Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9e93e775-5aee-37ac-addd-a52d3b527620.roa
File:                     9e93e775-5aee-37ac-addd-a52d3b527620.roa (raw, json)
Hash identifier:          VmKmggdFtum+Ovz+3tSV2t/ckvyGIQ9KQY+Nf1hqZuw=
Subject key identifier:   2B:9B:C3:10:AB:86:FA:09:36:42:2A:72:F7:70:21:A1:F6:FD:BC:44
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584E059C6CF135197507A00BEE30
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9e93e775-5aee-37ac-addd-a52d3b527620.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     30036
IP address blocks:        2604:2e8e::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9c:6c:f1:35:19:75:07:a0:0b:ee:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=4c84e68a-9a46-4c21-bb4a-07ae528fa785
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:9b:7f:f1:3c:3c:30:d1:86:c9:f5:ea:c1:49:
                    44:8b:27:4d:fb:85:6d:3a:62:96:3e:40:ce:07:0c:
                    ba:25:2e:d4:48:00:3a:65:c5:af:6d:7d:ea:d1:ff:
                    d6:b5:15:7f:dd:b4:73:ec:c3:3e:cf:fc:9f:9e:99:
                    8e:7f:f7:50:7b:ed:e0:1e:94:ab:d1:d0:09:76:da:
                    b7:74:32:3e:b7:19:b3:57:b5:fc:a4:88:44:60:24:
                    53:d8:b9:c3:b1:87:52:80:d9:58:6c:d9:2d:2d:c7:
                    31:f3:77:ae:d1:e3:65:3b:8b:0a:6c:8e:88:1f:d6:
                    68:71:75:b5:4d:56:54:ff:f1:21:62:64:ba:d8:b9:
                    fc:32:df:69:0a:7f:77:89:b6:90:54:c1:92:58:6d:
                    cd:3b:02:6b:cb:9e:71:df:52:7d:69:6e:4d:e1:b6:
                    c0:3d:b7:d7:b0:a2:7d:d3:8f:8d:e7:2c:13:80:7f:
                    12:18:8f:55:21:44:13:83:92:24:6e:d6:39:91:92:
                    18:50:d3:5f:e0:b1:fa:60:41:8e:c9:e7:2d:04:ac:
                    ba:b5:68:ac:a3:cd:86:9e:1e:90:57:b8:34:e6:a0:
                    d2:5d:a9:e1:2c:48:74:11:46:4d:e0:de:5c:66:9d:
                    cd:9d:de:71:fe:78:42:e4:6d:5a:aa:a3:80:27:b6:
                    e4:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:9B:C3:10:AB:86:FA:09:36:42:2A:72:F7:70:21:A1:F6:FD:BC:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9e93e775-5aee-37ac-addd-a52d3b527620.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8e::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:69:95:19:f5:4f:c0:a8:d3:ea:d2:90:0b:73:f5:99:8c:3d:
         41:d5:de:b7:36:1f:8d:f1:9b:f2:ec:ba:d6:78:db:3e:8d:76:
         98:ba:dc:eb:f3:12:36:16:28:e2:30:d8:c0:8b:47:45:a5:2b:
         67:88:87:d4:0a:3d:99:97:83:d8:0b:f6:41:39:02:6c:7e:ab:
         8e:0c:9f:d1:9e:cb:38:2d:8f:be:df:07:f5:27:6e:b1:2c:39:
         95:a7:10:57:a3:06:42:53:d7:e3:98:48:a8:30:99:01:bb:bd:
         dd:15:c1:95:30:9e:72:8b:3c:af:e9:e5:bd:1d:fd:a3:ad:d9:
         22:d0:cd:a1:63:fd:5f:8d:ce:84:1c:5a:8c:57:3d:e5:b6:65:
         fc:55:2f:70:a9:c1:67:90:ce:4c:92:b8:16:0b:f7:18:a1:27:
         69:eb:47:43:58:20:76:04:8a:56:35:bf:21:a1:41:01:9e:c1:
         06:40:4a:02:2b:02:87:01:b9:fd:63:da:a1:44:8e:ed:59:2f:
         31:6c:22:b2:3f:d8:7f:e3:4a:c9:f1:32:c9:a7:8b:88:7a:e4:
         b4:cf:f2:9a:4b:0a:e6:be:bf:3b:c7:e2:20:61:3e:e2:67:d5:
         8a:b0:f8:62:98:97:dd:3b:47:45:98:c4:c5:64:e3:1e:e1:b4:
         b0:f9:e9:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:33:38 2026 by rpki-client