Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/7097bf07-4233-37d0-967e-24480e0913be.roa
File:                     7097bf07-4233-37d0-967e-24480e0913be.roa (raw, json)
Hash identifier:          YrmU8JuSLG6+H1/WhtY4eykiSplLGrzLxAdO9L3l6JY=
Subject key identifier:   19:58:1E:A2:E3:AE:C2:EA:FC:E0:39:62:FF:98:69:A7:94:35:A3:4C
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584C910706AD0D2473B9E34A4E00
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/7097bf07-4233-37d0-967e-24480e0913be.roa
Signing time:             Sun 18 Jan 2026 14:00:39 +0000
ROA not before:           Sun 18 Jan 2026 14:00:39 +0000
ROA not after:            Sat 18 Apr 2026 13:00:39 +0000
asID:                     30036
IP address blocks:        2604:2e8f:8300::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:91:07:06:ad:0d:24:73:b9:e3:4a:4e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jan 18 14:00:39 2026 GMT
            Not After : Apr 18 13:00:39 2026 GMT
        Subject: CN=4a37b4ff-6277-40b1-b5e3-84be1de59220
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:5b:78:36:54:8f:88:df:e5:d1:f6:89:9c:1d:
                    d0:5d:ae:da:e3:ea:ca:e9:89:0d:d0:55:c2:fd:ce:
                    32:4d:9b:80:18:45:dd:1f:64:26:b4:a2:13:d0:68:
                    c3:ce:eb:72:9e:b5:fc:f2:96:65:e7:24:28:d7:0d:
                    81:94:18:bd:ea:0b:77:c1:fa:83:08:90:e2:3c:23:
                    54:bc:79:75:77:1b:2b:2e:28:d8:c5:0c:22:d3:21:
                    43:a3:c4:3b:cc:55:46:ff:78:c9:89:c0:73:73:89:
                    9f:fc:3f:1d:c9:f7:ec:e8:ac:9f:55:05:7b:0e:82:
                    39:1b:70:aa:dc:8e:eb:a9:5b:cb:7f:36:22:97:91:
                    85:8e:47:16:38:98:0d:f2:5f:61:83:e6:02:73:70:
                    f5:4e:2a:d4:72:1c:f9:52:02:61:4e:d5:e8:41:10:
                    53:e8:ac:33:30:91:c6:70:ce:a2:f4:4e:85:82:de:
                    09:ff:8b:86:31:7a:f4:1a:f3:c6:93:a2:a4:7f:27:
                    2b:0b:26:39:5b:4c:f0:56:85:e3:5d:e8:44:e5:40:
                    36:c9:84:bf:96:68:ca:34:9c:36:89:37:d9:64:2b:
                    e8:ea:29:05:8e:ca:27:05:e7:69:3e:10:d3:ff:08:
                    2e:05:52:f8:e7:ae:28:1a:25:a4:65:8d:9a:98:3f:
                    02:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:58:1E:A2:E3:AE:C2:EA:FC:E0:39:62:FF:98:69:A7:94:35:A3:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/7097bf07-4233-37d0-967e-24480e0913be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8f:8300::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:05:e4:58:70:f9:ad:27:41:90:56:14:36:cc:95:b3:98:ae:
         24:60:3f:96:8e:73:1e:e0:52:d4:a2:1a:40:03:ac:8b:6e:51:
         cd:cc:c7:e1:29:50:2c:d0:c1:3d:46:a2:b2:e9:4a:53:89:cd:
         9e:c1:de:7b:7a:27:17:37:4a:88:d2:e2:52:36:95:63:ab:d9:
         8a:20:b1:c7:34:3d:54:35:c5:6d:4f:b9:c0:17:05:a6:0b:62:
         09:59:f1:b5:5d:33:36:1a:fa:f5:ab:5b:4b:9c:77:64:69:9b:
         bc:7a:5c:18:91:6a:c7:66:4c:61:54:c8:b3:cd:af:d6:f7:2d:
         12:33:16:f7:6d:4d:fb:8b:05:90:06:41:18:bc:43:e1:2d:dc:
         1e:96:7b:83:f1:e4:68:a5:c6:7a:f8:2e:0a:ef:ff:4b:fa:95:
         8a:14:af:9d:79:cf:4f:ca:e7:45:5d:e6:6a:2b:3e:65:19:db:
         5d:f7:d2:b9:8c:d0:c6:97:b9:3a:38:8d:76:22:b3:07:11:36:
         0f:1a:b5:df:26:84:d7:43:6c:e3:51:82:ff:dc:5f:0d:af:64:
         69:c4:f1:f9:c2:be:c1:5f:73:70:95:48:fb:23:a0:81:2f:c5:
         c7:fd:d9:89:fe:87:c7:b1:52:5c:3a:df:c8:19:ac:2b:ee:bf:
         04:7b:8c:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:23:02 2026 by rpki-client