Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0f7884a6-ed57-3fce-b2c0-5d8c64e4a1b0.roa
File:                     0f7884a6-ed57-3fce-b2c0-5d8c64e4a1b0.roa (raw, json)
Hash identifier:          2NjbgEht4nd2Lf66pf8MfGFFN8R/GPnOKRlaGDsoiew=
Subject key identifier:   11:C4:35:10:BD:BE:5C:5A:16:B3:F3:0F:A6:93:DF:04:96:8D:7C:38
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584E059B4B931CC3A79888835980
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0f7884a6-ed57-3fce-b2c0-5d8c64e4a1b0.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     30036
IP address blocks:        2604:2e8a:2400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9b:4b:93:1c:c3:a7:98:88:83:59:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=465506a4-e05b-4aec-b294-1e174ea4209a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:41:09:6b:05:1f:7e:fe:17:62:54:0b:ee:04:
                    8c:c1:e5:fb:52:5d:89:a4:8b:30:c6:fb:5d:45:d3:
                    d1:76:be:3d:29:91:e8:17:78:87:ce:43:3b:20:81:
                    d9:ad:ff:fe:e1:62:9f:83:00:96:aa:07:2a:24:68:
                    20:92:3c:68:b4:2c:45:9d:46:a3:1e:20:de:b7:a8:
                    0f:8a:a1:2a:d8:1d:f2:1a:4d:70:e2:12:d4:b0:a0:
                    70:60:62:4b:63:e2:f8:65:38:b6:c9:ff:e5:18:56:
                    7c:a8:f4:6f:ca:c4:0a:99:60:31:77:b9:43:03:03:
                    8e:28:c3:2f:4c:d7:ab:b0:95:ad:8e:c2:de:89:06:
                    37:db:f0:19:dc:b8:50:f8:74:43:22:92:6d:7d:7a:
                    97:d8:8c:54:86:36:e4:40:bb:86:5c:ba:5b:e6:54:
                    97:b0:8f:99:b9:cc:c6:43:11:f6:99:f8:21:ec:a9:
                    2a:9b:48:e4:b4:98:12:58:df:46:0e:a8:ed:4d:83:
                    52:24:c2:f3:f3:e6:74:47:be:64:14:1f:94:54:1e:
                    74:77:33:a0:ec:80:2f:18:4d:3e:ca:6d:0f:b4:90:
                    b4:89:f9:16:c0:cb:d1:97:ea:5d:0d:ab:d8:33:9f:
                    6f:eb:78:7a:de:ad:c3:e6:7a:aa:03:f3:c0:db:22:
                    43:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:C4:35:10:BD:BE:5C:5A:16:B3:F3:0F:A6:93:DF:04:96:8D:7C:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0f7884a6-ed57-3fce-b2c0-5d8c64e4a1b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8a:2400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:bb:7d:c2:3f:86:75:89:77:d1:de:b0:57:46:c0:c9:77:7d:
         cd:aa:0f:cf:4a:a8:76:4f:9c:11:a0:3e:25:2e:e0:1e:83:7e:
         5b:a1:ac:09:ba:42:94:61:f5:d3:94:e6:7b:9d:4f:f5:a1:30:
         70:31:2c:9c:52:8f:6a:a6:e3:1e:e5:3e:cc:cf:1f:40:28:90:
         b2:8c:5a:90:a7:0e:73:4b:d6:31:e2:0e:be:e9:5e:32:81:90:
         60:99:13:20:1d:d8:04:38:c3:44:7a:89:25:f3:bd:c8:5d:dc:
         77:75:10:3f:e4:7e:6d:4d:a7:a7:16:70:b8:b7:0b:3f:39:1d:
         af:a0:03:b2:eb:9d:30:c9:7d:f3:77:22:02:65:50:44:87:be:
         06:7e:e8:a8:d4:b1:e4:89:b9:8c:1d:da:23:4d:70:29:14:fb:
         7d:80:de:9e:94:3e:67:5f:ec:86:9b:cb:bf:1c:09:19:a3:dd:
         0d:f9:93:88:04:5b:cd:1d:4d:a1:c1:79:76:61:82:99:f6:a0:
         ef:ca:d9:80:3d:5a:62:0b:38:4d:c8:ec:4a:6a:a4:bf:a1:b1:
         5a:ef:99:6c:29:d4:13:e4:07:1d:e5:bd:a4:00:8b:7e:66:04:
         dd:89:0b:ba:e4:95:38:99:e3:4c:79:1b:0c:f7:f7:d5:9c:1c:
         f2:59:08:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:00:38 2026 by rpki-client