Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/13729c5f-274c-34cc-a76f-119e8bfd7d29.roa
File:                     13729c5f-274c-34cc-a76f-119e8bfd7d29.roa (raw, json)
Hash identifier:          9vv93xfjGR0ldXaVRZp+n5aQGTIGHYglgXHZmE0q8Xk=
Subject key identifier:   53:E5:0E:AA:B7:37:96:9F:62:DF:B0:82:67:C8:02:79:C5:DC:5C:C0
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584E059C658303080F2B1AF9F200
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/13729c5f-274c-34cc-a76f-119e8bfd7d29.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     30036
IP address blocks:        2604:2e89:2c00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9c:65:83:03:08:0f:2b:1a:f9:f2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=f859b031-adc9-4e0f-b7a1-fd172e9433c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:25:37:7a:ae:04:d6:f8:0d:0f:5d:13:11:de:
                    d0:d0:dd:4b:e7:a6:75:ed:77:07:37:5d:53:66:3d:
                    85:2a:75:99:e1:70:69:eb:6a:63:66:ff:a9:12:2f:
                    7e:7c:1c:eb:b4:91:75:eb:0f:63:81:73:ce:41:23:
                    68:35:2c:e3:55:5d:26:5a:16:e5:b0:1e:70:a9:d9:
                    63:e5:3f:61:8f:ee:41:7e:1f:ca:d4:36:b5:75:f1:
                    6e:8e:f1:75:c4:66:78:5b:2e:e1:ca:be:4c:f9:f4:
                    51:4c:39:c5:d2:52:3c:b8:5d:26:82:a9:68:d6:67:
                    ba:12:24:e8:8e:9b:58:b8:e6:95:0d:b9:2f:20:52:
                    7f:81:92:0e:5c:17:03:55:15:26:84:e3:59:c7:41:
                    fd:17:83:17:94:6e:e6:8d:af:cd:fa:0b:3e:ad:79:
                    de:7d:7f:ad:32:8c:4f:31:60:8b:73:84:f5:44:c4:
                    10:1b:21:d6:2e:1c:bd:bf:e1:15:87:90:4d:dd:3e:
                    17:e4:17:27:89:a1:a7:11:33:d0:4d:2e:3d:bf:5c:
                    c4:ca:3c:25:4b:e2:84:87:d6:aa:f2:99:bd:6b:a5:
                    23:59:0e:ac:f9:5b:06:30:01:7a:ce:e6:8b:2a:ab:
                    ba:42:95:e7:5a:7f:b1:e6:64:cb:23:82:b3:56:de:
                    94:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:E5:0E:AA:B7:37:96:9F:62:DF:B0:82:67:C8:02:79:C5:DC:5C:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/13729c5f-274c-34cc-a76f-119e8bfd7d29.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e89:2c00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:0f:0a:35:0a:3c:48:53:2c:cf:47:3a:63:61:b9:8d:b5:51:
         3c:e5:b6:57:8c:f9:fd:ce:72:4d:00:25:d0:cc:76:86:5a:38:
         06:71:8c:03:b5:cb:09:04:7d:db:1e:fa:3e:89:c5:c7:90:93:
         6e:43:9c:01:a6:4d:51:aa:d2:3a:fe:3d:52:79:86:0a:7b:14:
         7b:08:e7:fa:b5:65:76:8f:fa:6b:da:f6:4b:f1:76:f2:95:8c:
         14:e6:49:e6:cf:c2:ac:01:5b:47:bf:c6:7b:e2:f2:95:ed:67:
         03:29:f3:5c:9d:92:3f:ed:ad:94:18:61:38:3d:6f:4e:4a:9d:
         e8:b8:0b:a3:89:cf:4e:17:2d:85:41:06:7e:cd:ff:39:20:ae:
         fc:fd:4b:31:7f:38:95:78:87:66:5a:84:18:7f:08:3e:2d:d9:
         a6:50:b5:22:36:f1:53:1e:22:f4:eb:5c:51:65:2f:9e:4b:92:
         8c:a5:a1:f3:46:42:01:f2:36:d6:e2:2a:63:e0:71:80:4d:9e:
         be:60:53:92:ff:82:fc:9a:9b:55:41:d9:81:bb:7f:aa:d9:1e:
         95:b3:63:51:cb:d1:82:a3:a8:56:67:11:d4:8c:36:35:45:92:
         c3:05:d7:21:49:23:9c:e3:02:d1:52:57:98:69:bc:71:87:34:
         7e:ab:4a:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:47:26 2026 by rpki-client