Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9ffe5bc9-13f2-363b-beb4-df7ed8098abc.roa
File:                     9ffe5bc9-13f2-363b-beb4-df7ed8098abc.roa (raw, json)
Hash identifier:          GgrdfrlEE18GE1/1mwMeY0pnXKqAFF0p4LDGVX6O6vU=
Subject key identifier:   4C:70:48:BF:21:48:B8:FC:53:3E:D8:C6:63:45:81:C6:43:93:1C:ED
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584DFD9BBC319EEBEC022A3EA380
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9ffe5bc9-13f2-363b-beb4-df7ed8098abc.roa
Signing time:             Fri 29 May 2026 04:14:52 +0000
ROA not before:           Fri 29 May 2026 04:14:52 +0000
ROA not after:            Thu 27 Aug 2026 04:14:52 +0000
asID:                     30036
IP address blocks:        2604:2e8b:1c00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fd:9b:bc:31:9e:eb:ec:02:2a:3e:a3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: May 29 04:14:52 2026 GMT
            Not After : Aug 27 04:14:52 2026 GMT
        Subject: CN=920858c5-f22e-413b-9860-223f1b30d94a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:24:1b:ee:9b:0c:c9:46:3b:fd:b9:36:34:f5:
                    c6:7e:dd:79:7d:89:05:43:da:ed:92:e7:34:cd:b7:
                    d0:d1:8d:b7:24:82:22:ef:45:71:c8:a8:e5:78:c5:
                    09:01:96:ef:06:1a:cc:16:7e:8b:d3:68:6d:20:c0:
                    d6:5a:e4:2d:95:24:69:da:bd:6a:98:98:ba:59:05:
                    1f:1e:c7:a0:b4:b4:50:5a:31:17:e3:38:d2:a5:ac:
                    53:1e:9e:01:32:25:bd:9f:35:0a:b5:a7:04:1c:ce:
                    be:2c:b1:02:d7:6d:84:d6:31:2c:6b:f2:6f:86:7f:
                    87:ce:1e:d4:a7:06:fa:ba:24:07:6b:ca:ee:38:b0:
                    43:d5:c6:61:28:0d:f9:3e:69:52:79:cc:72:2c:71:
                    45:4e:69:37:db:d3:43:8c:79:34:d0:88:b6:a5:14:
                    21:cf:ec:a3:b2:fc:e4:6c:9f:16:57:0d:3b:de:cf:
                    57:73:62:ac:ef:7d:da:3e:31:7c:77:95:bf:9e:07:
                    63:33:66:15:1c:02:24:41:d5:fc:c3:ba:c7:4f:44:
                    ae:78:42:68:66:7e:28:ac:df:01:2c:ac:d7:f2:77:
                    a5:11:c9:a7:60:79:2d:4f:24:42:8d:7f:18:0f:4c:
                    0c:36:45:ba:bf:af:37:92:73:14:5c:b7:e3:2b:d1:
                    ea:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:70:48:BF:21:48:B8:FC:53:3E:D8:C6:63:45:81:C6:43:93:1C:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9ffe5bc9-13f2-363b-beb4-df7ed8098abc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8b:1c00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:90:7c:ef:28:0f:f7:ca:a7:10:1d:62:c4:57:90:71:33:cd:
         a8:d6:0f:05:3f:87:0f:7c:d1:f8:61:59:65:bb:64:7a:05:1f:
         4d:96:03:e1:3c:6f:8e:68:04:d5:42:4e:84:06:de:21:40:84:
         9a:d5:dc:b2:e0:a4:98:d8:b1:b3:1e:1e:7e:cd:80:2f:64:39:
         a3:31:1e:0c:91:fd:6e:ce:5e:3a:0c:05:67:67:5b:7a:4c:da:
         67:a3:0d:2e:ce:b1:c4:ea:35:f5:d9:4a:2c:ab:9b:ed:1c:a0:
         ea:1e:ee:35:3e:00:13:52:a9:e8:60:cf:1f:54:2e:63:c3:06:
         13:77:a7:02:a6:f9:3f:e9:cf:7d:dd:08:89:98:6a:38:23:15:
         6d:0c:b1:1c:63:00:32:25:37:ce:cc:1b:d0:6a:ea:39:13:e1:
         01:d7:d3:4b:b8:c0:78:38:19:e7:89:68:f5:12:2a:5f:bf:54:
         4a:98:0f:c3:1f:a7:35:fd:0a:cf:88:1b:2e:05:63:6a:e1:1f:
         5e:67:01:e8:89:75:af:95:c6:c9:58:e0:6e:25:a5:e2:43:20:
         1d:c7:38:4e:9b:0a:55:f4:66:70:d7:a4:ff:52:fc:d8:73:c5:
         6b:7e:28:3b:64:26:5a:03:5d:f2:68:84:2f:f3:b6:68:be:f7:
         75:00:00:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:17:23 2026 by rpki-client