Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b281f37c-cafe-34bb-957c-92447cc530b3.roa
File:                     b281f37c-cafe-34bb-957c-92447cc530b3.roa (raw, json)
Hash identifier:          sPQmL4KajAUjkLQYFq7NknxZJn0W5m2we67Thu3p6z8=
Subject key identifier:   B8:E0:42:AD:53:73:67:49:7A:5D:23:CC:D3:5A:CC:4F:1C:F2:F4:AC
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584F7352DDE4AD6AFE8ADF36ADE0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b281f37c-cafe-34bb-957c-92447cc530b3.roa
Signing time:             Sat 10 Oct 2026 01:00:13 +0000
ROA not before:           Sat 10 Oct 2026 01:00:13 +0000
ROA not after:            Fri 08 Jan 2027 02:00:13 +0000
asID:                     30036
IP address blocks:        2604:2e86::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:73:52:dd:e4:ad:6a:fe:8a:df:36:ad:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Oct 10 01:00:13 2026 GMT
            Not After : Jan  8 02:00:13 2027 GMT
        Subject: CN=7031eacb-12c3-46bb-8dad-d1e2b8be6509
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:6c:08:85:39:c2:e4:71:ce:14:4f:48:29:98:
                    e3:4e:e8:b4:7d:55:b6:e8:29:1f:e4:1a:2e:47:6e:
                    4e:50:b4:be:de:81:df:0b:c0:05:7f:6c:ba:27:5d:
                    b9:36:91:cb:9d:35:52:32:9d:78:b3:26:5c:20:e4:
                    ff:d3:8f:51:69:55:1b:bd:70:2a:0c:43:ed:68:10:
                    34:6e:83:ba:0c:fd:6e:39:f3:96:0b:20:53:3f:8c:
                    e2:ed:11:e4:e7:5c:bf:e6:05:97:44:ea:bf:ac:b1:
                    52:ba:20:d4:2b:a5:24:e3:97:57:6f:d7:7f:c1:6f:
                    68:c2:df:2e:1f:e2:66:e8:fe:42:ef:5f:05:0b:3e:
                    ad:f6:ab:e6:35:d0:13:0f:a4:53:c2:6e:20:b7:8f:
                    14:e4:07:97:c3:07:7c:f2:95:a8:d0:16:18:96:a1:
                    a8:cb:16:41:8c:07:66:6d:78:38:66:9c:1e:ed:20:
                    a0:a7:e6:21:61:1e:e8:10:6e:98:ea:33:5d:85:fd:
                    9e:11:ee:6e:ab:27:e2:7b:6c:ed:fc:22:28:d4:fb:
                    61:33:21:07:5d:7f:1a:90:e3:a4:55:cc:a5:4b:ff:
                    84:ed:92:dc:8f:9e:0d:b3:52:ff:ca:15:34:d1:43:
                    2d:f4:83:99:41:a6:4f:a4:c8:55:94:bf:01:a6:ba:
                    a9:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:E0:42:AD:53:73:67:49:7A:5D:23:CC:D3:5A:CC:4F:1C:F2:F4:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b281f37c-cafe-34bb-957c-92447cc530b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e86::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:b7:bf:83:19:87:c8:00:10:2d:91:39:ae:86:41:13:2c:a6:
         ae:83:f0:e2:6f:9a:be:2f:8a:b9:c5:ba:e3:30:f1:08:4c:72:
         c6:b3:99:f0:e9:24:d7:dc:61:5c:93:e7:4a:db:4b:19:b8:bb:
         6d:2c:ad:99:bb:0b:e4:7d:6a:9d:cd:1a:4c:3f:dd:56:e9:83:
         bc:ba:d4:6a:2a:18:02:51:4d:2d:d6:d7:77:ab:8d:ac:7e:d7:
         d8:7f:52:4c:c4:de:5c:f8:39:90:e5:47:30:a2:66:2a:bb:13:
         b9:75:c2:9c:b7:b4:0d:76:09:97:f9:41:8e:ba:6f:a4:17:7e:
         aa:26:03:32:21:25:d5:b4:ea:67:18:96:bd:10:27:04:86:24:
         df:02:87:19:bf:b9:93:c8:ac:09:f4:79:0f:76:6c:ac:d8:25:
         17:d6:7d:d6:0f:66:3c:9c:1e:0d:5f:76:06:af:c0:8b:68:df:
         10:b3:df:31:53:12:c3:82:98:41:f2:70:ca:df:ec:32:3f:76:
         87:c6:06:4e:6f:a9:61:d9:08:a8:f0:22:99:46:2d:e8:45:ca:
         7c:f5:f6:f2:8b:04:ca:94:cc:6f:3a:e1:e6:79:80:69:b2:3e:
         80:d3:1c:87:32:26:72:13:38:76:ff:f1:4a:f7:34:b0:9e:3f:
         27:48:1a:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 15:51:41 2026 by rpki-client