Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5cf95f17-3faf-3248-9bee-3e328e385d93.roa
File:                     5cf95f17-3faf-3248-9bee-3e328e385d93.roa (raw, json)
Hash identifier:          ESlsm/dWVIvFc2ywkmvCUpLIlGJpMe/tHD5KM/IwVZ0=
Subject key identifier:   7C:17:FA:3A:95:53:0E:56:C0:BE:88:01:F2:01:82:F2:71:E1:83:34
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584E0435D793C06D02DF88B323A8
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5cf95f17-3faf-3248-9bee-3e328e385d93.roa
Signing time:             Sun 31 May 2026 13:00:10 +0000
ROA not before:           Sun 31 May 2026 13:00:10 +0000
ROA not after:            Sat 29 Aug 2026 13:00:10 +0000
asID:                     30036
IP address blocks:        2604:2e88:e400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:04:35:d7:93:c0:6d:02:df:88:b3:23:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: May 31 13:00:10 2026 GMT
            Not After : Aug 29 13:00:10 2026 GMT
        Subject: CN=6f398c5f-6777-4313-be58-a7810c28e110
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:3e:c5:9f:28:de:95:82:1e:dd:d2:de:f3:4c:
                    f3:d0:f8:bf:2e:78:c4:80:92:67:68:91:c2:69:70:
                    55:4a:51:d2:3f:71:9f:b3:2b:1a:be:60:dd:60:68:
                    75:80:38:cc:d6:cb:93:6a:b9:22:d6:46:65:fe:25:
                    6e:01:4b:4b:c8:b7:c5:05:09:4f:1d:c7:65:04:94:
                    ee:e4:78:17:c7:50:45:77:a8:8f:6b:0a:4e:ff:36:
                    25:6e:0e:6b:8d:33:51:38:a4:9d:24:99:af:1d:27:
                    a7:83:6d:c2:f0:6e:3e:98:1f:b1:10:de:95:3f:15:
                    25:8a:20:2e:f3:aa:84:d1:9f:3f:ce:f1:85:f6:9c:
                    f0:84:df:9d:ca:85:32:30:da:37:fc:41:3b:96:d9:
                    49:b1:cd:43:6f:f2:56:32:d2:30:90:34:16:a9:fc:
                    02:ae:22:82:4a:08:61:18:09:4e:3c:9e:72:8f:63:
                    58:64:05:69:b7:81:95:70:be:4b:ee:ac:46:87:a7:
                    e8:17:46:7d:3c:03:b5:f5:ed:f8:9e:61:af:0e:2e:
                    9e:57:77:7e:3b:9c:dd:fc:8c:4f:39:b9:45:ea:42:
                    4d:72:d9:8c:cd:c0:28:e5:66:36:93:df:fc:d7:7f:
                    03:28:6b:8d:5a:78:b9:31:2c:be:68:f2:ff:01:fe:
                    41:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:17:FA:3A:95:53:0E:56:C0:BE:88:01:F2:01:82:F2:71:E1:83:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5cf95f17-3faf-3248-9bee-3e328e385d93.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e88:e400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:17:d5:5b:26:97:b1:cb:3d:f5:e4:13:f8:31:9b:4d:6e:75:
         54:45:c5:08:30:48:17:c1:13:be:a5:c7:17:cf:29:84:6a:42:
         27:39:6e:1d:55:a4:12:3b:15:f1:d4:a7:8b:ef:5b:d7:b8:76:
         bc:12:56:76:15:d8:ba:1b:ca:2c:f3:81:c0:21:a0:68:a9:fb:
         02:41:07:30:da:59:a3:c2:40:e9:c8:1c:ae:3e:c5:aa:e4:ac:
         9a:98:4e:98:30:96:da:68:19:64:cd:79:b8:6f:10:61:d9:1e:
         38:a7:57:41:95:af:d0:0a:6c:8f:4c:74:9f:92:a0:55:ad:a1:
         8d:a8:01:86:59:e7:9d:2c:2b:7d:57:ac:2b:4a:b2:b5:6b:66:
         15:ae:42:09:70:30:3f:67:ac:4b:b0:5b:61:81:5c:64:d7:11:
         1a:b4:15:f9:78:7b:6e:b0:44:e0:e0:36:73:4c:14:d1:b0:51:
         a8:2e:01:1c:03:fa:f0:4d:26:d8:ff:2d:b5:38:80:42:4f:8c:
         60:4d:31:43:1e:2f:28:af:08:0f:67:65:b5:38:39:9f:bf:0d:
         aa:62:85:dd:cd:40:4d:9c:5b:2d:37:34:83:86:14:d5:3a:ee:
         dd:bf:60:42:d8:ff:39:21:02:64:86:e5:14:51:d2:83:d5:ea:
         cd:58:95:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:07:57 2026 by rpki-client