Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/e3af6bbf-36c2-3860-9c82-171c8c55307a.roa
File:                     e3af6bbf-36c2-3860-9c82-171c8c55307a.roa (raw, json)
Hash identifier:          l125v4Ye1ZZLWvv3DZDd021DgN5oZ8ZxoEWs/wF3HL4=
Subject key identifier:   06:78:49:DA:0B:77:82:26:B9:73:A9:D2:CF:32:CB:3A:9B:6A:6F:C4
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584EA11585A9E2C31098B34FAA38
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/e3af6bbf-36c2-3860-9c82-171c8c55307a.roa
Signing time:             Sun 26 Jul 2026 17:37:01 +0000
ROA not before:           Sun 26 Jul 2026 17:37:01 +0000
ROA not after:            Sat 24 Oct 2026 17:37:01 +0000
asID:                     30036
IP address blocks:        2604:2e86:3400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a1:15:85:a9:e2:c3:10:98:b3:4f:aa:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jul 26 17:37:01 2026 GMT
            Not After : Oct 24 17:37:01 2026 GMT
        Subject: CN=95338fea-11f7-4690-b880-e8a0a16882f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:77:9e:18:16:61:76:58:05:df:f7:5a:d3:a5:
                    f4:33:6c:a3:4a:8f:5c:48:d3:26:e3:92:ed:18:03:
                    7b:78:55:1e:a7:6c:2b:6e:ac:1e:2b:19:10:33:13:
                    f5:e5:98:db:34:50:08:ee:16:de:33:a2:3a:20:1e:
                    70:73:da:89:3a:f9:a0:1f:3c:58:46:8d:64:2c:40:
                    4f:9d:f1:a3:0b:69:61:85:67:65:cc:bc:c7:37:3f:
                    e5:1f:d1:2d:88:a2:32:25:13:b2:a3:d9:17:e6:19:
                    f3:df:ec:34:dd:00:01:e7:ce:b3:84:f1:64:00:1a:
                    63:5c:f5:83:76:f2:62:4a:91:44:b6:1d:50:1a:25:
                    5e:16:ea:54:88:64:00:2a:7f:bb:23:15:8c:e8:ad:
                    21:b0:5a:58:10:d3:a0:76:b7:54:fd:e6:ab:31:80:
                    db:48:ba:68:57:80:c9:e3:52:28:c6:91:29:14:5f:
                    ea:9a:43:b2:bc:fe:a3:b8:db:03:09:6d:34:ef:1f:
                    ed:d0:4f:5a:69:44:36:37:ff:07:17:a1:cc:cf:fa:
                    77:13:de:85:b2:06:e4:2a:95:78:71:c6:3f:0f:53:
                    10:ea:84:66:22:bc:ec:e7:e5:c0:17:0b:3c:20:97:
                    36:3f:f9:ef:0e:74:99:d7:f7:f8:e7:26:ec:0d:04:
                    91:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:78:49:DA:0B:77:82:26:B9:73:A9:D2:CF:32:CB:3A:9B:6A:6F:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/e3af6bbf-36c2-3860-9c82-171c8c55307a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e86:3400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:e1:c2:24:b7:d5:0d:62:f2:23:d5:f6:3b:3f:e0:f3:13:cb:
         e0:ab:1b:3e:62:6c:60:6d:6a:e3:d7:f8:52:4b:6e:23:93:e6:
         de:66:16:90:f1:a3:ad:c1:46:89:e8:76:42:e7:73:52:d6:8b:
         c9:2a:37:97:5a:c3:9e:5e:08:95:e5:0d:5c:bd:e1:55:fc:8d:
         cb:1c:9a:c9:56:f9:df:72:3c:25:34:0e:08:cf:64:68:5f:4c:
         db:da:59:d1:fd:2a:f4:52:4c:67:b2:ce:15:69:8a:60:cc:59:
         35:28:6f:32:ee:61:d9:ae:78:80:27:11:5d:72:c8:5b:ad:e2:
         72:8b:2a:0b:d4:64:03:6c:70:e8:7c:99:94:12:ed:35:33:e9:
         a6:16:96:1b:46:b9:45:55:9d:d5:72:a3:23:e5:cd:5f:5b:94:
         6d:55:66:7b:28:88:37:64:3e:f4:e5:13:a1:18:28:34:5d:72:
         47:b8:bb:a2:11:ce:4e:1d:30:b7:61:87:30:17:e5:85:32:2f:
         09:8d:93:49:61:49:76:02:f6:51:37:41:39:e4:3d:7c:86:60:
         52:9b:03:9e:79:82:ae:e4:66:b3:b9:01:e8:c1:98:2f:fe:7c:
         37:2e:1d:10:65:10:cc:d6:9b:07:88:97:34:df:91:7d:c9:6a:
         d0:f3:9a:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:27:46 2026 by rpki-client