Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/db6257d7-79db-3537-beed-9eaf755d1bee.roa
File:                     db6257d7-79db-3537-beed-9eaf755d1bee.roa (raw, json)
Hash identifier:          OJUKEFvvYnJHBWaRuR+MTrt9sFF5WN0FQiVtKyaF8Ys=
Subject key identifier:   12:87:19:E0:97:CB:87:B0:06:95:7F:CA:D7:32:DA:D1:85:A1:6A:D6
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584DF7A5D741B482F6BF21DCA600
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/db6257d7-79db-3537-beed-9eaf755d1bee.roa
Signing time:             Wed 27 May 2026 01:00:14 +0000
ROA not before:           Wed 27 May 2026 01:00:14 +0000
ROA not after:            Tue 25 Aug 2026 01:00:14 +0000
asID:                     30036
IP address blocks:        2604:2e88:7800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f7:a5:d7:41:b4:82:f6:bf:21:dc:a6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: May 27 01:00:14 2026 GMT
            Not After : Aug 25 01:00:14 2026 GMT
        Subject: CN=accac508-73a8-46cb-8516-63fe276c5374
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:38:0f:54:b7:87:00:bc:ad:fc:55:99:51:0a:
                    97:b4:4d:9d:64:b7:6c:6d:9f:31:d0:27:99:5c:59:
                    12:f7:8f:20:76:41:a8:3b:86:7a:6e:34:ae:90:af:
                    03:95:44:a2:20:09:34:2b:41:78:06:8a:91:26:c3:
                    60:ea:17:81:98:5e:dd:da:f4:9f:fe:78:ea:54:09:
                    69:bc:78:4e:91:58:a6:46:3a:58:25:3a:a7:8d:08:
                    af:a4:05:83:fc:9d:e7:39:59:4e:ab:9a:11:52:d0:
                    d4:1b:17:60:0a:5a:01:3d:4a:bd:21:f1:c3:46:51:
                    17:ac:2d:fc:4b:b9:f4:b2:31:6f:61:f2:42:2d:3d:
                    7e:1b:31:16:1a:4b:71:9b:a7:bf:2a:e2:6b:38:00:
                    7a:43:7a:fb:de:6c:c3:0a:df:48:a4:ff:ac:72:a4:
                    2b:89:37:2c:70:6c:15:0a:0e:57:2d:5b:59:8d:c0:
                    5e:52:89:19:5e:d8:70:6a:a6:d9:51:cf:b3:09:53:
                    1c:b2:54:bc:da:f2:c8:6d:6a:3f:1b:ba:0f:42:87:
                    6a:a8:0e:d8:c7:a9:bd:84:71:32:2d:35:6d:4a:5c:
                    06:a1:58:12:44:c9:f7:3d:10:69:78:4c:ba:ea:9b:
                    a0:69:b6:91:90:f6:71:2c:c2:4b:c6:4d:22:8e:6f:
                    8e:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:87:19:E0:97:CB:87:B0:06:95:7F:CA:D7:32:DA:D1:85:A1:6A:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/db6257d7-79db-3537-beed-9eaf755d1bee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e88:7800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:44:c2:89:b0:67:5b:ba:b7:5a:70:4d:6e:45:af:cd:c9:46:
         3d:a1:07:32:f0:43:cd:b3:ba:ac:86:8c:fa:7d:85:97:79:bd:
         7a:0b:04:9b:dd:f3:75:31:05:b8:be:f1:f1:d1:1c:01:16:47:
         72:3c:5f:86:26:49:25:b5:3c:2a:81:3a:ce:8b:a0:db:f1:c3:
         3c:f9:c1:f1:dc:17:c1:b9:c0:81:2e:84:d5:47:3e:8e:f9:2f:
         41:a2:db:79:64:b5:09:14:93:41:76:08:76:55:1b:98:5b:3a:
         33:d7:90:8e:c5:cc:6c:e3:74:dd:2b:c2:f8:48:e0:92:bf:a1:
         70:fd:c6:7e:44:b7:b6:c6:f2:80:a9:30:7a:f2:22:b9:8a:12:
         cc:60:aa:c1:01:71:07:3f:46:f2:d9:93:33:be:cf:27:bd:37:
         15:1a:75:f2:ce:e5:d5:fa:a1:fe:6c:22:71:6c:cc:ca:6e:29:
         12:b1:50:66:fd:6a:80:90:d4:3a:c5:bf:4e:e0:51:69:77:fc:
         a6:d4:07:36:5c:35:29:6d:fa:82:fc:87:0b:49:57:67:ce:04:
         ea:df:e2:0c:22:94:aa:5b:3f:35:be:fc:9f:d4:7d:8d:ff:db:
         16:f7:a6:45:b6:37:6a:72:7d:a0:e9:6f:ad:ee:d8:3b:58:88:
         8d:80:69:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:40:42 2026 by rpki-client