Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/75b0a345-58fe-3163-bf73-7fce42a49ea6.roa
File:                     75b0a345-58fe-3163-bf73-7fce42a49ea6.roa (raw, json)
Hash identifier:          wrFN5YaHDft4yjDHKni+gZhJOKwXx00FzNBy4Zerdeg=
Subject key identifier:   FC:85:4D:D2:6A:ED:C0:19:03:46:14:AA:D5:92:E8:E1:4A:93:88:BB
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584EA7A0B93F11FFAC067CF425C0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/75b0a345-58fe-3163-bf73-7fce42a49ea6.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     30036
IP address blocks:        2604:2e8e:b400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:a0:b9:3f:11:ff:ac:06:7c:f4:25:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=4f7cef35-3532-43d1-bd8c-5905ca47416b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:68:c8:52:f4:98:39:f4:c3:55:67:6d:11:f2:
                    6e:8c:d0:bd:38:eb:83:f3:67:1e:52:36:58:2b:36:
                    c3:59:be:29:83:b1:05:15:ff:07:93:19:1b:95:a0:
                    ed:93:02:79:c8:8f:67:de:82:d5:f1:84:37:19:f7:
                    e6:15:7d:f8:3e:a7:49:fd:68:4f:5b:a9:b4:74:06:
                    a8:b7:5a:90:df:89:65:e9:98:08:82:3f:9b:9d:b7:
                    65:17:c5:ee:b6:57:10:e2:d9:de:28:50:85:77:f9:
                    95:fb:e3:0a:fc:89:35:6f:5c:a8:83:0b:1b:98:02:
                    41:8c:85:79:78:fb:8e:6a:19:cb:a9:2d:b9:62:f7:
                    5a:5a:81:37:51:e8:d8:e5:9b:47:72:30:11:bf:b1:
                    cf:39:df:57:eb:5b:a8:0b:68:7e:ab:5c:3c:ce:87:
                    33:d7:c4:7b:cf:f4:54:a0:69:e5:99:be:0a:74:a7:
                    af:c4:c6:11:0e:67:09:53:01:9c:f1:3f:40:66:a1:
                    82:e4:f5:e2:62:6b:16:8f:1b:56:bd:f5:46:21:e6:
                    67:a5:8c:ba:f2:5b:90:fa:bc:3a:fe:91:cd:e2:a2:
                    a4:46:31:23:85:43:93:b0:da:91:94:f8:29:ea:73:
                    75:7b:5e:d7:96:4a:12:81:2f:cc:6d:c5:b3:3e:12:
                    87:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:85:4D:D2:6A:ED:C0:19:03:46:14:AA:D5:92:E8:E1:4A:93:88:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/75b0a345-58fe-3163-bf73-7fce42a49ea6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8e:b400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:9e:9c:8a:af:81:79:9e:1d:01:76:a9:77:42:9e:cf:92:34:
         4c:fc:d8:14:4e:51:83:5f:0f:86:ff:c0:36:e6:3e:d1:0e:80:
         b7:94:ae:c0:43:3a:2a:e6:34:b3:e8:2d:57:7c:6a:20:07:5a:
         72:b7:6c:b8:76:5e:2f:a6:b9:28:44:17:e6:1b:8f:0e:d9:46:
         fb:22:5b:81:a1:b8:8e:57:c6:57:c8:94:48:0d:9e:04:db:7a:
         ea:f8:bc:e4:5e:b1:c8:5a:89:e2:eb:91:fc:43:da:c5:ad:ff:
         0d:24:45:00:90:cd:2e:6a:31:f3:1f:cf:3a:77:4b:8c:5e:8f:
         dc:c3:74:97:24:4a:61:26:51:68:83:49:ca:44:6e:4c:eb:19:
         a9:f0:25:c7:7e:73:89:e3:b3:6e:ea:2f:27:80:3c:07:16:4b:
         43:24:ca:c2:b6:47:50:0d:53:8e:ed:1a:f8:67:87:4f:e0:4d:
         28:25:85:7e:7b:a8:5c:54:59:05:d6:34:ce:5b:f9:dd:7e:09:
         4c:f9:ad:62:d8:5f:b0:65:c0:b4:91:d9:ea:3b:b1:f1:f6:eb:
         4f:17:71:5a:54:76:75:70:7a:c4:50:5d:b0:ac:42:ab:e1:71:
         4f:43:a2:b7:93:01:71:0a:cf:6c:47:7b:bd:dd:ca:60:bf:29:
         00:bc:b5:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:40:35 2026 by rpki-client