Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c5f0a2d2-bef3-3f1a-85df-da34a6e913a4.roa
File:                     c5f0a2d2-bef3-3f1a-85df-da34a6e913a4.roa (raw, json)
Hash identifier:          JErWAcIhgz4ka4eKPumOZRnMeVIujDXnSzdUEOuEBls=
Subject key identifier:   48:C2:40:42:69:49:EC:AF:50:F7:3B:55:33:25:5B:A1:B1:E5:E6:86
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584DF7A5D4218E0348B2504B4680
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c5f0a2d2-bef3-3f1a-85df-da34a6e913a4.roa
Signing time:             Wed 27 May 2026 01:00:14 +0000
ROA not before:           Wed 27 May 2026 01:00:14 +0000
ROA not after:            Tue 25 Aug 2026 01:00:14 +0000
asID:                     30036
IP address blocks:        2604:2e8e:4800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f7:a5:d4:21:8e:03:48:b2:50:4b:46:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: May 27 01:00:14 2026 GMT
            Not After : Aug 25 01:00:14 2026 GMT
        Subject: CN=982098d8-971e-4052-adde-a5a32149ca20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:10:2b:e9:15:8f:33:20:ce:a0:0e:e8:b9:06:
                    19:73:d8:d8:97:08:b3:e7:52:0b:f1:db:17:fc:0b:
                    5b:2e:fd:54:ca:72:3a:df:a4:a3:ec:9f:df:3c:3a:
                    b8:cb:c3:2c:59:f9:bd:b8:29:23:94:37:d4:c7:89:
                    65:c2:6b:a3:90:73:b6:38:f2:3a:cd:3a:19:a3:4b:
                    00:86:08:90:77:58:bd:eb:63:f4:5a:9c:e1:2d:fe:
                    6e:db:20:9b:c4:6a:37:3d:ad:c6:b7:6b:f1:7c:07:
                    fd:20:ae:f1:38:a5:9f:ba:27:5e:30:5d:4b:0a:54:
                    a6:40:24:31:4b:5c:76:3b:21:76:6b:df:d8:3d:97:
                    6e:38:48:15:ad:76:3e:88:a6:64:18:97:0d:6f:32:
                    ad:7f:2a:5c:36:a7:f7:62:42:1b:71:42:fc:4e:3c:
                    87:f2:37:b0:ad:8a:67:33:70:cb:ac:30:16:db:16:
                    83:b1:60:37:d2:ef:dd:60:9a:06:2f:b3:78:80:be:
                    31:8d:d8:e2:c0:c6:b7:c8:bc:5c:31:e8:f1:2f:18:
                    8e:82:61:c7:b7:a0:b5:05:ab:0d:a0:77:d7:31:3f:
                    08:fc:29:75:4e:4e:14:1c:68:2a:76:5d:03:90:ab:
                    ea:e5:f2:d6:2c:e1:fe:07:79:62:4e:5c:69:61:92:
                    5d:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:C2:40:42:69:49:EC:AF:50:F7:3B:55:33:25:5B:A1:B1:E5:E6:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c5f0a2d2-bef3-3f1a-85df-da34a6e913a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8e:4800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:d7:e8:63:b0:dd:04:de:12:22:6a:ff:33:2a:30:d5:63:e1:
         25:93:06:47:c8:f1:e4:67:98:d6:05:d2:9e:7b:3e:91:d7:81:
         32:de:ee:1c:a2:98:4d:95:d7:40:92:32:c2:9f:b7:ce:cd:c1:
         2a:a3:af:18:a9:32:27:72:a4:89:5b:2b:24:3b:79:52:ea:46:
         e9:2a:57:26:97:3e:f8:08:d7:39:55:9e:11:27:34:ed:1c:df:
         0f:45:2c:66:1c:92:e0:6b:eb:d3:f9:63:71:06:dd:09:87:8c:
         ff:58:10:4b:7c:f7:1d:13:03:88:6c:3e:cf:59:52:82:6b:e3:
         9e:e1:26:10:0b:d7:f7:ff:5e:a3:e2:f5:13:0e:ae:98:3b:5d:
         5a:a1:21:e4:2b:f7:01:14:c7:d5:e7:40:63:27:f3:3b:a4:01:
         4f:84:75:3e:9e:84:8f:2e:86:e5:12:6f:16:70:b6:21:16:0f:
         f7:85:46:17:a1:93:e8:cd:20:a1:d9:11:ef:1e:0b:37:f3:0f:
         9c:12:5e:c3:83:96:90:23:a9:19:1c:ec:b2:13:42:06:48:e2:
         52:17:d6:ee:71:5a:9d:91:c6:32:36:70:e3:1e:83:ca:d3:ab:
         51:18:bc:33:60:e1:ea:e0:82:ac:0b:e6:fa:f5:5d:41:82:85:
         ef:a9:3a:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:28:15 2026 by rpki-client