Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/55ea9a63-5559-3118-9745-b3b330831051.roa
File:                     55ea9a63-5559-3118-9745-b3b330831051.roa (raw, json)
Hash identifier:          47eRz7eX8mAbxc2DiLPChkwu0OLnWd6CB9G+fcxx4uA=
Subject key identifier:   16:E8:DD:13:3D:2D:8D:6D:DA:FB:17:88:70:B4:0C:A1:24:A1:69:BA
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584E0866544AE1B28C31D1023F40
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/55ea9a63-5559-3118-9745-b3b330831051.roa
Signing time:             Tue 02 Jun 2026 01:00:10 +0000
ROA not before:           Tue 02 Jun 2026 01:00:10 +0000
ROA not after:            Mon 31 Aug 2026 01:00:10 +0000
asID:                     30036
IP address blocks:        2604:2e8d:400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:08:66:54:4a:e1:b2:8c:31:d1:02:3f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jun  2 01:00:10 2026 GMT
            Not After : Aug 31 01:00:10 2026 GMT
        Subject: CN=0f754f0b-7eb6-435b-970a-f000fda5da3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:37:d6:a7:69:d7:fd:82:ff:af:4f:5c:61:56:
                    d3:c8:c2:3a:42:7b:3d:f5:7b:e9:bd:aa:96:ee:8a:
                    97:24:2c:18:fb:3d:a1:c6:75:ac:27:54:ab:bf:94:
                    66:9e:4b:f2:73:0a:fb:4b:11:e3:8f:d9:78:aa:81:
                    9d:09:a6:48:6b:e3:d6:a0:9e:21:65:1b:5b:d3:00:
                    f2:f2:e6:93:9a:8f:df:11:0e:f6:a4:6f:f7:84:66:
                    d7:d6:a4:89:04:cc:3a:fd:20:63:7f:69:4b:19:01:
                    4a:ce:4b:45:d3:be:e9:c5:19:ac:f6:9a:fe:90:82:
                    f7:91:ea:7d:63:e1:9c:df:49:47:a3:6a:58:9c:a4:
                    1f:7e:e3:21:9a:a9:6a:84:12:ce:d2:a6:c4:b9:cc:
                    18:72:c3:26:50:ba:85:21:b3:5b:67:e2:ee:c5:35:
                    5f:91:2d:ee:fd:92:21:24:b3:67:d2:a3:98:d9:60:
                    be:f5:55:28:03:ff:fc:84:f1:8e:7e:70:46:83:6e:
                    04:96:dd:74:66:c9:61:7d:69:b8:00:cd:0f:90:1b:
                    8e:be:8f:df:fa:e1:fe:45:75:e3:4d:39:f4:9c:54:
                    3c:c7:9c:e1:4f:50:e1:a2:c6:14:40:69:cd:30:a6:
                    06:8f:5e:e7:92:aa:b9:b1:b3:00:ea:b4:e4:fa:4c:
                    d1:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:E8:DD:13:3D:2D:8D:6D:DA:FB:17:88:70:B4:0C:A1:24:A1:69:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/55ea9a63-5559-3118-9745-b3b330831051.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8d:400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:e0:9e:0c:0b:67:09:c9:3f:e4:ec:c5:a1:a0:b9:6b:7f:fc:
         d4:c1:6e:22:ee:e3:58:b2:d1:55:6a:43:65:95:c9:ef:c3:3b:
         ab:1f:1f:2f:8d:87:80:c9:f4:6f:99:20:2e:17:2b:58:cb:7d:
         4b:18:bd:ad:91:fd:a3:2e:a9:4f:a8:53:78:a5:e8:8e:36:bb:
         e5:ff:41:0b:97:77:76:2e:7f:b8:3b:f9:69:5c:8a:9d:3a:62:
         d0:37:14:a8:70:e6:f0:18:bb:d2:bd:c5:68:f6:e9:f0:11:1c:
         90:79:8a:4c:49:dd:ee:6f:c6:24:43:32:c3:1f:84:67:65:d6:
         27:fe:97:07:2f:71:95:b5:49:3f:ab:68:af:11:25:b1:df:2f:
         3e:cc:78:9b:0c:b0:c8:42:04:a8:ef:57:7d:b3:cd:09:14:37:
         85:38:ed:1e:74:98:3c:c8:0f:0b:9f:38:88:bb:f3:bf:4d:d6:
         a7:0e:ff:57:2a:0f:da:b2:5f:d2:f9:64:f0:4d:97:9c:d4:01:
         fb:13:d5:68:b7:96:c1:f7:c8:c9:dd:fa:f3:91:0e:84:99:be:
         2b:7b:fc:af:f9:08:82:67:15:da:8c:78:9c:39:e5:ee:56:79:
         73:32:f4:01:3c:ca:1d:4f:4c:e8:dd:03:76:42:06:76:3e:1e:
         63:d9:68:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:24:49 2026 by rpki-client