Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/dec7bc58-8859-3a5f-9e87-ce1b91af9ac3.roa
File:                     dec7bc58-8859-3a5f-9e87-ce1b91af9ac3.roa (raw, json)
Hash identifier:          nNkHfjgcTKvdALiJi6tm+uZklrvojthSYUsmHKHae/s=
Subject key identifier:   54:CD:C4:5F:0B:E5:29:32:F6:CC:AA:09:7C:0E:A9:2A:BB:62:F4:C0
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584F497389B4F4CB31747157E380
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/dec7bc58-8859-3a5f-9e87-ce1b91af9ac3.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     30036
IP address blocks:        2604:2e88:cc00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:89:b4:f4:cb:31:74:71:57:e3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=3da7e9ae-34e3-48ef-b392-c0bf1319a2ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:b3:36:c2:b4:ae:b1:9c:fc:35:f0:70:25:a3:
                    c0:25:43:c2:38:86:d1:ea:9c:b1:e6:ce:69:92:4f:
                    16:9a:42:5e:2e:51:e6:64:3c:d5:e1:e3:b1:ab:c4:
                    a8:03:07:c9:ee:eb:09:8d:c6:f6:80:33:31:ac:81:
                    47:0e:ef:2c:28:a2:27:0c:a5:1d:3a:21:f5:aa:45:
                    69:88:22:3f:2a:d7:d0:47:9e:0a:d2:60:45:2c:94:
                    93:ce:e9:c0:37:54:ed:e4:1a:73:91:a2:05:81:12:
                    1a:44:e7:71:00:55:80:61:cc:5a:5a:c6:f8:4f:c4:
                    74:9d:b7:37:0e:81:0a:3a:28:55:90:b3:2b:47:07:
                    37:8d:fc:f9:73:7a:95:d4:0b:1f:7e:fe:c4:68:dc:
                    69:4c:ca:5c:ac:d1:c4:c1:a1:6e:a5:31:05:16:82:
                    61:7a:fc:f4:03:8f:31:4a:ed:9a:cb:32:b0:c8:d9:
                    49:e6:41:29:70:18:b6:59:fe:09:3d:0b:72:48:ce:
                    a4:c5:ed:80:19:95:1d:0f:1e:a8:0b:c6:36:ce:e0:
                    76:25:75:64:fe:f0:61:19:7f:f8:26:22:4c:e9:e8:
                    5e:2e:41:df:e5:c0:e1:bc:87:fb:80:e5:d7:43:d9:
                    25:65:4d:bf:dc:c7:13:2a:42:f4:88:40:90:72:12:
                    57:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:CD:C4:5F:0B:E5:29:32:F6:CC:AA:09:7C:0E:A9:2A:BB:62:F4:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/dec7bc58-8859-3a5f-9e87-ce1b91af9ac3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e88:cc00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:16:9c:06:5e:fb:30:46:4f:6e:8b:66:57:d4:c6:81:02:82:
         93:57:bb:3f:a8:07:d8:3d:55:c5:f2:b3:9b:74:33:52:10:ce:
         7e:39:f2:16:09:e9:ec:70:c8:cc:1f:c2:ba:a0:f4:d2:33:09:
         81:e9:38:0a:79:6f:86:4f:56:02:da:fb:af:f0:8e:de:55:3e:
         ef:d3:c7:3d:2a:42:74:4a:67:83:07:7a:62:e1:cf:64:fe:3e:
         66:6e:6a:01:4c:bd:f2:68:74:44:95:9e:45:d9:81:af:ba:1e:
         1b:dc:78:60:00:54:0f:06:92:bf:a1:cf:c5:c1:ff:a8:3c:0f:
         27:92:64:70:a3:41:ba:c7:c2:d5:bb:5a:f1:38:89:63:65:87:
         0b:88:20:12:26:44:4e:bc:12:32:b2:ec:73:6b:2e:c6:c0:30:
         ff:66:fb:46:35:24:0e:31:52:93:3a:b2:0a:cc:a4:ea:5d:b2:
         b9:e8:ae:f7:3c:d6:6a:ef:4c:57:39:af:73:0b:f2:a8:40:37:
         8a:3b:fb:fd:3c:25:77:aa:2a:de:2d:5a:ac:0b:d5:c3:19:a5:
         3c:7c:b4:00:6b:9b:50:ab:4a:ec:b4:76:12:7e:c2:56:57:3f:
         3c:51:72:a6:08:94:e7:f8:0f:5f:37:da:14:4c:8b:55:41:b7:
         b4:0d:dc:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 18:03:36 2026 by rpki-client