Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3d16a8a4-bc3a-39af-ae03-8a1fc2107879.roa
File:                     3d16a8a4-bc3a-39af-ae03-8a1fc2107879.roa (raw, json)
Hash identifier:          YoaZoHBIBinnMc+C5djoXoRxx3v2CMqSuwUeitl887s=
Subject key identifier:   29:FF:11:71:C5:52:07:CB:28:EE:EF:4F:90:6F:28:3B:40:58:D8:74
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584E0435E23F669D3AFE070930D0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3d16a8a4-bc3a-39af-ae03-8a1fc2107879.roa
Signing time:             Sun 31 May 2026 13:00:10 +0000
ROA not before:           Sun 31 May 2026 13:00:10 +0000
ROA not after:            Sat 29 Aug 2026 13:00:10 +0000
asID:                     30036
IP address blocks:        2604:2e88:e800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:04:35:e2:3f:66:9d:3a:fe:07:09:30:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: May 31 13:00:10 2026 GMT
            Not After : Aug 29 13:00:10 2026 GMT
        Subject: CN=7b35fc9f-dad3-46e0-9b31-99f55c3d770e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:7b:41:50:42:e3:c9:55:20:b3:e5:49:73:01:
                    c4:80:59:bc:70:1f:fa:55:52:81:ac:d0:95:dd:98:
                    72:75:39:ad:ca:3b:4a:d8:72:a8:05:a9:df:8e:00:
                    35:d0:85:df:37:66:41:f6:ad:00:dd:02:0c:4a:d7:
                    46:d1:5b:57:3f:4d:cf:34:84:cc:e5:b3:61:55:3e:
                    30:2f:73:c2:23:4d:dc:1d:9d:70:0e:39:9d:9f:3f:
                    ba:10:82:56:29:57:a5:2a:2d:99:2e:22:f3:80:ee:
                    6d:d4:8a:8a:2e:46:3b:80:88:bd:e3:03:76:a5:61:
                    01:2d:28:c9:09:66:c3:01:e2:a3:48:82:99:7e:df:
                    ba:9b:40:1a:3e:4a:48:8c:9c:e5:f2:d9:e1:f8:6a:
                    7c:c6:e9:0b:63:d6:88:1c:46:da:cf:2e:46:12:65:
                    84:94:0b:d7:2a:e1:53:31:10:f9:f0:bd:60:89:72:
                    0d:11:e4:65:9c:e6:fc:94:d3:38:e4:44:78:f5:86:
                    f3:d2:11:3e:b9:2a:32:cd:58:d4:e7:58:ea:06:a3:
                    b3:a6:5f:f8:61:cb:de:ce:a3:14:b7:4e:59:3e:ca:
                    39:54:98:ec:87:d6:4d:30:88:21:23:cc:d1:ce:0e:
                    3c:8c:ec:da:05:0f:52:b9:4c:5e:79:90:41:74:4d:
                    41:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:FF:11:71:C5:52:07:CB:28:EE:EF:4F:90:6F:28:3B:40:58:D8:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3d16a8a4-bc3a-39af-ae03-8a1fc2107879.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e88:e800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:d8:09:ef:3e:cd:d2:b4:90:f3:e7:13:ea:c8:b8:9c:dd:0c:
         ad:6d:2b:53:9f:6d:6b:66:20:24:c6:7b:a6:4d:70:14:94:00:
         72:8e:ef:a6:6f:06:f9:a2:af:f7:dc:01:03:c0:87:77:48:41:
         79:34:c0:9a:40:3d:22:e5:4a:5f:36:1b:6d:b6:0c:98:d8:98:
         ba:64:7b:41:76:e9:46:91:a1:77:64:75:0c:7a:cb:80:a5:86:
         79:e0:53:8e:61:1e:d5:01:b9:f0:1d:d4:e2:fb:75:49:5d:7d:
         d9:4b:46:c0:af:88:a5:54:fe:6d:94:37:64:3c:c8:cc:40:d9:
         a8:5a:81:45:18:b9:2e:37:cd:ee:e7:ec:e2:e7:34:d3:72:31:
         82:c0:af:e5:45:fd:16:8a:7c:a7:ec:31:26:12:14:99:ed:76:
         bd:0f:9a:e3:51:fc:28:7a:11:d2:40:27:cc:42:ad:06:3a:0b:
         e7:b4:a2:76:c9:43:cb:4c:1e:df:8b:b7:6f:b9:a2:f7:52:79:
         34:f2:46:a2:d4:84:8d:4d:75:fa:9d:f5:15:17:20:3f:be:90:
         42:b0:8e:c1:ad:73:69:44:20:0c:58:55:9a:dc:a2:c9:00:53:
         45:e3:6e:d0:fb:f5:e0:e2:6b:bf:a8:57:51:48:6a:62:90:b2:
         3d:cb:f8:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:31:50 2026 by rpki-client