Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/61cb09a8-69ba-3cfc-ab74-44157770e876.roa
File:                     61cb09a8-69ba-3cfc-ab74-44157770e876.roa (raw, json)
Hash identifier:          q04+H6ArVSvVUwZcXx65c6aNRYuTkrIwRq+HEWYHKYM=
Subject key identifier:   A6:90:FD:7F:BF:8A:2C:78:C9:49:FB:7F:15:83:F5:FE:EF:15:0F:1C
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584F146799281B6EB1B9A74ABBB8
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/61cb09a8-69ba-3cfc-ab74-44157770e876.roa
Signing time:             Sun 06 Sep 2026 01:00:11 +0000
ROA not before:           Sun 06 Sep 2026 01:00:11 +0000
ROA not after:            Sat 05 Dec 2026 02:00:11 +0000
asID:                     30036
IP address blocks:        2604:2e8f:c400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:14:67:99:28:1b:6e:b1:b9:a7:4a:bb:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Sep  6 01:00:11 2026 GMT
            Not After : Dec  5 02:00:11 2026 GMT
        Subject: CN=f86c721f-a254-4de0-a704-720149b569f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:fd:48:a7:12:78:61:69:99:6c:03:f4:fa:6b:
                    cf:51:9b:15:51:2c:ae:ff:81:03:cd:b5:cf:13:e5:
                    23:d1:b2:41:bb:3e:e4:90:e1:84:c1:e0:a2:9e:c4:
                    53:b6:14:68:e9:5c:66:57:58:8f:38:eb:c0:e7:22:
                    96:e1:a3:8c:d3:d4:35:16:d0:36:6c:1d:24:19:c5:
                    e2:81:6c:38:e1:8e:f3:c5:ab:18:b8:7f:49:cb:43:
                    7d:c1:85:29:01:55:68:89:fa:9c:ec:6a:a4:89:21:
                    d0:87:49:4c:b5:29:4b:ad:e0:d5:60:79:67:04:47:
                    61:b1:b9:e0:08:49:96:ed:a9:e2:dd:e1:ba:07:3d:
                    2b:a7:0c:dd:7f:4b:60:a9:d6:ef:08:38:b0:98:aa:
                    bb:c8:3f:f4:96:2f:61:46:b6:92:17:c7:69:d1:0a:
                    93:46:ea:bc:d4:8e:83:1a:d4:b3:93:89:10:7c:52:
                    60:1b:53:25:08:81:50:d8:77:75:59:4b:21:50:f6:
                    40:e5:e7:7b:2d:f7:86:8a:a3:a0:d3:bd:53:99:fc:
                    46:85:1a:2f:76:a5:e1:3e:86:d5:dc:4c:7e:dc:8e:
                    2d:84:f6:0e:47:32:cb:b1:b6:99:63:73:40:cf:0d:
                    7c:78:c8:1c:0b:de:2d:14:40:cd:fe:2d:d5:da:78:
                    1f:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:90:FD:7F:BF:8A:2C:78:C9:49:FB:7F:15:83:F5:FE:EF:15:0F:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/61cb09a8-69ba-3cfc-ab74-44157770e876.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8f:c400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:c7:38:f7:5c:1b:63:3d:ee:35:a4:4f:c9:39:7b:b7:a3:fc:
         41:f5:3f:68:0b:60:fa:ee:02:e2:d7:ff:c4:23:0f:05:03:a7:
         1e:0d:6d:c1:5a:fc:e4:d0:ad:e4:4e:e6:b6:bb:ca:cb:4e:f2:
         8a:86:11:9e:4c:94:c5:af:aa:bb:6e:fc:57:94:ac:e6:59:75:
         43:9c:fe:a5:75:d6:35:6c:0c:94:67:9d:b7:cb:97:2f:ef:95:
         15:d0:ae:cc:c3:ad:4c:f9:ce:46:15:ea:29:d5:20:09:0c:cb:
         c0:cf:c6:de:a6:64:4b:9f:d3:1c:21:65:dd:f4:85:8f:3d:4f:
         4e:d8:34:54:bd:88:21:a3:d0:ea:a1:bc:3e:15:27:e2:df:4e:
         0d:fd:75:6b:7f:b6:03:ba:46:f1:35:6f:7c:c1:01:3d:c8:2e:
         5d:48:fa:d2:14:93:c8:6c:16:55:2d:de:0a:09:aa:d8:12:da:
         67:6f:f7:ac:ce:d0:66:45:c8:6e:7f:21:32:53:16:b0:e5:70:
         21:df:d4:b3:e9:02:e1:cc:ab:5d:57:21:18:d4:57:7a:0a:f2:
         d3:40:e7:93:3d:30:c1:81:2c:4d:93:7e:ac:99:65:1f:f9:af:
         9b:fd:18:0b:ab:70:95:e6:9c:53:7c:59:cc:06:13:e3:14:99:
         79:0d:a6:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 07:56:44 2026 by rpki-client