Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/7cacff8a-da2b-36a9-8bb2-f514d78ba690.roa
File:                     7cacff8a-da2b-36a9-8bb2-f514d78ba690.roa (raw, json)
Hash identifier:          92R/kirqA9IxYG6pIb2aja2KHGD9rI2Yj0CYN8IVqt4=
Subject key identifier:   73:57:8F:8D:8B:4E:FB:E6:C0:8F:52:BC:28:56:72:DD:95:F6:8A:B3
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584E0435EB6C5E3CB07202553800
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/7cacff8a-da2b-36a9-8bb2-f514d78ba690.roa
Signing time:             Sun 31 May 2026 13:00:10 +0000
ROA not before:           Sun 31 May 2026 13:00:10 +0000
ROA not after:            Sat 29 Aug 2026 13:00:10 +0000
asID:                     30036
IP address blocks:        2604:2e89:8400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:04:35:eb:6c:5e:3c:b0:72:02:55:38:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: May 31 13:00:10 2026 GMT
            Not After : Aug 29 13:00:10 2026 GMT
        Subject: CN=d0879b58-fecb-4f97-a424-2e9d954d20df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:b8:7f:0f:f4:86:d8:57:25:07:7e:28:58:a8:
                    ab:11:6f:23:c3:30:0d:0c:9c:4b:49:0c:47:a0:fa:
                    fd:c1:55:2d:bf:1d:c5:ee:28:06:6d:dc:4c:11:63:
                    2e:44:84:0b:7e:7d:c5:80:58:08:fd:a1:93:83:4c:
                    6b:85:7d:d9:4b:50:38:c5:e7:04:f7:85:15:27:ef:
                    b4:c7:30:2b:cc:d8:70:38:f5:33:b8:a0:41:e2:70:
                    62:a6:4a:6a:61:71:a2:64:c9:4e:43:c0:61:33:e8:
                    70:f6:cc:2b:60:f6:7b:07:ee:cc:0c:92:26:ba:00:
                    66:43:e7:e2:c9:1a:47:8f:e1:4b:e3:69:e1:cc:51:
                    b6:b2:0a:0b:57:ad:9a:d4:d4:86:c9:6f:3c:3f:bb:
                    68:90:38:c3:6c:7c:3a:0b:ec:d2:52:32:18:68:cf:
                    a6:70:81:b3:31:f5:3c:6b:8b:fe:9a:b4:3f:67:43:
                    a6:b2:96:42:d9:83:60:5b:11:f6:3d:f0:c0:cd:cf:
                    cf:4d:a9:cd:c1:ab:a8:b1:63:ec:8c:ac:a3:18:70:
                    a5:e6:02:b5:82:6a:9e:41:8f:b5:f0:59:38:f3:a8:
                    c1:6d:4a:18:73:9c:f6:33:40:53:f2:b0:cf:4c:ae:
                    7f:af:64:93:e9:ba:8e:b6:a7:f9:a6:29:c5:33:48:
                    10:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:57:8F:8D:8B:4E:FB:E6:C0:8F:52:BC:28:56:72:DD:95:F6:8A:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/7cacff8a-da2b-36a9-8bb2-f514d78ba690.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e89:8400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:66:7a:93:31:5c:ce:8e:5b:1b:e5:00:a0:5d:80:33:bb:48:
         37:64:18:b8:54:54:0f:bc:30:43:78:29:3c:d8:eb:b5:8b:22:
         6c:61:f4:2e:4f:55:43:ee:cc:eb:a6:9d:3f:f3:3f:61:a5:73:
         05:cb:d1:45:15:fb:d6:93:8e:75:ae:3d:d8:5b:fa:bf:f2:5f:
         99:46:d6:c7:81:34:6e:4c:d6:93:5d:11:18:d5:0a:60:58:ad:
         97:5a:04:fb:c0:38:f9:06:ce:aa:d4:47:43:17:69:1e:c3:ac:
         e4:31:a5:82:16:83:c1:8a:ca:2a:1e:6f:19:4b:d5:9e:2d:d9:
         3c:d3:0a:bc:34:ea:be:2d:49:fb:77:73:db:0f:cb:ed:c4:be:
         03:76:61:f9:59:b9:19:d5:8a:73:d6:cf:c7:26:66:a8:bd:68:
         c6:19:9c:fe:12:f7:a4:ab:ef:3b:e0:2a:d6:fb:49:fe:90:f6:
         0b:ce:a1:22:e1:28:f7:c9:57:bd:8c:b7:2a:95:1e:9c:4c:63:
         74:4a:e8:5e:24:14:62:70:2d:79:8c:96:a0:48:90:af:4e:87:
         17:4a:d5:a5:c8:51:8c:68:12:35:d0:23:a9:f7:78:15:35:71:
         d6:a9:e0:e1:2b:42:81:09:f9:3b:c2:3e:f4:a8:0c:72:5d:5a:
         30:e0:81:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:54:36 2026 by rpki-client