Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/53fcb1d0-09e8-3be4-bc45-63b6573abeb8.roa
File:                     53fcb1d0-09e8-3be4-bc45-63b6573abeb8.roa (raw, json)
Hash identifier:          LOvD2rwUPzdE0/av8G4HCUdiZ2n8Gw6cbc3+MiooPKk=
Subject key identifier:   0A:3C:84:9A:59:4D:91:F2:EC:0A:A7:BF:2C:96:71:7E:1D:87:6F:1D
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584D67DFF7ADA1D1C91911617780
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/53fcb1d0-09e8-3be4-bc45-63b6573abeb8.roa
Signing time:             Sun 05 Apr 2026 13:00:31 +0000
ROA not before:           Sun 05 Apr 2026 13:00:31 +0000
ROA not after:            Sat 04 Jul 2026 13:00:31 +0000
asID:                     30036
IP address blocks:        2604:2e87:9400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:67:df:f7:ad:a1:d1:c9:19:11:61:77:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Apr  5 13:00:31 2026 GMT
            Not After : Jul  4 13:00:31 2026 GMT
        Subject: CN=3290d1ba-e244-411e-a292-d1b01dbe6e94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:a8:22:0f:ce:76:62:cc:e2:11:b6:e9:5b:fc:
                    04:b7:b6:88:80:4b:9e:b5:23:12:a2:63:1d:41:68:
                    9a:6f:37:b6:8b:49:d1:c6:87:42:a4:f5:0c:7d:d8:
                    00:e6:f2:4e:f5:84:f5:ce:84:d4:66:64:12:97:71:
                    7d:69:ac:6c:68:8c:a3:ad:fe:8f:5e:80:54:57:84:
                    f4:71:78:14:1b:82:25:79:56:71:2c:3d:f5:1b:59:
                    56:0b:fb:bd:ea:c3:4a:10:9e:06:e1:f9:0e:4f:b9:
                    c5:81:c0:2b:8e:50:1f:d4:5a:49:93:d4:d7:db:2b:
                    1d:d3:33:d9:6c:b9:61:a1:4f:99:cf:b7:56:08:a9:
                    32:ca:59:61:4d:2d:76:42:e1:6f:14:f9:d9:70:20:
                    f0:69:76:40:33:5b:44:a2:bf:d4:ef:c9:b1:90:a2:
                    3e:14:8c:cb:d7:f5:f1:78:68:62:b4:7a:4b:bc:8d:
                    63:ac:57:b2:03:ac:85:08:17:41:8d:6e:b0:87:1d:
                    05:38:d5:5f:91:b3:9f:76:a0:b7:a7:fc:5a:d7:17:
                    f9:8a:80:e0:58:7b:3a:dd:1a:19:2a:b3:30:5a:ad:
                    75:83:8d:7b:80:e1:d7:65:a5:9b:58:74:04:f1:cc:
                    2f:72:dc:c5:77:4c:63:ac:dc:c1:53:09:b8:08:18:
                    c1:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:3C:84:9A:59:4D:91:F2:EC:0A:A7:BF:2C:96:71:7E:1D:87:6F:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/53fcb1d0-09e8-3be4-bc45-63b6573abeb8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e87:9400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:29:4a:7a:8b:71:30:6b:b3:20:3d:1e:11:58:b0:1e:dd:61:
         05:63:3f:a3:d9:62:28:9d:5c:f4:4a:28:b6:05:f0:d7:a0:a1:
         ea:7a:9f:eb:dc:58:82:80:a2:a8:eb:35:d6:ba:74:2d:f0:2a:
         d9:cc:5a:fe:cb:d8:0e:80:d6:74:bd:cb:06:22:9f:6f:f1:4e:
         97:ca:1d:8d:1a:db:f1:13:d2:f8:ce:90:d6:a6:5f:14:df:09:
         c3:78:8f:ed:0a:50:dc:5c:f9:de:b2:f7:71:7d:b8:20:05:18:
         b0:b4:49:ec:0a:56:7a:ea:86:31:b0:d6:eb:0c:32:5c:dc:4d:
         d3:ef:12:fb:dd:b9:91:4f:0f:a6:96:e7:c6:67:19:52:70:86:
         e6:d8:a7:2e:6c:7a:6b:a8:56:e4:d4:60:53:a8:2f:5e:dd:be:
         7f:f4:6c:ad:7e:0b:77:e6:07:49:93:53:f6:80:1c:c3:55:92:
         a3:b3:a6:e9:4d:c9:98:3e:47:a5:ff:6e:e1:7d:41:ac:9f:b8:
         c7:e4:cf:b0:24:ef:3d:22:4b:c7:65:be:49:2a:98:1b:ff:8d:
         e7:73:5a:99:bb:2c:90:0b:3c:cb:84:ee:f7:c7:1e:93:73:ba:
         a0:a3:95:b9:ec:ab:2c:a9:4c:a8:36:6e:5a:27:3c:87:62:fc:
         67:69:2a:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:08:08 2026 by rpki-client