Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/eb8c836d-ca60-3aa6-bf7e-b8cef7851384.roa
File:                     eb8c836d-ca60-3aa6-bf7e-b8cef7851384.roa (raw, json)
Hash identifier:          Pf2DvPid3qjx1hoPGEWp8POYbRPQOWFY8RQMYL7z9/0=
Subject key identifier:   21:EB:B3:C5:D9:F1:5E:E3:68:04:C3:49:6F:1D:FD:2F:76:49:1F:ED
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584F4972B340B9B6ED7566A98B80
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/eb8c836d-ca60-3aa6-bf7e-b8cef7851384.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     30036
IP address blocks:        2604:2e89:e000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:72:b3:40:b9:b6:ed:75:66:a9:8b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=947e9934-c363-4c59-94e3-92ce7d00de5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:6f:28:bb:3e:32:f2:f4:51:94:a4:c1:0f:c7:
                    b8:87:e2:92:9a:7a:57:b0:70:c4:cf:8a:91:97:6c:
                    78:3e:8f:14:05:be:0c:58:d6:7c:13:6f:95:8c:d9:
                    90:9e:b4:b6:f4:88:97:5b:a8:e4:03:98:f8:fa:27:
                    1a:3c:fb:5e:62:77:58:e7:c5:07:2c:96:99:e4:f8:
                    81:c5:c9:3d:89:f3:ec:c2:b5:0e:bd:ef:65:cf:c9:
                    61:eb:36:36:eb:81:b2:d9:e4:f5:d7:07:4d:4f:2d:
                    27:13:02:e3:78:db:bb:9a:c8:0e:6e:58:15:3f:d2:
                    4e:f4:30:b4:57:5d:02:b1:5f:b0:d6:0f:84:a4:d3:
                    6a:9e:4b:6a:6e:01:33:9e:28:95:38:3b:76:09:c8:
                    c0:a1:b9:85:6f:e1:f9:21:a9:a8:9b:40:63:aa:7e:
                    01:cb:6c:da:f8:9b:8c:08:ff:5f:2c:3f:6d:3e:8f:
                    33:4c:f4:22:16:bc:47:c4:a3:0e:d8:7b:41:ec:d5:
                    d7:56:29:5c:b3:db:c9:1a:d0:15:eb:c8:ee:96:81:
                    82:76:f9:5a:53:23:17:01:9d:0b:13:31:f9:27:0c:
                    60:75:15:32:9d:11:38:cd:c7:ee:90:de:fa:1d:56:
                    d9:83:32:24:61:39:33:9d:33:99:33:e3:cd:c1:d5:
                    76:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:EB:B3:C5:D9:F1:5E:E3:68:04:C3:49:6F:1D:FD:2F:76:49:1F:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/eb8c836d-ca60-3aa6-bf7e-b8cef7851384.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e89:e000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:90:a2:79:04:ed:20:e0:c5:31:2c:e2:89:1c:42:38:ee:0e:
         18:22:75:aa:d9:16:b7:bd:d7:52:25:83:e2:e8:de:48:c6:56:
         56:05:86:da:73:7d:9c:0e:f2:f4:9d:e5:6e:f5:9f:1f:bf:6c:
         16:71:e1:ff:23:45:c0:cd:15:e0:6f:f9:78:7a:88:de:99:08:
         a5:be:e8:d9:78:02:75:c0:e2:f1:73:a8:ba:17:d5:94:dd:12:
         61:09:27:56:9b:a2:1a:ba:ec:ed:a4:b3:9c:ce:a8:25:31:23:
         72:5a:ac:b5:e2:e5:31:a7:84:60:5c:36:e3:d0:bd:18:ce:fe:
         63:cf:9d:68:ff:a7:01:f4:a0:3f:c1:96:de:18:2d:40:4f:49:
         05:ed:70:8f:02:aa:eb:91:01:94:a9:90:c8:4a:39:88:5e:16:
         ee:d0:3d:fd:d5:b4:01:6a:26:46:1d:17:76:46:e4:91:01:f3:
         7f:42:d6:68:15:62:01:ee:70:be:81:8a:8c:14:fc:fc:db:eb:
         dc:f0:ac:fd:d1:bb:fe:70:eb:e9:ff:1d:a3:71:18:e2:f5:d1:
         b2:a5:01:0b:c3:4f:c3:cc:22:69:a8:6d:42:69:fc:77:17:92:
         25:9d:0e:eb:b8:dc:6d:ed:df:cf:73:1e:fa:b5:38:c0:9f:f3:
         e9:2c:ae:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 23:30:06 2026 by rpki-client