Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/123f721a-ef6b-3594-aee1-809863a3160b.roa
File:                     123f721a-ef6b-3594-aee1-809863a3160b.roa (raw, json)
Hash identifier:          4Z02lk8hqIFyI9Uf3NsEHhmu9tGuGEghMVf8LJmy3EI=
Subject key identifier:   82:40:1F:3E:46:2A:69:9A:EF:FF:86:25:F2:C2:B2:23:CD:8A:90:91
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584DF7A5D318FDA9C399C4503D40
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/123f721a-ef6b-3594-aee1-809863a3160b.roa
Signing time:             Wed 27 May 2026 01:00:14 +0000
ROA not before:           Wed 27 May 2026 01:00:14 +0000
ROA not after:            Tue 25 Aug 2026 01:00:14 +0000
asID:                     30036
IP address blocks:        2604:2e8c:a000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f7:a5:d3:18:fd:a9:c3:99:c4:50:3d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: May 27 01:00:14 2026 GMT
            Not After : Aug 25 01:00:14 2026 GMT
        Subject: CN=7cb88200-4e2e-44ab-9bda-4dd03af13dc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:91:17:ba:2d:8a:18:d2:67:39:4d:fc:d5:db:
                    13:d7:58:49:d4:c4:64:6b:25:be:68:af:4d:19:18:
                    a9:81:e7:19:2d:b3:e3:ae:a2:5f:24:f8:4e:c0:09:
                    d3:83:19:d4:36:22:98:78:e4:bd:7f:4d:c6:f6:e7:
                    05:57:c5:6c:b5:5a:f2:71:76:4c:52:5a:da:9f:95:
                    a1:80:70:d8:e6:da:b3:af:e3:03:42:50:58:c9:1b:
                    81:79:19:cc:55:9a:9f:18:b4:45:7d:28:da:ec:f9:
                    30:11:35:de:b2:6c:4f:83:89:18:3c:e9:98:03:9a:
                    d3:46:94:ef:fe:59:72:9a:48:97:c1:df:0d:27:34:
                    df:70:9f:44:62:dc:1d:6c:59:72:53:e1:02:cb:48:
                    f6:69:0d:5c:e5:25:01:97:2d:82:cd:93:9e:23:1f:
                    6c:d0:a2:43:95:3b:e1:09:5f:15:77:91:3c:92:5d:
                    da:e6:e1:92:f0:cc:83:dd:1d:40:5c:28:e3:16:29:
                    0b:72:38:70:d6:d8:53:73:b8:7d:ae:6b:0e:3c:bb:
                    2f:8b:d2:4e:86:00:e2:c3:b9:7a:78:57:cb:6b:63:
                    e8:6f:2f:8d:a7:04:11:aa:04:91:4f:e3:11:57:f5:
                    35:f0:0f:26:d0:08:6b:f9:bd:7c:e0:06:8d:70:a6:
                    dc:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:40:1F:3E:46:2A:69:9A:EF:FF:86:25:F2:C2:B2:23:CD:8A:90:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/123f721a-ef6b-3594-aee1-809863a3160b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8c:a000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:11:f7:ee:a6:0d:74:14:82:6b:73:86:4a:8b:a3:29:3c:c6:
         06:e5:2a:52:50:70:52:9d:ea:f2:03:11:db:a8:7e:13:fb:45:
         99:42:03:76:81:f0:cb:1e:7d:92:7b:72:e8:b6:88:85:49:e6:
         e9:15:c0:f4:32:22:bf:c8:d2:c3:9d:9c:7b:e8:53:0b:ee:fe:
         56:1b:6b:bc:a9:06:43:86:df:c0:fa:c9:bc:51:72:a5:99:79:
         8e:c3:82:d7:b6:a6:a9:09:2d:27:a1:31:9a:3d:77:6f:d4:1e:
         ce:5c:da:bf:09:61:58:63:89:ee:23:12:55:e5:ac:3e:28:a1:
         ec:8a:48:af:c3:b0:73:87:66:65:92:df:3a:6a:6d:9e:21:d0:
         bb:5c:84:7a:27:e1:9e:45:a4:2f:0e:a6:25:3f:2c:33:65:26:
         a3:b1:3f:fc:84:07:65:ee:2a:74:70:76:d8:b7:37:ad:ca:5b:
         c8:0f:54:d9:03:79:5f:02:3d:f7:2b:6c:8a:f3:ca:52:bf:5b:
         51:d8:33:93:bd:5b:41:82:ac:f8:fe:f2:f1:6c:89:9c:d2:4e:
         c3:e6:96:07:f6:91:ea:a9:28:48:03:90:49:3f:9c:cd:2d:b6:
         f6:4f:d7:5f:4a:30:ae:aa:9d:2b:a2:a0:62:23:93:c4:06:78:
         fd:f8:55:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:40:46 2026 by rpki-client