Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/609a7fa3-affc-3a0d-bb17-c6722250efd0.roa
File:                     609a7fa3-affc-3a0d-bb17-c6722250efd0.roa (raw, json)
Hash identifier:          ekHTCJY4gP5CTSaOPow+CXLMzGv4q9sEB05VnAZUJpI=
Subject key identifier:   0B:EA:22:A7:B2:88:24:CB:CD:46:3C:78:7D:28:28:B8:88:F9:20:E5
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584EF87CE2889A076C60B06AA338
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/609a7fa3-affc-3a0d-bb17-c6722250efd0.roa
Signing time:             Thu 27 Aug 2026 01:00:12 +0000
ROA not before:           Thu 27 Aug 2026 01:00:12 +0000
ROA not after:            Wed 25 Nov 2026 02:00:12 +0000
asID:                     30036
IP address blocks:        2604:2e8c:8800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f8:7c:e2:88:9a:07:6c:60:b0:6a:a3:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Aug 27 01:00:12 2026 GMT
            Not After : Nov 25 02:00:12 2026 GMT
        Subject: CN=b5eaf82e-08e5-4b3d-a477-936bfc958a98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:c7:ad:9d:fe:83:95:c3:97:8e:ea:22:ac:81:
                    df:3c:6d:44:65:99:4d:1d:75:9d:7c:f1:7a:6e:93:
                    e9:78:ae:a1:b3:03:1b:38:54:16:dc:72:e3:cc:04:
                    6e:56:7b:51:80:f4:11:6d:89:a1:6d:ca:98:5d:15:
                    db:30:90:57:bf:3c:81:9e:7b:ee:10:e5:e0:17:30:
                    50:f0:4f:2b:a8:af:8e:8a:d9:9e:d5:db:bd:ff:ea:
                    15:2c:2f:0a:b7:19:b9:1a:11:a0:bf:87:5c:2e:5e:
                    b4:69:f6:dd:03:59:4d:ec:24:71:c1:f0:ec:70:cd:
                    5b:4e:98:47:b1:bc:a5:39:29:ff:5d:32:90:b8:9f:
                    40:b5:ff:c4:d7:33:57:97:d1:34:86:30:36:65:d2:
                    77:53:96:76:fe:14:09:1a:96:81:8b:dd:3f:11:7d:
                    81:2f:34:a8:65:a7:1a:60:57:bc:4e:7a:11:6f:ce:
                    c0:da:57:4e:31:c2:54:33:fe:c6:68:5d:89:ba:df:
                    1d:09:f9:48:99:f6:4c:29:cd:9d:dd:04:b0:eb:76:
                    52:64:4d:f6:e2:5d:7e:4d:07:13:ea:fd:ae:89:41:
                    b6:4a:88:67:ef:cf:9f:36:9a:43:51:54:37:07:a8:
                    a4:95:c1:4c:a3:72:01:fe:2d:50:7b:5a:8c:be:e6:
                    96:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:EA:22:A7:B2:88:24:CB:CD:46:3C:78:7D:28:28:B8:88:F9:20:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/609a7fa3-affc-3a0d-bb17-c6722250efd0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8c:8800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:9c:4d:42:e0:6c:db:8e:0a:23:1c:17:e8:f7:e2:c4:e4:8f:
         02:0b:34:65:6d:b8:b6:ec:ef:ff:e2:5f:81:b0:ea:23:e5:d4:
         ce:21:d4:42:d5:47:24:26:ba:54:0f:e9:e2:ac:8b:93:55:32:
         c6:f0:a9:b3:55:b3:cf:44:6e:9a:bf:a7:76:06:18:36:2c:e7:
         31:15:b2:d0:2f:89:fe:58:c1:cc:e5:cf:aa:15:dc:f9:0d:d1:
         80:ae:8c:f8:b5:b1:b0:eb:9e:ec:ac:68:2f:5e:9d:c7:6a:c1:
         b7:63:72:b0:29:0b:51:91:1a:58:26:34:2d:40:6c:fa:86:5a:
         59:86:61:90:57:12:a8:b9:9f:14:d5:cf:1e:32:e9:38:e1:67:
         5a:9d:52:93:a1:20:ae:1e:a6:b3:22:e0:8e:75:86:70:2b:bb:
         03:24:06:1e:b0:5e:35:22:2b:2f:ae:c5:a1:81:ef:1c:13:f8:
         d7:ee:59:a4:5b:d7:70:7d:fa:e5:d2:14:7f:a2:8e:20:55:9d:
         ac:a5:0f:35:37:46:42:18:fa:a8:d4:a5:e0:1f:5e:04:8a:b3:
         b1:c2:15:a5:a8:71:58:39:de:22:05:03:c9:aa:75:fa:3b:28:
         1f:e2:b8:21:ac:8e:cb:a6:be:95:db:8d:fc:64:a7:bf:0e:c2:
         01:06:ed:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 21:14:50 2026 by rpki-client