Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/e8f1ad56-e4cf-36e8-b739-10baaf09e203.roa
File:                     e8f1ad56-e4cf-36e8-b739-10baaf09e203.roa (raw, json)
Hash identifier:          kA6sg7u2IEAtBEsvixww8s4jL4CGImB0bBgdQCd8wNg=
Subject key identifier:   FE:43:51:62:F2:BB:71:4B:B4:1F:80:AD:3D:A0:E4:C7:3C:51:02:E1
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584EFE122FA70D393EBA0E6988E0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/e8f1ad56-e4cf-36e8-b739-10baaf09e203.roa
Signing time:             Sat 29 Aug 2026 01:00:12 +0000
ROA not before:           Sat 29 Aug 2026 01:00:12 +0000
ROA not after:            Fri 27 Nov 2026 02:00:12 +0000
asID:                     30036
IP address blocks:        2604:2e88:3c00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:fe:12:2f:a7:0d:39:3e:ba:0e:69:88:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Aug 29 01:00:12 2026 GMT
            Not After : Nov 27 02:00:12 2026 GMT
        Subject: CN=fc89ead9-e33e-4a30-bd3f-5a6bf2bb257f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:cd:a3:5a:aa:38:16:4e:10:94:6c:97:02:b7:
                    f0:40:29:72:b8:f4:09:66:2f:58:fa:38:3d:4d:c4:
                    0c:38:4c:cc:81:fa:de:6f:24:7a:fd:01:2c:92:16:
                    14:a4:61:a7:82:7b:fb:cd:7c:c1:82:ca:a1:cd:87:
                    2d:1b:19:1d:ca:21:88:88:19:7f:32:8a:dc:be:af:
                    76:92:7d:1e:e9:fd:45:ca:2e:d5:ae:4d:cb:44:5f:
                    86:b1:b3:75:08:de:4c:af:61:8b:d4:e9:7a:99:c3:
                    e9:40:ef:b4:bd:39:e7:ba:dc:7f:56:1f:a5:5a:d4:
                    b3:f9:22:98:05:21:ba:44:49:10:4a:a7:aa:7a:20:
                    08:82:ad:0c:49:d4:60:03:af:e3:24:a2:61:e6:bd:
                    5b:7d:e5:21:74:01:9a:3c:eb:b8:38:0f:2c:7e:28:
                    4a:18:74:d4:cf:79:2c:e6:b1:a3:28:d5:ab:4e:57:
                    16:57:9f:fa:85:11:46:dd:5d:f6:59:44:f0:1a:b6:
                    b9:1f:90:c6:37:83:d2:2a:4f:a0:d9:72:93:00:49:
                    7b:cf:3d:29:71:17:65:16:a7:3f:34:f7:e2:ee:a5:
                    b5:8a:52:73:ba:9d:88:e4:6a:a8:f0:39:03:a1:e8:
                    d3:6e:48:7a:15:fd:af:b7:20:c9:51:22:1a:d0:33:
                    11:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:43:51:62:F2:BB:71:4B:B4:1F:80:AD:3D:A0:E4:C7:3C:51:02:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/e8f1ad56-e4cf-36e8-b739-10baaf09e203.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e88:3c00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:a9:ff:6f:7c:23:1c:65:f6:ab:b0:78:1c:44:54:e7:a0:ff:
         34:d6:a2:f6:e8:25:b9:7f:93:63:c0:63:c7:43:92:5b:d8:75:
         8e:e0:3c:88:3f:86:59:f8:f2:bb:4b:07:8d:e8:9a:6c:05:db:
         ed:11:6b:c8:b9:d1:95:09:75:1d:00:38:91:65:b2:c9:90:36:
         c3:40:bc:72:e2:ba:6c:53:5a:49:c2:ed:ad:ab:82:7e:be:f4:
         42:aa:3e:f8:8b:fa:56:1a:c8:30:5e:47:d0:da:47:36:70:26:
         ae:50:cf:91:91:f9:f3:66:4e:e5:87:a0:5e:e4:6e:57:c9:11:
         71:57:47:3d:9b:eb:95:b3:00:a6:b5:25:15:eb:0e:44:ad:35:
         19:4c:9c:57:08:44:61:88:d1:f1:b8:5c:9e:eb:60:bb:b2:2b:
         77:ec:6b:04:5c:65:19:06:de:73:ab:53:62:32:e1:14:4f:97:
         10:53:10:e5:58:a1:b8:d6:f1:70:82:44:af:b9:c7:c2:b9:0f:
         a1:f4:21:20:14:4b:7b:51:de:89:29:36:9c:27:3b:83:54:52:
         f8:94:b0:e4:c4:de:f8:9a:87:49:72:c4:97:47:46:e7:43:e5:
         e4:37:b8:1d:54:7a:11:e4:56:1a:1c:3f:d9:bc:b5:ce:5e:11:
         91:ca:74:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:18:46 2026 by rpki-client