Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/6d9e27d9-35c6-3523-a56f-169519042ea9.roa
File:                     6d9e27d9-35c6-3523-a56f-169519042ea9.roa (raw, json)
Hash identifier:          orTq5WrhPmvcbb7yGq0wobehhUy3xVFd3jOph4gCe8k=
Subject key identifier:   A6:70:49:A4:F6:22:C8:1D:B9:25:B4:3B:7F:CE:97:9D:5A:09:5F:92
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584CCD0CB0FB1686A06C8FF9C980
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/6d9e27d9-35c6-3523-a56f-169519042ea9.roa
Signing time:             Mon 09 Feb 2026 02:00:31 +0000
ROA not before:           Mon 09 Feb 2026 02:00:31 +0000
ROA not after:            Sun 10 May 2026 01:00:31 +0000
asID:                     30036
IP address blocks:        2604:2e8c:dc00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:cd:0c:b0:fb:16:86:a0:6c:8f:f9:c9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Feb  9 02:00:31 2026 GMT
            Not After : May 10 01:00:31 2026 GMT
        Subject: CN=0a346d48-f5d3-4416-a103-90b1714499f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:f5:cb:05:f9:39:43:9a:5c:18:8b:4d:3e:43:
                    5e:05:56:0a:25:c3:fd:ea:67:ad:6d:35:2a:a3:10:
                    30:24:c4:66:a0:4b:2e:40:76:38:9e:e7:51:7f:5e:
                    98:c6:13:dd:08:f3:91:95:c7:6d:74:f1:8b:e7:8f:
                    6f:a0:da:c2:f9:0f:9f:67:94:0a:54:ef:83:68:ba:
                    c9:a7:ec:52:28:bb:67:d2:31:ed:b8:93:9e:7b:f8:
                    67:a9:0f:6f:aa:b3:42:d2:30:52:44:b4:ae:c2:6b:
                    79:00:74:2d:da:99:2d:f8:6b:30:5b:7e:d6:66:51:
                    c3:f7:80:bd:a1:32:7d:73:8c:a5:e1:12:be:7b:da:
                    ce:2c:ca:71:21:1a:cc:ac:68:74:a2:e0:43:4f:99:
                    46:90:ef:4a:03:a9:a4:f4:d9:ad:50:fb:62:17:0e:
                    05:89:63:f1:5e:1c:59:84:22:20:ab:a2:18:1d:04:
                    c1:4f:aa:2a:7e:10:16:a8:a5:8e:bd:34:95:ca:95:
                    00:d4:24:7e:e3:11:46:3e:64:ac:5b:39:d4:0f:a6:
                    26:6d:d9:ef:b1:99:1d:db:9b:39:34:f6:b5:32:85:
                    d2:11:96:ae:a1:57:ec:4b:9b:0a:b4:05:e0:61:3d:
                    ba:bd:c1:12:86:19:33:28:86:28:3d:8a:dc:b7:e5:
                    a0:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:70:49:A4:F6:22:C8:1D:B9:25:B4:3B:7F:CE:97:9D:5A:09:5F:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/6d9e27d9-35c6-3523-a56f-169519042ea9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8c:dc00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:6e:9f:ed:08:e8:79:63:bf:75:36:6d:4f:17:9a:ad:d0:4a:
         e5:53:74:dc:5c:ca:dc:0b:f0:f5:8a:fe:e6:68:39:3e:04:5b:
         e4:75:62:24:b9:36:4e:1a:a1:fc:2c:ea:b7:07:63:77:22:23:
         bb:d2:d4:cb:64:0a:04:ac:01:78:8a:cd:d0:d3:e1:e5:9d:36:
         91:0f:d2:67:eb:ea:e1:e7:ce:4a:2f:75:ff:ea:a6:d9:99:19:
         8f:ee:6d:d6:b8:3f:47:b4:c3:ce:ea:6a:10:97:53:ba:a2:b5:
         af:54:6d:3a:b3:b7:fb:7e:9d:99:0b:af:e3:ae:a6:43:7c:9c:
         23:d8:0c:b5:79:80:c8:dc:19:f8:89:62:f5:8f:04:bc:be:40:
         b9:61:b9:0d:88:7b:73:bb:d0:36:5e:b6:06:d9:bb:9f:8d:81:
         b6:69:c9:70:69:f4:84:26:e9:14:7d:fe:a7:ba:77:d0:b4:3f:
         e2:80:a9:78:0d:a2:c3:99:d3:16:1e:96:36:5e:0e:3c:07:32:
         d1:8e:fe:5f:b1:62:db:3a:a6:ca:dc:6d:63:58:6d:cf:51:3d:
         00:da:b2:7b:f9:28:8c:b6:bc:b1:78:ef:3f:00:9f:6e:9d:8a:
         b8:1f:ea:6b:13:92:78:30:96:75:90:89:d7:0e:70:e3:88:37:
         78:69:95:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:31:18 2026 by rpki-client