Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/e8f1ad56-e4cf-36e8-b739-10baaf09e203.roa
File:                     e8f1ad56-e4cf-36e8-b739-10baaf09e203.roa (raw, json)
Hash identifier:          JlrnlG68whEcngXkKFcOrS0x4GOfdhEYeIsHYVgUFrk=
Subject key identifier:   4B:31:B3:50:03:1F:4C:05:C2:D4:24:6B:74:3C:8D:64:02:42:FE:66
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584E5BAF5E4DF2AE2485A6EA26C0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/e8f1ad56-e4cf-36e8-b739-10baaf09e203.roa
Signing time:             Wed 01 Jul 2026 21:00:12 +0000
ROA not before:           Wed 01 Jul 2026 21:00:12 +0000
ROA not after:            Tue 29 Sep 2026 21:00:12 +0000
asID:                     30036
IP address blocks:        2604:2e88:3c00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5b:af:5e:4d:f2:ae:24:85:a6:ea:26:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jul  1 21:00:12 2026 GMT
            Not After : Sep 29 21:00:12 2026 GMT
        Subject: CN=7231fca8-a79a-491b-8ed6-707132a6c214
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:9c:03:15:a8:d0:91:6a:d4:b8:5d:11:82:3e:
                    7e:c4:64:93:9f:95:b2:b2:c8:60:16:63:dc:10:d2:
                    3a:aa:e7:3b:27:91:2e:48:8f:f9:e2:df:ee:c3:24:
                    1f:94:b7:05:da:bf:24:8d:f9:77:55:8d:c6:30:6f:
                    6a:f0:a5:bf:3f:63:fd:80:fc:f5:eb:0a:01:d9:71:
                    5d:a5:28:43:94:cd:15:3a:bc:86:10:61:50:2e:b2:
                    b6:42:25:03:d3:c9:7e:5c:bc:28:0e:89:5e:4a:22:
                    12:34:f3:e9:54:c7:5c:94:91:72:6f:65:d9:e6:d4:
                    41:e3:1a:09:1d:46:f9:20:c4:5b:ca:17:41:ee:b0:
                    f8:66:92:85:5e:94:2f:29:ba:d4:e7:8a:cb:66:b6:
                    8b:21:59:4b:49:43:8a:2f:b9:5d:05:52:a4:e0:79:
                    18:92:51:16:a3:51:d0:49:0d:26:fd:ad:be:1a:ac:
                    64:89:5e:15:f6:66:d9:ad:00:b2:ed:73:ff:60:33:
                    0c:ad:6a:0e:8c:d3:69:7b:12:30:3a:d9:95:c4:ca:
                    61:ce:68:97:00:b4:e7:e1:51:e6:dd:af:00:eb:f7:
                    48:0f:73:57:d5:92:b7:00:09:07:d4:b5:20:2b:5a:
                    b5:58:a3:1b:6d:ba:b6:a8:07:d8:e2:95:0d:db:bd:
                    b5:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:31:B3:50:03:1F:4C:05:C2:D4:24:6B:74:3C:8D:64:02:42:FE:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/e8f1ad56-e4cf-36e8-b739-10baaf09e203.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e88:3c00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:9f:43:5e:70:f7:fd:ef:1f:71:47:52:01:37:b8:8e:3a:f4:
         ab:7d:fd:97:9e:7d:26:7e:47:84:6e:96:2b:16:9f:90:d9:90:
         a4:a4:7b:5d:75:7e:b0:7c:2e:ba:e1:62:1a:c0:04:8c:00:5c:
         82:e7:07:82:81:e5:8f:2d:a3:f6:6a:16:03:0a:2e:c5:bc:a2:
         f5:9c:6f:af:b6:02:72:a1:f3:22:27:8f:11:87:ff:d3:dd:15:
         c4:b2:1e:ff:c6:73:c4:e2:37:91:22:19:ef:bf:84:e4:6b:ad:
         a4:f6:2f:0d:17:7a:9c:45:7b:ad:d9:d0:58:43:21:e2:a7:04:
         a0:5c:0c:b7:e5:29:d2:cc:db:ac:93:5d:9c:ec:f0:0c:4b:38:
         a8:a3:ba:92:f5:c8:2d:b7:5c:69:79:39:47:b2:74:48:c0:0d:
         76:56:4d:e1:bf:f9:5e:cc:46:b3:5e:3d:99:8e:cb:f9:cf:b4:
         09:f2:6d:97:f4:e0:12:5c:7b:dd:74:26:29:7b:a1:1c:bb:64:
         07:e7:0a:9a:ea:f5:4c:73:20:f1:ad:15:d3:16:83:7f:b6:34:
         f4:90:3f:4e:b0:68:89:b3:10:ed:3e:1c:70:61:a7:ba:0f:33:
         4f:61:0c:d8:10:ba:ca:f0:b2:56:18:73:5a:be:72:90:5f:c7:
         e8:bc:16:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:32:54 2026 by rpki-client