e:c0:5a:05:fe:21:2e:9b:b5:cb:03:ca:ce:9c:e2:55:
         23:33:5a:a3:01:3b:3e:da:9f:44:89:22:6f:e6:57:99:06:84:
         2c:fa:cf:69:f9:d1:bc:f7:ec:04:07:46:4c:8b:9a:f7:ed:bf:
         09:d7:6d:03:4f:ac:25:2e:4f:30:62:03:4b:a9:77:60:de:ae:
         9c:8b:1c:63:f9:e8:48:d5:3e:83:7e:3a:d1:cc:6e:b5:ad:34:
         0b:94:84:e3:b6:42:d0:3c:ab:9d:cc:2e:0d:2d:60:c9:ac:82:
         cc:a0:34:5d:f0:2c:29:b9:06:11:82:ed:8f:af:80:a2:12:d8:
         e6:2e:e0:55:f7:88:c7:67:98:9a:63:da:17:8b:30:e8:94:fa:
         51:d5:1e:33:67:da:48:ec:e4:d3:e4:78:55:17:72:95:81:c2:
         da:2c:18:3b:e8:46:a3:c4:31:65:99:41:a4:dd:29:0f:47:73:
         ee:83:b4:91:15:a2:38:40:23:85:64:75:a7:41:d9:4f:a0:2c:
         36:d7:64:73:d1:20:90:ff:ec:7f:37:e4:03:22:de:9b:be:10:
         a0:5e:5a:d8:a1:57:40:18:3e:a0:9c:96:26:65:32:26:8a:78:
         07:4b:cb:24:66:7e:c7:c0:68:b1:67:d1:2e:22:f2:33:3e:8b:
         de:19:c9:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:26:32 2026 by rpki-client