Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4691484a-b551-3207-a7de-902605b6e48a.roa
File:                     4691484a-b551-3207-a7de-902605b6e48a.roa (raw, json)
Hash identifier:          8wp/8o2pVLP62YWaX8aF/TjYwBl0pn3/NOToMpQxPJs=
Subject key identifier:   59:AA:93:24:FD:65:A2:D4:21:36:F4:20:2D:2C:0E:7E:64:A4:CF:F8
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584C9536E13B219B9E3E317DFE00
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4691484a-b551-3207-a7de-902605b6e48a.roa
Signing time:             Tue 20 Jan 2026 02:00:29 +0000
ROA not before:           Tue 20 Jan 2026 02:00:29 +0000
ROA not after:            Mon 20 Apr 2026 01:00:29 +0000
asID:                     30036
IP address blocks:        2604:2e8b:4c00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:95:36:e1:3b:21:9b:9e:3e:31:7d:fe:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jan 20 02:00:29 2026 GMT
            Not After : Apr 20 01:00:29 2026 GMT
        Subject: CN=dc3024d9-d63a-4194-8db6-c64fb071e0ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:7a:ef:19:86:75:f3:da:a0:75:84:9a:83:ec:
                    f6:9f:d8:cd:86:25:07:6c:86:34:16:b9:0d:10:61:
                    3e:9a:4b:ac:f4:ef:3c:60:e9:eb:65:7e:0c:5b:95:
                    93:39:d8:27:42:72:2f:eb:a8:c0:16:e3:24:9f:df:
                    b9:68:72:72:4a:04:e8:dc:ee:b7:56:ba:75:5e:c8:
                    0b:41:da:62:16:e9:c9:e2:e9:59:75:ed:f5:0d:72:
                    dc:af:cc:ad:b5:23:95:fa:81:15:4b:c2:37:1a:da:
                    1e:20:cd:f7:88:15:40:ce:5c:3f:8f:90:e9:6e:ff:
                    4f:bd:76:a3:18:6f:91:0b:3b:aa:ba:f3:24:5e:3a:
                    7e:62:2d:c5:9f:74:c3:d1:ee:88:a9:b3:ad:06:d4:
                    6d:c6:37:db:01:45:5d:b9:b8:1e:d0:dc:19:b0:eb:
                    11:4f:c2:c9:10:cc:38:49:d0:68:06:21:08:62:3e:
                    b3:2a:81:df:bc:b0:0a:4e:a1:34:aa:c7:0a:a4:09:
                    af:69:93:95:b0:2c:88:3e:ad:ef:b8:76:de:75:75:
                    2c:7d:32:0a:39:9b:8e:b9:4a:c1:bb:c2:08:5a:f6:
                    92:96:5f:21:51:0c:0b:c5:f9:ef:74:68:11:32:41:
                    2d:0d:1e:d6:5b:7a:c9:63:02:2d:4b:ee:d0:fe:f3:
                    08:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:AA:93:24:FD:65:A2:D4:21:36:F4:20:2D:2C:0E:7E:64:A4:CF:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4691484a-b551-3207-a7de-902605b6e48a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8b:4c00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:fc:98:ab:75:7e:74:01:90:f5:fc:cf:09:6d:7b:ca:f0:73:
         9e:4c:3c:55:4e:4c:2a:ab:39:92:94:60:bf:8e:f6:11:ce:c3:
         93:60:86:36:7a:22:af:36:60:ed:0a:29:46:5c:3f:2f:57:fa:
         b7:08:ad:b8:cf:83:95:9d:ba:61:12:01:00:d6:cc:e2:bc:69:
         b2:73:58:ab:93:65:c7:b1:61:9e:b8:9b:c1:09:df:e8:cc:db:
         1e:20:fd:d1:29:37:53:23:03:49:a2:40:23:da:86:54:a8:1e:
         f9:9e:60:8a:7d:5d:da:9d:2e:f3:94:78:47:08:b1:21:28:96:
         ab:b7:4b:e0:4e:38:b9:c9:d9:59:22:c0:3a:43:3b:5f:dc:09:
         11:f3:0c:54:67:f3:39:97:ad:82:1b:bb:ab:b8:f1:e9:da:4b:
         d2:9f:ac:24:3f:2e:d5:75:c8:22:41:61:81:ea:59:6a:29:de:
         74:f0:b2:e8:8c:a4:91:5e:f6:e9:80:aa:12:64:3b:34:8f:ee:
         2c:38:39:06:98:43:47:0b:00:16:48:55:de:2d:b2:2c:90:5c:
         92:e6:b3:d5:fd:fa:74:c4:85:01:eb:f2:4e:85:a8:79:5b:c5:
         f9:14:27:0c:f4:b2:b5:38:fd:54:bf:83:77:d1:87:44:70:72:
         bf:55:b1:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:10:25 2026 by rpki-client