Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/add0c7e7-5b7e-39e4-8438-78159023ff85.roa
File:                     add0c7e7-5b7e-39e4-8438-78159023ff85.roa (raw, json)
Hash identifier:          Ug4dudFckmFIeXIWv4/auOXpf+HbpPX9FK8z9kTIoG4=
Subject key identifier:   F9:61:C0:BF:D0:DB:E3:EF:5F:DC:00:A2:8D:4D:A6:12:59:82:6C:0F
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584F498BB94853511DC50226CAB0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/add0c7e7-5b7e-39e4-8438-78159023ff85.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     30036
IP address blocks:        2604:2e8b:a400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8b:b9:48:53:51:1d:c5:02:26:ca:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=ce0c5b74-8efd-4f7b-9635-53e62a567b05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:ff:84:26:dc:94:9c:6f:fe:f0:31:8f:b1:02:
                    0b:bd:51:1d:96:64:13:a6:95:df:af:45:ff:16:8f:
                    c8:c3:dd:98:5d:b1:db:15:98:46:34:55:7d:ae:98:
                    62:16:cf:7c:63:e6:69:56:94:e6:97:e3:5c:c3:ac:
                    e6:91:36:8e:3d:d3:88:e7:4d:72:5b:05:d9:8c:30:
                    96:f4:a6:2d:44:be:49:84:b2:95:19:2a:21:19:44:
                    fc:14:00:54:dd:ad:b2:50:13:b8:a8:a6:ed:b5:0e:
                    2d:06:08:a8:74:2b:ea:db:02:43:c5:2f:cb:05:7d:
                    c4:42:ff:6b:3f:f7:c5:86:87:83:31:d3:83:d7:59:
                    9a:03:ba:d4:9f:a6:2c:9b:c9:5e:90:e9:61:4c:4f:
                    f8:4d:20:bf:ca:0d:1f:65:13:9d:9e:40:88:8c:09:
                    bc:0e:44:21:0d:5f:e4:6c:c1:6c:0c:ce:a7:d2:14:
                    89:56:dd:13:90:42:4b:ab:f2:94:dc:ab:0d:92:ca:
                    1a:5a:8b:3d:ea:95:6a:40:2b:67:e5:88:b6:59:c9:
                    39:8f:a3:82:98:fd:4d:c8:f5:6f:a3:5e:90:8b:41:
                    9e:7d:0d:d3:7f:87:7d:97:88:29:e6:a5:2b:79:42:
                    d1:83:6f:3e:d3:c7:a3:c7:73:25:f9:fa:3b:73:e9:
                    ef:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:61:C0:BF:D0:DB:E3:EF:5F:DC:00:A2:8D:4D:A6:12:59:82:6C:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/add0c7e7-5b7e-39e4-8438-78159023ff85.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8b:a400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:32:da:14:77:87:04:71:1b:15:0a:75:29:75:49:c1:ac:b8:
         de:a3:64:08:14:40:ba:8f:2d:b0:aa:20:94:59:c2:12:3c:bb:
         6c:7c:7a:6e:6f:48:ad:a6:84:34:1f:b3:fb:a4:53:6b:40:41:
         cb:b9:e9:90:2d:4c:43:0c:5f:e8:39:73:43:ee:bd:ee:22:db:
         27:7a:21:19:fc:75:13:de:57:cc:c9:0a:5e:d5:1f:13:a5:15:
         b0:16:67:3b:73:3b:53:25:91:e8:8f:06:52:d4:8d:2f:70:b5:
         89:e2:f0:3c:f7:02:9c:47:e5:7b:b2:b6:41:09:5d:d5:bc:b7:
         df:fb:b9:92:6a:5a:a9:0c:03:5a:ef:71:11:3c:ba:28:0d:ff:
         5f:e2:1c:7d:b3:59:bb:e8:53:48:f1:60:a5:81:23:ca:31:d6:
         2c:53:b9:d4:40:de:ae:7a:86:6f:de:a9:a7:b3:d8:50:fd:2f:
         db:2b:6f:79:93:b2:d4:b9:8b:db:92:40:1d:8f:1d:e8:85:4e:
         1e:c1:c8:e1:e9:46:a7:a6:8d:62:ab:d3:59:22:cb:6b:a1:d0:
         27:93:a0:0f:56:08:76:07:3e:fd:79:fb:a9:db:63:30:a0:a1:
         92:fb:46:b6:41:5e:6c:38:ee:b6:b0:89:7c:54:5e:8a:07:e4:
         a6:76:93:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 14:24:57 2026 by rpki-client