Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0d17ea79-2c78-3bcd-8d19-f433cdfe02b4.roa
File:                     0d17ea79-2c78-3bcd-8d19-f433cdfe02b4.roa (raw, json)
Hash identifier:          VU7TkFokPvcT2pnuArkfvCK2uSooiH1oAvAYUnKF+k8=
Subject key identifier:   EE:05:AF:0F:F7:29:4A:E6:91:EF:99:99:D6:48:9F:90:42:44:F0:59
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584E0865DDD2828B94FE4281BD00
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0d17ea79-2c78-3bcd-8d19-f433cdfe02b4.roa
Signing time:             Tue 02 Jun 2026 01:00:10 +0000
ROA not before:           Tue 02 Jun 2026 01:00:10 +0000
ROA not after:            Mon 31 Aug 2026 01:00:10 +0000
asID:                     30036
IP address blocks:        2604:2e8c:5c00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:08:65:dd:d2:82:8b:94:fe:42:81:bd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jun  2 01:00:10 2026 GMT
            Not After : Aug 31 01:00:10 2026 GMT
        Subject: CN=8dc11d92-f8d2-476e-ab9d-c76d83c9a439
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:7a:3a:42:9c:3d:74:99:71:60:2d:3b:c0:7c:
                    ec:10:62:8c:a4:72:56:08:4c:15:2d:e6:d2:86:99:
                    81:ee:92:ac:53:aa:3e:c5:81:b3:eb:ae:7e:eb:68:
                    ef:85:df:a3:ab:66:83:d6:62:81:38:f4:6b:f3:a8:
                    5b:55:3b:83:12:d2:3b:cb:c3:d7:fc:0a:20:64:eb:
                    41:b6:cf:ec:0e:4e:6c:23:63:37:b2:0d:af:c4:34:
                    6f:ba:ca:9e:c6:f8:5e:86:38:3c:8b:fa:58:3e:13:
                    eb:e5:23:46:23:44:90:20:3c:52:f8:b5:45:24:6a:
                    ab:a0:f2:db:97:dc:74:0e:17:9d:da:de:7d:0d:38:
                    6b:6b:cb:ff:51:82:27:d5:78:ee:d5:25:3f:a2:06:
                    d2:58:79:fb:ad:bd:f2:d9:a6:26:e1:b0:e5:1a:50:
                    60:10:aa:02:ca:5c:30:7c:f7:db:67:2e:5c:22:45:
                    a6:76:e7:1f:80:c8:ab:e8:5c:42:52:7e:52:72:f5:
                    0c:99:be:b6:2c:c3:9a:9c:1e:0e:c1:09:d6:90:b0:
                    2d:99:f9:28:a6:cb:27:a3:1c:70:2b:9a:c5:4d:76:
                    e6:65:71:a4:ff:70:45:9f:70:74:ad:d3:05:20:98:
                    c2:ca:51:83:66:64:72:17:d2:20:7f:65:56:15:4b:
                    a4:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:05:AF:0F:F7:29:4A:E6:91:EF:99:99:D6:48:9F:90:42:44:F0:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0d17ea79-2c78-3bcd-8d19-f433cdfe02b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8c:5c00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:fc:a7:6b:88:92:70:f7:61:17:2f:eb:a2:06:fe:3f:9d:ce:
         90:65:6c:0b:6f:43:63:0d:c4:9d:f7:73:14:aa:6f:1d:cd:29:
         5d:ef:da:c6:de:60:86:b7:0a:a9:43:81:39:44:6c:c1:ce:e2:
         e1:3d:19:17:e5:11:91:83:1b:ba:72:79:49:b4:53:c1:eb:79:
         20:b0:4b:a3:55:ba:0a:88:c4:6b:b4:b7:b3:0f:8a:c1:d0:ed:
         26:49:87:a9:cf:40:13:51:d6:da:80:90:95:80:3e:ff:f2:b6:
         af:8d:01:64:78:01:8f:45:03:a7:0a:ec:94:f0:e4:1b:79:3a:
         59:22:08:99:06:7a:fe:7a:4a:c3:03:2b:ec:dd:10:64:d4:3b:
         fd:91:7d:55:0a:98:28:ed:d6:38:82:16:6b:aa:5b:b6:80:95:
         f3:60:69:0b:4e:b4:38:e9:13:86:fa:a4:42:b7:f9:62:e1:24:
         71:12:8c:41:07:4e:37:15:24:49:db:76:b0:3a:36:ba:b4:01:
         a9:15:ee:df:c5:79:28:03:35:df:02:26:6e:da:d0:38:09:a4:
         c6:de:8b:d0:61:87:4d:38:34:92:fa:13:8d:67:19:df:1e:9c:
         d3:fc:e7:92:cd:5c:77:55:97:a8:ce:3c:82:38:e8:fc:6b:0f:
         49:c9:3d:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:25:03 2026 by rpki-client