Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ef1f5c44-88f4-3696-b4c4-281f4f6e7e79.roa
File:                     ef1f5c44-88f4-3696-b4c4-281f4f6e7e79.roa (raw, json)
Hash identifier:          cxPzV5237S+cSxeg8YpjCMhnLHSsnwL1TFq9NtNXxko=
Subject key identifier:   62:A6:EF:8F:35:F6:36:F6:05:55:A7:B0:67:A8:99:2B:B5:CE:84:64
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584D5E1A5D143207877BB71BFF00
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ef1f5c44-88f4-3696-b4c4-281f4f6e7e79.roa
Signing time:             Thu 02 Apr 2026 01:00:23 +0000
ROA not before:           Thu 02 Apr 2026 01:00:23 +0000
ROA not after:            Wed 01 Jul 2026 01:00:23 +0000
asID:                     30036
IP address blocks:        2604:2e87:2c00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5e:1a:5d:14:32:07:87:7b:b7:1b:ff:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Apr  2 01:00:23 2026 GMT
            Not After : Jul  1 01:00:23 2026 GMT
        Subject: CN=ee966f40-4bd2-4c51-9f46-f1c2e1517bf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:ee:03:7f:18:ea:bb:38:c0:02:34:a8:93:1f:
                    79:17:aa:65:a8:b0:ad:c8:da:c6:2b:cf:73:bf:b3:
                    2b:e6:1c:42:e7:60:f4:4b:bc:26:61:cc:22:e3:e8:
                    a5:e3:8a:31:ef:8e:64:3e:cd:05:ea:b0:50:28:d8:
                    00:0b:e2:22:a1:07:d2:f9:ad:dd:99:70:ae:f4:31:
                    a6:a0:11:26:4a:18:7a:62:3c:47:0f:49:9d:3b:c8:
                    a9:3f:64:00:ad:b2:8f:7d:9b:5e:46:55:17:b8:7f:
                    c5:77:d3:8a:c1:ec:ac:1c:50:b9:5c:17:6d:4a:a8:
                    bb:21:66:07:62:1f:91:63:58:99:1f:0c:bd:d0:4d:
                    5a:1c:0e:c9:bb:6e:3e:fa:d5:8f:38:96:00:60:1e:
                    36:80:58:ef:28:67:d1:80:61:f8:e4:e7:49:67:3b:
                    01:5f:7c:79:3b:9f:d3:6f:a9:ed:fd:4f:ad:60:28:
                    59:6a:a0:2b:b5:5c:1b:1b:2a:34:30:58:52:7a:d5:
                    41:3e:27:d5:3e:5d:40:1d:6b:85:d3:82:5d:4d:f1:
                    43:50:54:86:51:bb:2b:98:40:bb:02:f6:73:30:37:
                    19:1d:f3:39:b7:50:a9:df:3f:8e:f0:90:67:55:64:
                    4a:27:fb:76:79:41:b2:8f:fc:5f:dc:f8:a6:2b:64:
                    4a:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:A6:EF:8F:35:F6:36:F6:05:55:A7:B0:67:A8:99:2B:B5:CE:84:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ef1f5c44-88f4-3696-b4c4-281f4f6e7e79.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e87:2c00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:dd:a9:3d:62:f1:01:6b:ca:6b:3f:15:d0:8a:f6:9a:e3:26:
         de:e0:20:a6:9e:30:ae:df:d7:df:98:20:de:ab:32:7d:37:52:
         8f:43:f3:d0:e5:09:c9:e7:84:c2:1c:30:5f:39:07:96:04:d9:
         3c:78:e5:d1:1c:86:79:5a:15:02:96:66:a1:6e:41:60:98:30:
         a7:51:ce:25:8f:3b:6b:c2:10:96:76:24:8b:12:d9:0f:8b:54:
         df:b1:00:da:b1:fe:92:a1:c7:93:0d:46:73:3c:93:99:7f:27:
         24:df:b2:52:e3:21:29:4c:cf:63:86:34:5d:2a:83:69:98:7e:
         38:1e:6a:b6:c2:4e:a5:0d:39:f1:fd:88:97:ae:a9:5c:3f:b4:
         90:ba:1b:fc:7b:c3:26:94:b8:09:e2:1f:05:4a:ab:6b:4d:bd:
         67:68:21:ce:59:a3:34:72:ec:7a:bf:c3:a9:d6:65:91:bb:ab:
         95:8e:13:29:a8:ae:29:31:5f:54:df:2f:28:95:0c:10:32:ac:
         e9:bc:61:98:9e:e4:58:82:a3:5a:4e:ef:65:04:9a:7a:b5:bf:
         01:86:3d:d9:27:07:76:e3:92:37:2c:29:a9:82:82:d1:95:5c:
         7f:06:85:d1:be:b6:4b:75:5d:f9:b4:f7:5b:ac:b4:ab:77:3b:
         98:f8:33:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:37:05 2026 by rpki-client