Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/be89ef98-cbcb-3e04-8146-f011a603e140.roa
File:                     be89ef98-cbcb-3e04-8146-f011a603e140.roa (raw, json)
Hash identifier:          phAukOtq5BFeDhHEp/JwBWuL3oqZatN2njL25vITfgY=
Subject key identifier:   19:E1:6E:EE:82:2F:CB:E6:62:52:E8:1D:AC:2C:17:AA:B5:F2:9D:DF
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584D55BCBCEE21EA2EA7234DA280
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/be89ef98-cbcb-3e04-8146-f011a603e140.roa
Signing time:             Mon 30 Mar 2026 01:00:23 +0000
ROA not before:           Mon 30 Mar 2026 01:00:23 +0000
ROA not after:            Sun 28 Jun 2026 01:00:23 +0000
asID:                     30036
IP address blocks:        2604:2e8f:fc00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:55:bc:bc:ee:21:ea:2e:a7:23:4d:a2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Mar 30 01:00:23 2026 GMT
            Not After : Jun 28 01:00:23 2026 GMT
        Subject: CN=8186024f-20f7-4dc0-81cc-89b423372e38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:f0:ad:87:31:f2:67:52:52:e1:31:2c:70:c2:
                    01:f8:10:19:00:b6:5b:c3:95:86:e7:49:9a:2e:82:
                    1a:27:e9:2a:75:ca:ad:e2:09:e9:01:76:62:b9:b8:
                    fe:3e:e0:3d:40:b7:7f:fa:78:b4:58:4c:a0:ef:13:
                    10:a9:5f:39:4c:f6:79:7b:90:8b:28:ea:31:e4:b9:
                    0b:53:55:08:bb:ef:b2:42:a0:46:1c:33:19:d8:e9:
                    15:c9:97:ce:92:d2:23:b9:34:7e:76:0e:a1:78:21:
                    61:f0:e4:ed:89:2b:2b:13:34:bf:fd:ea:54:a2:7e:
                    56:63:b3:cb:35:0e:fb:a3:85:3e:2a:47:0d:12:e0:
                    28:18:2e:51:f1:08:e5:e9:00:82:5c:1a:5e:3a:09:
                    c9:a9:a3:96:2a:58:10:d3:42:06:29:9b:0c:2b:92:
                    50:6b:4d:b0:1d:78:7b:da:bb:e8:45:0e:d8:92:ea:
                    47:c3:15:ce:b0:ac:31:c0:51:fc:0e:d6:01:fd:d6:
                    54:25:28:bc:be:e4:09:6a:1b:e0:f8:78:17:0c:9a:
                    5d:a4:ea:12:ba:9f:a6:77:74:c4:e5:16:81:1d:4e:
                    fc:b8:9b:0b:ae:04:e2:5b:cd:95:c4:23:90:53:cc:
                    47:da:a2:a5:c0:9d:76:b4:45:ef:cc:d8:fb:ba:05:
                    8b:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:E1:6E:EE:82:2F:CB:E6:62:52:E8:1D:AC:2C:17:AA:B5:F2:9D:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/be89ef98-cbcb-3e04-8146-f011a603e140.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8f:fc00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:55:6d:7e:09:f9:ea:0e:5d:5d:74:78:74:1d:c1:3d:9e:d4:
         4b:c8:fa:19:a4:9e:d8:24:74:dc:cc:fb:bb:78:26:5c:af:6f:
         a0:3d:27:a1:40:0f:e8:e8:c0:6a:99:bb:02:15:de:a0:af:97:
         f7:9f:63:fb:26:53:7d:41:29:25:ee:0a:cd:df:24:6d:48:98:
         18:74:ff:a3:87:aa:5b:f4:ca:88:66:1c:11:4f:75:35:92:0f:
         2e:a5:ab:7a:f4:02:ea:6b:2d:b9:f5:92:af:5c:6e:7e:20:ea:
         f6:e7:66:d1:ec:f6:3e:66:db:be:79:2e:37:6d:83:c7:99:16:
         cf:22:6d:86:13:ae:e0:c8:00:62:be:60:6f:f3:7f:be:9e:3e:
         94:32:12:fe:81:62:16:5c:63:6e:af:0f:6d:ab:71:03:0d:7a:
         df:d8:28:c3:6c:aa:d8:e0:d1:cb:1f:52:25:20:7a:34:0d:87:
         73:e1:77:6a:22:9e:40:f9:d2:ac:99:04:7a:9e:3a:03:9a:e0:
         b5:2a:02:75:01:a9:e2:5a:d4:bf:2f:05:67:c9:22:9e:cf:ea:
         e4:59:42:28:2d:67:c8:b2:f9:76:f1:78:fc:17:a1:17:8d:7d:
         a4:44:29:9a:42:89:80:37:0a:c2:1a:72:71:39:5c:7f:f1:e9:
         8b:0d:07:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:44:42 2026 by rpki-client