Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5ed8e253-7abc-30ee-9280-fc516d2185f9.roa
File:                     5ed8e253-7abc-30ee-9280-fc516d2185f9.roa (raw, json)
Hash identifier:          877e5hPlNZxjiMsFNcIlSmQc4TWdyaaOIR+5UP5OGo8=
Subject key identifier:   9F:81:19:0B:B9:11:28:21:54:B6:F8:7A:0B:6F:73:E4:CF:7E:CF:47
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584F10378866F35E1385EDC2F840
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5ed8e253-7abc-30ee-9280-fc516d2185f9.roa
Signing time:             Fri 04 Sep 2026 13:00:12 +0000
ROA not before:           Fri 04 Sep 2026 13:00:12 +0000
ROA not after:            Thu 03 Dec 2026 14:00:12 +0000
asID:                     30036
IP address blocks:        2604:2e87:b800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:10:37:88:66:f3:5e:13:85:ed:c2:f8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Sep  4 13:00:12 2026 GMT
            Not After : Dec  3 14:00:12 2026 GMT
        Subject: CN=23fa3fd1-12a6-4741-8d6d-5c18e23a8c8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:7f:4b:ac:46:4d:e5:fa:c6:77:99:9b:bb:db:
                    e8:40:ba:bb:0e:0d:3c:0a:82:77:40:1f:5a:09:b3:
                    44:2d:54:74:2c:4f:34:5e:4b:d4:b0:ef:e3:06:d0:
                    6c:41:32:13:86:6d:84:cd:f3:48:a8:7b:db:c7:bd:
                    0a:0f:48:9c:f0:39:46:ff:3e:86:46:58:68:1b:4a:
                    70:c8:bc:e5:d5:39:11:3b:48:07:0a:93:77:21:f0:
                    ae:d4:f0:0d:a0:95:b4:c8:53:f6:13:ce:87:3e:df:
                    92:bd:dd:7e:8b:c6:e0:3c:0a:33:4a:56:30:01:fe:
                    36:ec:c2:a2:f5:97:04:8c:53:fa:9a:35:7c:cb:00:
                    cf:1c:57:59:cc:64:e3:67:d6:5c:34:78:b5:27:4a:
                    dd:90:74:da:0e:83:1b:49:65:8e:e4:70:36:34:9c:
                    3a:1c:f3:e0:99:34:29:32:0b:b2:99:38:24:8d:59:
                    92:9d:c7:25:0b:a9:1b:a3:08:21:6b:97:87:00:a5:
                    95:7d:ea:f1:64:b1:c4:4a:58:71:31:43:d3:0a:ab:
                    43:bb:ef:cb:a1:04:13:11:6e:2b:cb:0b:a4:d3:3c:
                    06:57:fa:67:b7:67:ef:08:98:1d:87:f3:c3:aa:a7:
                    f2:86:27:24:69:a8:f4:ec:e6:1a:53:54:8f:0b:5a:
                    73:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:81:19:0B:B9:11:28:21:54:B6:F8:7A:0B:6F:73:E4:CF:7E:CF:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5ed8e253-7abc-30ee-9280-fc516d2185f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e87:b800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:00:da:ec:11:fc:64:ae:4c:13:b1:8f:2a:73:cf:99:63:b3:
         6e:f1:af:0b:53:49:46:c1:90:cb:0a:08:e0:7e:2e:f0:9e:60:
         8c:49:1b:db:19:ef:97:6c:0e:6e:72:ce:ad:bc:3b:9c:85:1d:
         37:11:d2:0f:3d:3f:2e:6e:6a:84:d0:df:3c:b3:1d:49:22:6b:
         4c:37:6d:46:f4:4f:77:05:2b:4e:97:2b:a7:a1:65:ff:fd:94:
         5f:62:47:16:5c:5e:57:ac:6a:82:7f:f8:95:c8:82:ec:39:e7:
         55:04:33:f5:00:99:19:fb:44:18:25:c9:a7:16:47:75:2e:bb:
         8d:58:b9:72:af:48:72:8e:b7:a3:f2:4f:32:c2:56:9a:c0:4a:
         82:70:da:4f:dc:62:d0:55:68:53:fe:a7:1a:72:59:7d:d2:fb:
         42:4b:79:16:52:06:65:5f:1f:d1:24:68:f3:a8:f4:20:a1:56:
         19:2c:55:35:88:c9:7c:b2:1d:65:db:b2:b9:7e:b1:25:e2:93:
         ba:5b:1d:5a:8b:39:ef:71:78:ae:5c:c7:6a:2e:7d:c9:ff:a4:
         0b:6e:c5:47:70:83:cf:29:ec:82:cd:b9:7e:bd:2f:a7:13:88:
         53:de:91:9e:67:3e:1b:84:fd:5a:dc:2a:ad:a0:35:52:35:8c:
         61:2b:82:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 03:38:51 2026 by rpki-client