Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/609a7fa3-affc-3a0d-bb17-c6722250efd0.roa
File:                     609a7fa3-affc-3a0d-bb17-c6722250efd0.roa (raw, json)
Hash identifier:          rNr9Dqfg6q1/5lkKjd06RuiRYhkS+MIuAWWj9uocOgw=
Subject key identifier:   5F:13:C0:0D:BF:65:A4:E6:BE:CC:7F:D1:F3:F2:37:DD:4A:18:85:0A
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584C95370D0283A42611C1DD7FE0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/609a7fa3-affc-3a0d-bb17-c6722250efd0.roa
Signing time:             Tue 20 Jan 2026 02:00:29 +0000
ROA not before:           Tue 20 Jan 2026 02:00:29 +0000
ROA not after:            Mon 20 Apr 2026 01:00:29 +0000
asID:                     30036
IP address blocks:        2604:2e8c:8800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:95:37:0d:02:83:a4:26:11:c1:dd:7f:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jan 20 02:00:29 2026 GMT
            Not After : Apr 20 01:00:29 2026 GMT
        Subject: CN=933e7568-2682-4dc1-ac8d-3f6c20e42357
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:61:9b:7b:2f:a1:07:bf:da:28:2a:c7:02:18:
                    ff:72:7b:ed:b1:6a:1a:ba:3c:10:be:f9:c4:ec:00:
                    65:57:f8:5d:e6:35:ef:aa:7c:fe:33:ae:13:da:2f:
                    bb:8a:06:8e:a8:b4:f5:e9:c8:14:4a:11:37:34:80:
                    bc:28:87:6b:06:fd:8d:a2:aa:0a:ce:68:a7:ea:de:
                    26:69:b2:32:25:37:e2:b0:e9:4e:24:5d:bc:ac:31:
                    7f:59:2f:41:96:1d:77:6d:af:ba:73:56:8a:1e:5e:
                    7a:19:2f:5b:c4:2c:69:00:1d:6b:c7:d4:1a:e2:4b:
                    4c:4b:3e:21:d0:05:09:e6:4e:46:52:58:ae:37:e8:
                    e2:57:88:f1:e0:bf:d9:c8:a0:a5:48:fb:dd:6f:42:
                    c9:56:4a:9c:e2:25:65:99:25:30:06:cb:22:ee:6a:
                    b2:4c:57:ec:99:21:e0:bd:6d:dd:6f:3d:ab:b9:da:
                    76:80:de:6b:db:05:be:6b:e0:e2:d2:2f:53:ea:2b:
                    c3:84:dc:2f:df:11:a5:90:8a:df:a6:ee:87:0a:fd:
                    8a:a7:14:e4:02:8b:c0:c9:a9:42:3c:1d:06:63:19:
                    41:bb:c3:cd:3c:61:b4:12:6c:7d:2d:9b:c1:7f:14:
                    77:d1:34:3a:66:bf:16:c5:36:84:74:50:d4:30:3d:
                    50:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:13:C0:0D:BF:65:A4:E6:BE:CC:7F:D1:F3:F2:37:DD:4A:18:85:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/609a7fa3-affc-3a0d-bb17-c6722250efd0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8c:8800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:81:36:53:57:2c:3f:bd:a2:af:cd:bb:bb:9a:68:62:6e:c8:
         15:bc:51:01:4f:78:de:31:4b:9e:06:7c:2b:a1:7e:60:c6:25:
         ca:50:b2:87:e3:c6:55:9c:19:90:e4:fc:09:2e:05:e4:e8:0e:
         fe:8b:13:f9:61:83:2c:f5:71:d1:38:ad:10:bc:0b:63:cc:a9:
         45:e9:5d:3e:2f:8d:e4:7c:74:09:5b:64:21:dc:29:c3:28:f0:
         47:37:aa:49:e3:03:90:cf:53:d7:0e:05:7a:e9:db:77:23:b8:
         b9:f8:a8:3d:5f:f7:37:e2:34:62:64:07:69:7d:8e:ea:32:86:
         ef:fd:6d:bb:d4:7e:bc:5a:66:6d:3e:ee:7c:22:58:96:10:fc:
         e0:e5:37:fd:d8:e5:ef:9b:b3:ce:af:aa:f3:a8:08:ea:de:fd:
         f0:45:5b:53:da:77:15:9e:21:dc:15:d6:07:55:63:f2:db:0c:
         ee:0a:87:93:1a:4d:7f:2f:df:5d:49:1d:ab:9f:da:e5:4c:e6:
         f6:7b:c8:31:5c:85:56:8f:97:08:b4:c6:37:9d:2f:23:f5:93:
         53:30:f4:77:8f:ac:b2:c5:4f:6f:6e:a2:39:bb:5e:b5:47:99:
         8e:c0:ab:16:24:fd:15:9e:c7:bf:f7:0f:a4:1f:16:df:63:e0:
         8e:74:5b:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:37:16 2026 by rpki-client