Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4a5c3aae-7e4d-3b68-abbe-e12fd2c2f719.roa
File:                     4a5c3aae-7e4d-3b68-abbe-e12fd2c2f719.roa (raw, json)
Hash identifier:          xLim7pWqWFYYl38WwLuW2sTpunnes5jbAA4TE6ifqs4=
Subject key identifier:   57:DE:FC:EA:07:AD:64:3D:31:92:56:CE:8A:81:53:D8:2B:9C:BF:10
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584F49729B6004063A0A1130F700
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4a5c3aae-7e4d-3b68-abbe-e12fd2c2f719.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     30036
IP address blocks:        2604:2e8a:1c00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:72:9b:60:04:06:3a:0a:11:30:f7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=f8db9f6d-3125-4bd1-9ce8-a901e60b17c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:ef:ef:1a:66:63:fe:48:94:ff:7a:72:ab:5a:
                    19:5a:dc:4d:dc:25:b4:9e:ad:ff:64:87:b2:6b:82:
                    40:99:3b:d0:8a:8d:a4:ef:8a:e8:dc:af:08:62:fd:
                    d6:40:9f:7a:aa:31:7c:d2:4e:8f:44:74:4f:05:f0:
                    8f:3b:0a:4c:79:c5:dd:5d:68:33:55:ef:90:c7:3b:
                    05:c1:35:43:f7:5d:5b:08:fe:e9:69:a1:3a:2f:0e:
                    c7:5e:db:6f:6f:5d:ce:a9:58:58:79:26:d7:64:a0:
                    f9:5f:e9:93:99:e0:c0:08:8c:a5:e2:75:89:05:12:
                    c0:3b:e4:6f:46:bd:7d:9c:e6:a8:f5:2f:e1:d4:1e:
                    0f:f2:b0:3f:8e:79:59:46:a0:5c:8b:98:ac:b9:61:
                    d1:b5:24:a2:b7:44:0a:a2:d9:d7:21:5a:52:29:20:
                    10:41:2a:23:10:0d:ef:a9:24:59:45:cc:08:36:4e:
                    d1:10:3b:5d:6d:75:98:27:d0:72:20:40:eb:b2:a0:
                    29:c6:64:31:00:0c:3c:c6:94:8e:65:0c:72:62:3f:
                    1f:b6:6f:d3:c2:da:5f:1f:46:c9:40:00:a0:4e:d3:
                    28:c8:1a:d8:f1:da:80:b3:09:bf:29:0a:e6:db:7c:
                    e3:8d:5d:ca:5e:f1:8e:d4:b1:88:61:d9:0c:24:2a:
                    76:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:DE:FC:EA:07:AD:64:3D:31:92:56:CE:8A:81:53:D8:2B:9C:BF:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4a5c3aae-7e4d-3b68-abbe-e12fd2c2f719.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8a:1c00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:77:b1:e1:90:40:3a:24:4e:11:f2:88:7e:38:93:91:23:db:
         6a:07:76:b7:0e:87:12:7f:1d:7d:3e:8e:3d:a5:da:f1:ef:0a:
         4b:9b:a7:14:c3:be:27:09:4f:4b:95:50:c6:c1:32:77:aa:7a:
         8a:69:d5:7f:e7:10:f4:bb:03:06:1a:8d:6a:7e:d8:45:e1:0e:
         35:0d:d8:e3:50:5e:51:3e:68:97:87:42:5e:52:7e:a4:e4:8d:
         77:35:80:6b:ab:3e:d1:df:8d:24:88:20:29:b7:10:28:c6:25:
         d6:58:28:a1:41:d9:10:13:1f:03:2b:d7:f1:0a:04:d6:2b:a7:
         93:43:08:2c:f7:5e:c2:ae:94:d3:cf:0f:54:03:8d:aa:08:3f:
         84:72:0d:9d:6b:09:72:a9:5e:24:66:9c:3c:ca:0d:ca:93:9c:
         eb:0c:bd:e5:19:77:f3:e3:ab:d3:24:f3:43:8d:5f:1f:1a:b3:
         34:6f:ba:a1:f3:ee:a5:aa:f4:fb:cc:af:e5:81:6e:c9:07:f6:
         f1:57:ab:ba:cb:30:c3:d1:4b:c7:cd:5c:c2:20:fc:05:3b:e4:
         2e:3a:f1:f9:71:16:9b:86:35:ab:e5:ac:34:b2:1e:31:6b:11:
         51:f4:09:e0:f3:43:19:2c:ae:27:f7:e3:d6:07:19:70:32:2e:
         0e:db:93:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 02:20:30 2026 by rpki-client