Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a04a33de-95c6-3ceb-9db4-fede37f5994a.roa
File:                     a04a33de-95c6-3ceb-9db4-fede37f5994a.roa (raw, json)
Hash identifier:          JnALxFm5wSIM7xcfPNzeh6mWroVtFAqnPjasnFeqYT0=
Subject key identifier:   78:9F:25:85:08:63:1D:22:79:5F:43:10:3F:D7:9C:67:8E:F1:B3:19
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584F5A32F9ADB779A10E7DEC0280
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a04a33de-95c6-3ceb-9db4-fede37f5994a.roa
Signing time:             Thu 01 Oct 2026 01:00:12 +0000
ROA not before:           Thu 01 Oct 2026 01:00:12 +0000
ROA not after:            Wed 30 Dec 2026 02:00:12 +0000
asID:                     30036
IP address blocks:        2604:2e8f:4c00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5a:32:f9:ad:b7:79:a1:0e:7d:ec:02:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Oct  1 01:00:12 2026 GMT
            Not After : Dec 30 02:00:12 2026 GMT
        Subject: CN=b8ee18e6-c250-43fe-8963-81ab7e26fdb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:cb:74:36:5d:d8:4e:21:1e:a3:b6:3e:41:51:
                    9d:64:f8:75:09:e8:cc:2b:95:a6:c2:66:62:d5:8c:
                    5c:1b:12:70:66:16:1d:ba:5d:29:2d:ee:cb:da:3f:
                    cb:35:24:2d:ff:08:fc:5d:08:16:d5:cb:f8:e2:99:
                    b3:cb:86:31:8d:16:dc:4c:bd:a8:2c:22:c1:66:cc:
                    96:40:3a:e1:ad:ee:5c:dc:4d:29:8c:75:d4:92:1f:
                    f6:31:ed:c3:32:fd:11:da:4c:65:62:be:5d:78:d7:
                    74:a7:e2:1b:60:0a:16:df:eb:b7:14:63:a3:d6:31:
                    90:42:8d:89:32:5b:9a:d4:2e:19:12:5b:ae:3b:1e:
                    e6:53:16:14:8e:d2:e9:3a:ae:76:dc:e6:17:a8:bf:
                    cb:a5:32:be:93:ed:92:94:ee:3d:28:98:e8:44:c7:
                    92:fa:ac:5a:75:09:26:7f:e2:01:d9:a5:95:8d:2f:
                    88:52:f2:7c:94:bf:73:ab:e3:54:aa:69:c4:f5:04:
                    54:28:6c:f9:40:f7:77:92:0c:40:cd:f3:da:2b:45:
                    ea:c7:e2:a2:2d:70:a0:fe:42:3c:be:c0:20:22:f7:
                    ed:63:37:34:e9:b1:be:e9:97:b7:01:b8:9c:8a:03:
                    51:c9:1b:3e:2b:76:e9:fe:6f:c5:1a:a5:85:16:9f:
                    2a:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:9F:25:85:08:63:1D:22:79:5F:43:10:3F:D7:9C:67:8E:F1:B3:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a04a33de-95c6-3ceb-9db4-fede37f5994a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8f:4c00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:f7:2f:fb:ab:65:48:16:4a:7f:56:91:b4:3f:27:4b:74:e0:
         60:a7:69:5e:fb:fd:d7:42:3d:d0:90:2d:a2:4c:99:4e:33:ba:
         a5:ca:2b:67:5b:94:01:38:a5:7e:56:f8:e9:73:51:59:98:b9:
         2d:6d:44:4d:94:08:c5:6a:0b:4b:b0:41:47:c1:0e:6e:91:15:
         d1:2f:53:66:d3:94:c2:7f:e8:01:bb:e0:e2:41:dc:fb:42:80:
         58:c3:99:af:e4:e0:2c:4d:2f:ac:55:b2:47:be:23:06:ee:70:
         9b:e0:20:25:cc:f5:f9:42:a9:f6:c9:90:85:70:b8:f0:d6:88:
         dd:3f:2d:30:30:ed:87:03:af:3e:a7:5c:af:e4:bf:0a:42:d1:
         f9:7f:41:85:2c:49:f2:84:c8:52:ee:e2:ae:3e:0f:bd:95:02:
         76:0b:07:7f:36:d9:af:be:23:61:49:b6:a1:21:21:af:b9:f5:
         2e:7f:25:2f:2c:7e:b7:f8:15:99:ae:42:8a:08:f2:bd:0c:04:
         54:4f:4e:f8:09:bf:39:1d:bb:06:17:7c:f0:4b:ff:a0:20:95:
         a9:81:52:69:f3:29:d2:4b:5d:c9:4b:cd:73:c8:1f:8f:35:41:
         6c:86:af:e2:d0:ae:4c:42:30:5d:ba:40:f1:55:1e:0d:f0:29:
         de:61:7a:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 02:31:33 2026 by rpki-client