Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bbc60aad-f532-3673-88b6-3ac8d661adbe.roa
File:                     bbc60aad-f532-3673-88b6-3ac8d661adbe.roa (raw, json)
Hash identifier:          tlfonxohOugo5AnvSez4mbAW351G0VwOA5MoyJQgvuA=
Subject key identifier:   97:C4:74:20:03:E0:75:29:C6:11:44:8C:23:9B:DB:92:87:FE:55:51
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584D7CCFE3A4A642FC2D06B42980
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bbc60aad-f532-3673-88b6-3ac8d661adbe.roa
Signing time:             Mon 13 Apr 2026 01:00:24 +0000
ROA not before:           Mon 13 Apr 2026 01:00:24 +0000
ROA not after:            Sun 12 Jul 2026 01:00:24 +0000
asID:                     30036
IP address blocks:        2604:2e8f:c00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7c:cf:e3:a4:a6:42:fc:2d:06:b4:29:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Apr 13 01:00:24 2026 GMT
            Not After : Jul 12 01:00:24 2026 GMT
        Subject: CN=03086824-829c-4189-a74d-91354fdccba6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:63:b1:ea:2e:f6:44:86:a5:5b:9f:fd:41:ee:
                    4f:15:ab:0e:3c:42:7f:3e:51:2e:16:5d:20:37:53:
                    3f:7c:5c:4b:7f:c2:a7:e6:41:f5:12:86:a0:f7:c1:
                    9d:1f:02:b6:67:a2:12:e7:64:4b:89:90:e7:2e:45:
                    15:b3:8d:0b:7f:15:ca:13:e4:84:0f:c7:4b:0b:24:
                    13:9d:32:a6:60:5b:06:42:3b:ad:4b:8b:2b:74:0b:
                    e5:6e:7d:a1:a4:8b:fd:31:9b:aa:10:6d:28:39:4c:
                    80:ce:94:79:2e:47:49:ba:a6:13:0d:55:13:3b:dd:
                    9a:fd:6d:fc:81:bc:1d:1e:7e:5d:81:cf:3c:70:51:
                    10:6b:df:17:a2:f3:cb:bb:ee:1d:6e:33:9c:a8:dd:
                    9d:b3:c5:56:1d:a2:b3:ae:25:d3:77:9d:dc:32:dc:
                    08:15:e3:7c:72:e3:1d:2c:a6:21:80:b9:ef:fb:eb:
                    db:42:64:d6:2e:8b:d5:48:72:f6:d4:b7:36:23:38:
                    95:8b:d1:0b:b2:c7:43:ac:f9:82:b6:6e:de:8c:82:
                    dc:39:f5:f6:44:9e:27:83:fa:18:89:91:ab:08:e0:
                    b5:f8:fe:0e:56:7a:2c:14:90:36:c3:a6:7f:82:79:
                    d6:f2:b8:05:3c:be:05:f6:69:a7:88:d2:c9:27:be:
                    f7:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:C4:74:20:03:E0:75:29:C6:11:44:8C:23:9B:DB:92:87:FE:55:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bbc60aad-f532-3673-88b6-3ac8d661adbe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8f:c00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:8c:0e:f5:02:02:e0:5b:83:05:a9:63:0e:24:9e:7c:59:65:
         b8:23:b2:74:6c:01:b6:61:7c:b1:40:bb:ef:94:14:80:18:24:
         21:58:f6:5c:5c:b4:7a:cc:59:4d:ca:d6:3b:79:b7:02:9d:b0:
         68:5d:4d:5e:7c:0d:35:a8:2b:3e:0e:0c:12:41:9f:08:48:4d:
         79:e6:b9:ec:db:7b:ad:2d:19:01:38:a3:2b:79:03:3b:ae:21:
         a0:4d:27:05:65:5f:13:de:7a:31:8a:fa:83:fb:5e:78:35:e8:
         fb:31:43:9e:48:36:30:56:20:57:cc:8f:7c:7f:68:4d:5d:c9:
         10:c4:c0:b9:59:e3:86:ca:b0:8a:fe:f4:a6:34:a3:58:be:3d:
         f1:f0:2e:cf:aa:0f:6c:0a:9d:8a:14:9b:e0:3c:9e:4b:ca:40:
         49:f8:4f:d8:30:6b:95:9b:c3:3e:6e:08:ef:27:55:4f:8c:f1:
         0e:cd:d9:07:cd:23:45:bf:84:32:1a:8b:55:07:dc:a7:1a:e4:
         51:50:f8:23:27:17:fb:a5:6a:29:62:ae:58:87:f6:68:37:ad:
         7f:69:5c:96:f0:89:6f:4d:8b:d4:4c:6a:82:f1:50:1e:a2:6f:
         e6:bd:4a:29:18:74:14:be:19:ac:46:0b:ba:64:95:78:11:64:
         ca:78:74:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:39:56 2026 by rpki-client