Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/046cf5fb-866a-3acd-b80a-0fee0c90c9e2.roa
File:                     046cf5fb-866a-3acd-b80a-0fee0c90c9e2.roa (raw, json)
Hash identifier:          cAQbZfB9GaL4gCKZRTh+464i3DuBMWFMo8b56qOfQRo=
Subject key identifier:   39:6D:1F:B9:E2:07:9D:24:DE:54:F4:11:DF:13:90:22:85:DA:24:89
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584F20F7B854120173FD306C5D00
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/046cf5fb-866a-3acd-b80a-0fee0c90c9e2.roa
Signing time:             Thu 10 Sep 2026 13:00:12 +0000
ROA not before:           Thu 10 Sep 2026 13:00:12 +0000
ROA not after:            Wed 09 Dec 2026 14:00:12 +0000
asID:                     30036
IP address blocks:        2604:2e8d:4800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:20:f7:b8:54:12:01:73:fd:30:6c:5d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Sep 10 13:00:12 2026 GMT
            Not After : Dec  9 14:00:12 2026 GMT
        Subject: CN=fbd89de8-3750-49f9-b522-8d99598f44d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:e9:45:2b:19:94:e0:56:96:36:47:99:59:af:
                    6c:69:3b:37:27:ef:b7:2c:3c:bd:1e:2a:9a:c6:b0:
                    6d:e1:60:7c:4d:31:2b:a8:e3:6f:09:e3:0f:4c:21:
                    52:58:54:b9:60:d9:14:7a:c3:e0:7d:7e:d8:31:f2:
                    29:b4:86:7b:94:3d:6a:d2:d5:bc:c2:29:32:b3:e8:
                    0c:e5:71:a7:79:c2:3e:19:8a:4b:8f:52:bd:a9:24:
                    d6:e4:4a:c7:9b:62:2d:fe:80:81:54:5a:a3:f3:76:
                    e5:11:61:aa:a9:90:a1:79:da:b3:a7:86:9d:5d:bf:
                    d7:45:ac:b0:ae:6c:5b:e8:58:76:6e:1f:fe:be:9d:
                    23:8d:6b:66:33:cc:6a:c3:eb:a9:d0:2f:81:f6:2d:
                    1e:2d:4a:f5:dd:07:89:da:c6:7f:e1:9a:c6:1a:81:
                    6d:15:c5:a6:e2:c6:cb:2f:f3:b7:e4:14:27:3e:21:
                    4e:ce:42:5a:57:34:de:ad:78:db:bc:59:83:76:14:
                    64:04:1a:78:74:ce:1b:5b:86:2b:03:ee:93:cb:c2:
                    6b:9f:1b:87:e7:7e:6c:88:48:4c:e4:bb:94:85:9a:
                    d9:cb:99:f1:19:8a:9d:30:75:19:de:1c:40:20:d0:
                    bb:22:02:07:4f:6f:7b:41:9e:9b:31:ef:98:6e:ad:
                    08:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:6D:1F:B9:E2:07:9D:24:DE:54:F4:11:DF:13:90:22:85:DA:24:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/046cf5fb-866a-3acd-b80a-0fee0c90c9e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8d:4800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:6e:b5:db:a9:33:77:d7:ec:6e:cc:c0:d0:62:c6:69:7f:47:
         3a:d8:cd:cc:77:1a:bd:87:c3:97:25:88:99:16:2e:8b:08:e2:
         c6:10:f0:8c:32:ff:88:7c:c5:0d:57:09:95:ae:09:cc:6b:5e:
         f4:48:97:06:e1:83:8c:06:6e:c4:8d:61:01:81:4c:e5:1a:25:
         b2:01:b2:5b:11:56:53:fd:f7:b0:34:09:8f:48:fd:18:b9:77:
         7d:c0:63:d0:14:83:9c:48:16:8d:a5:33:49:cf:d7:1a:ce:98:
         cf:5e:72:65:3a:cb:74:a7:dc:f2:60:59:a8:0e:84:19:34:72:
         9e:f6:0c:b6:2b:9a:5e:1e:32:e5:41:b8:17:fa:db:44:54:b8:
         d8:8e:d3:86:1c:64:91:a0:e2:11:4f:db:bf:a3:d9:64:98:bb:
         0b:63:d3:db:ee:06:2b:87:62:41:4b:24:22:a3:40:c7:8f:57:
         36:af:30:90:3b:68:47:83:90:8e:27:3c:ed:85:96:72:c2:80:
         72:1c:85:02:3f:cf:59:ee:80:24:76:71:2c:99:1c:1c:d9:06:
         d8:38:50:f3:34:db:8c:6b:e7:bf:ab:17:61:1c:2f:de:af:e1:
         3c:c0:6c:3b:f5:2c:14:e1:19:72:a8:4b:a4:74:65:8d:33:cb:
         98:75:ab:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 14:20:03 2026 by rpki-client