Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f45a76c3-97c3-318a-9094-dc08b63baee3.roa
File:                     f45a76c3-97c3-318a-9094-dc08b63baee3.roa (raw, json)
Hash identifier:          lRINtbKOsW10h+kh9V4SmddSckatpn3uTiBwtwGCZfo=
Subject key identifier:   AD:A8:7D:5C:57:27:A3:BA:60:30:E0:4B:87:8F:0F:F0:93:FC:03:A2
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584D24DF8E936FE7909829B0C080
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f45a76c3-97c3-318a-9094-dc08b63baee3.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     30036
IP address blocks:        2604:2e8e:c400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:df:8e:93:6f:e7:90:98:29:b0:c0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=8ebbca27-f321-4bf6-a0db-3f9e8f63fdfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:1c:0e:4f:9b:de:36:c5:b4:8b:4a:6f:6d:ba:
                    27:fa:c8:bd:92:4f:a4:91:19:4f:db:94:40:2a:2a:
                    eb:5a:a5:6b:6f:2d:bb:15:50:62:75:fe:17:06:27:
                    b9:61:c6:cb:05:94:7c:fb:f0:bb:36:71:55:26:7b:
                    83:61:71:b8:4e:f1:46:7d:67:a5:ca:ec:23:c8:fb:
                    2c:9e:12:43:c5:a4:ef:34:1c:69:ba:86:b6:06:54:
                    0e:07:c0:53:f9:31:b2:64:72:3c:6b:0e:ff:fd:67:
                    92:5f:ab:79:30:09:8c:93:5c:86:0b:ec:9c:67:c3:
                    27:82:22:77:40:5f:db:a8:a9:cb:69:cb:85:aa:ea:
                    34:8c:f2:4a:eb:fe:3e:cf:81:1a:55:13:4a:c6:5e:
                    bd:bc:a0:55:69:fe:76:e0:ae:20:ea:fb:01:91:5e:
                    7a:15:18:00:0f:d9:49:12:5f:89:23:3d:5f:94:55:
                    36:4e:24:56:e0:2a:d3:04:a3:84:46:e5:49:26:66:
                    00:53:6b:24:f0:33:b8:67:4f:48:12:90:af:08:36:
                    cd:77:66:70:2b:b9:2c:79:62:59:8c:3c:bc:0c:09:
                    1d:3d:9b:48:44:e6:ed:c7:95:64:3c:c7:c1:13:6f:
                    a3:3f:b1:c7:ec:19:d7:b2:10:35:34:bf:0c:7a:04:
                    b9:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:A8:7D:5C:57:27:A3:BA:60:30:E0:4B:87:8F:0F:F0:93:FC:03:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f45a76c3-97c3-318a-9094-dc08b63baee3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8e:c400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:16:9a:92:02:5d:d7:8c:43:51:6d:8b:26:0a:32:ec:f9:de:
         f2:34:29:81:8c:06:71:6f:17:64:1b:68:b2:0c:28:a4:21:ef:
         54:ec:cf:d0:d8:bb:02:cb:4e:59:f7:fd:cb:7f:88:fc:47:4b:
         0b:21:2c:c4:41:42:f9:f7:08:1e:4b:08:1e:30:c5:1e:4f:87:
         45:68:37:13:76:34:62:f4:0b:d1:f2:5b:9d:a5:d4:ee:9d:d5:
         89:44:9e:bf:7c:ad:95:0c:59:bd:4f:11:9d:fa:00:82:bf:99:
         ec:6a:db:7b:de:d9:de:5d:ca:f3:64:b6:f6:7a:79:5a:39:c4:
         95:ee:a0:99:06:39:1f:32:d5:c5:6c:ca:0b:76:2f:1c:1a:27:
         89:9a:55:17:9c:04:1c:3d:4f:d7:51:84:a3:69:9f:58:2c:62:
         aa:04:a5:d3:60:80:08:6c:69:43:0e:ac:8d:5e:83:ad:ed:02:
         65:da:b9:5d:f3:4c:40:10:23:5c:e7:0d:b1:b9:5e:d5:2f:b6:
         26:7a:7e:e2:53:54:c6:e7:05:b5:24:cf:61:6b:6c:0a:c4:48:
         3b:e3:14:3f:17:09:09:f4:f2:70:f0:6f:e9:4e:1d:1e:fe:f0:
         37:e5:a5:f0:73:b9:3d:5f:64:91:12:35:a1:58:01:a2:bb:a2:
         95:6f:1d:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:43:35 2026 by rpki-client