Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/fe0aa48c-e739-37d3-8a64-1529838b5730.roa
File:                     fe0aa48c-e739-37d3-8a64-1529838b5730.roa (raw, json)
Hash identifier:          7M+BJiHCf5V2OxFwXK1TuKxVwAennfCFv9PdWY11oXI=
Subject key identifier:   6C:ED:51:53:66:CE:67:CB:D6:F2:AC:8D:EF:5F:AD:56:D1:71:4C:CC
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584D27AA11D76ADEB84F642D7DD0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/fe0aa48c-e739-37d3-8a64-1529838b5730.roa
Signing time:             Fri 13 Mar 2026 13:00:40 +0000
ROA not before:           Fri 13 Mar 2026 13:00:40 +0000
ROA not after:            Thu 11 Jun 2026 13:00:40 +0000
asID:                     30036
IP address blocks:        2604:2e8c:7000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:27:aa:11:d7:6a:de:b8:4f:64:2d:7d:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Mar 13 13:00:40 2026 GMT
            Not After : Jun 11 13:00:40 2026 GMT
        Subject: CN=8af58313-8b45-48cf-8f08-133f90e436d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:6a:26:18:b6:7e:d6:ae:ce:51:25:11:98:f9:
                    64:79:29:ed:aa:ce:01:8f:e3:1b:d9:17:ab:5d:1e:
                    41:b5:fc:5f:63:37:3e:80:b5:a6:77:0e:eb:ec:b0:
                    38:80:2b:b2:89:1c:59:89:28:17:5b:e8:4b:ef:8f:
                    d7:49:17:f1:b5:57:44:68:cc:c0:24:2c:b2:84:8c:
                    a1:e7:a5:34:53:df:e5:3c:4c:21:2e:00:c2:b3:03:
                    dc:fa:f5:76:ac:cb:7d:59:a8:27:cf:4b:cd:af:64:
                    d9:88:86:b5:a3:7d:d1:66:97:2c:8f:72:7f:66:a4:
                    71:13:60:b8:18:3c:00:33:bf:aa:58:71:d0:81:7c:
                    2b:01:91:16:10:23:e1:25:f7:92:1d:10:35:04:96:
                    e0:96:92:ef:d8:2f:b6:a3:db:a5:16:1f:63:c3:b9:
                    fd:32:2f:40:dc:eb:cb:8f:5b:58:78:86:04:21:56:
                    eb:e5:da:66:ac:9d:96:fa:b7:38:93:0a:aa:9b:a9:
                    16:00:f4:65:28:15:75:f3:dd:9f:2f:39:76:99:f9:
                    92:9c:61:fd:5b:eb:cd:63:00:cc:97:82:d1:c0:ea:
                    6a:2a:b1:32:34:2b:d5:41:b7:04:6e:41:f3:5c:27:
                    9c:b0:db:93:08:c7:ae:8b:b1:9b:26:3a:ea:60:d6:
                    e2:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:ED:51:53:66:CE:67:CB:D6:F2:AC:8D:EF:5F:AD:56:D1:71:4C:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/fe0aa48c-e739-37d3-8a64-1529838b5730.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8c:7000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:97:ce:75:25:23:c6:97:02:16:fe:4e:75:18:d2:95:c0:5e:
         7e:ba:9f:1a:85:e8:78:56:a7:d2:c8:b3:e4:38:95:c3:19:27:
         5d:75:49:a7:35:d2:39:af:ea:01:7f:d5:08:c8:b0:d5:5b:d6:
         f7:c5:7a:a5:4b:48:65:22:8c:2c:ba:39:89:53:cd:5e:04:7e:
         77:b1:ae:55:1d:6c:59:c9:57:0e:be:59:73:4e:aa:e7:3c:cd:
         76:48:69:40:8b:0f:db:65:55:08:cf:ac:68:5c:7e:e1:c7:1a:
         8f:ef:97:38:87:f6:35:04:1c:f0:af:ff:7e:21:83:87:6b:09:
         88:95:5e:2e:1f:8a:6f:2e:b3:d6:a1:57:31:a0:b7:54:67:59:
         56:6d:bb:20:4b:13:a8:d4:29:c8:47:7f:e5:93:b1:e2:ca:7c:
         f7:b6:3b:0b:98:01:f3:a6:34:d0:cd:ed:a2:90:05:55:9e:48:
         16:0d:80:97:b1:ba:91:67:5d:bf:94:24:44:7b:9b:8f:e0:5a:
         9e:bb:d2:d7:04:91:cc:db:e9:22:55:89:3b:4e:7c:61:1d:31:
         5d:df:56:e8:05:15:b2:fc:30:9e:5f:b6:db:a0:ca:c6:66:00:
         0d:25:65:0b:41:59:da:ff:bf:ca:a1:70:39:da:c3:1d:19:4a:
         f7:1b:f4:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:43:36 2026 by rpki-client