Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4a5ef5fa-92ac-3942-a60e-326f9dda3901.roa
File:                     4a5ef5fa-92ac-3942-a60e-326f9dda3901.roa (raw, json)
Hash identifier:          j/bFZtokpLTYABbfJU5rwWkPSfgxe1zU78fuH/H+iaE=
Subject key identifier:   B2:E0:65:41:B2:4F:BA:87:25:9C:87:AF:2C:21:FA:B9:51:06:FC:40
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584E059B45628E694BEED31F7EC0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4a5ef5fa-92ac-3942-a60e-326f9dda3901.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     30036
IP address blocks:        2604:2e8e:2c00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9b:45:62:8e:69:4b:ee:d3:1f:7e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=82feac7b-0fa8-42ee-8d63-cfb402103b0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:ac:8b:c4:05:02:d3:f0:1b:e7:7d:3f:2b:99:
                    00:ab:3c:2f:11:27:23:2b:8b:e9:01:e1:f2:dc:a4:
                    5b:35:27:d4:07:9a:4d:6b:1f:c1:54:d8:ac:10:a0:
                    92:c3:18:f5:8f:7e:48:11:c6:95:ca:0c:0f:cf:6a:
                    d8:09:ef:2f:11:d7:78:11:34:a2:84:2a:1f:69:30:
                    0b:60:66:26:c5:86:c6:b9:ff:c9:ab:50:81:12:59:
                    c4:3c:ee:11:46:c9:31:64:41:bb:f1:87:3d:70:da:
                    ef:7d:83:c9:85:a6:c6:25:c9:4a:26:33:3e:77:57:
                    18:5b:9d:c7:b7:ae:f7:89:a9:b9:0f:f7:76:7b:b9:
                    51:ff:95:02:90:28:71:77:00:4c:77:03:f5:1a:5f:
                    9d:d2:c9:48:75:48:41:48:9f:6f:f4:b1:12:05:b9:
                    0b:e7:34:f3:ec:ae:84:aa:71:0e:da:e2:e8:04:ee:
                    05:1c:35:89:43:28:e9:41:75:46:8a:1d:d5:ac:27:
                    37:c8:c2:55:37:f2:4d:7a:3e:c0:64:ae:c4:c9:cb:
                    75:18:23:ac:6f:30:96:01:a9:f6:de:48:c3:e6:a0:
                    ba:45:1b:8f:46:0c:b3:cd:d7:16:f8:bc:39:d5:39:
                    a8:2e:46:c1:68:7d:55:69:0d:7c:42:d2:ef:1e:02:
                    e9:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:E0:65:41:B2:4F:BA:87:25:9C:87:AF:2C:21:FA:B9:51:06:FC:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4a5ef5fa-92ac-3942-a60e-326f9dda3901.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8e:2c00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:db:90:d2:40:49:eb:8c:87:82:63:da:30:e2:ad:5f:d6:bd:
         e9:fa:d0:1b:9c:f0:07:63:48:c2:ca:69:e7:ee:cb:7f:81:a5:
         86:26:ce:23:26:05:10:2c:46:c4:b6:cb:65:ab:41:8f:88:bf:
         02:6b:ca:9b:56:ff:d2:27:06:63:06:1c:66:4a:d6:c8:5f:22:
         03:ed:d8:57:2c:8f:1d:2e:f2:4e:36:fa:07:3b:ea:b8:76:bf:
         d3:59:63:ab:5c:b4:06:f7:4c:99:8d:6c:90:44:31:dd:22:1e:
         01:78:19:e7:00:d4:96:64:ba:ac:e9:1d:a4:25:f0:22:ac:88:
         b4:07:64:c7:57:b5:52:7b:02:87:84:b6:2d:99:cf:e3:83:bb:
         4d:1c:a3:b3:38:a1:db:49:61:13:89:b6:98:4e:93:ba:15:b2:
         c7:a5:17:fe:68:cf:d5:ee:ec:49:90:29:dc:17:a5:36:62:45:
         95:d3:54:f0:15:1a:68:17:5a:b9:c6:95:7b:44:c3:17:4b:9f:
         4c:8a:20:7c:41:b4:64:92:b8:73:66:51:28:a0:d0:db:d8:3e:
         c5:1e:ab:2b:f8:cd:4b:62:7e:cc:d9:17:41:69:bb:c8:93:83:
         86:a4:52:2a:9f:88:fa:13:71:ae:bd:73:89:03:80:ca:81:da:
         e8:42:df:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:45:57 2026 by rpki-client