Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8d2f1ef3-a933-3879-9ba7-016a45a24a92.roa
File:                     8d2f1ef3-a933-3879-9ba7-016a45a24a92.roa (raw, json)
Hash identifier:          dAW7lVMTEQRf4cd3ygzqxmGvfWmZINGLQPsGqDxrohI=
Subject key identifier:   F4:7A:63:AA:D5:32:07:68:6B:E0:B8:EB:B2:F5:24:D3:D7:B6:20:10
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584E577F55BC84912A7EA82E7800
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8d2f1ef3-a933-3879-9ba7-016a45a24a92.roa
Signing time:             Tue 30 Jun 2026 09:00:12 +0000
ROA not before:           Tue 30 Jun 2026 09:00:12 +0000
ROA not after:            Mon 28 Sep 2026 09:00:12 +0000
asID:                     30036
IP address blocks:        2604:2e88:3400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:57:7f:55:bc:84:91:2a:7e:a8:2e:78:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jun 30 09:00:12 2026 GMT
            Not After : Sep 28 09:00:12 2026 GMT
        Subject: CN=44ecd77c-4d49-4550-91d9-d9c514297739
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:47:47:87:25:1b:9c:3d:d6:03:61:d7:63:61:
                    1f:f2:19:50:e8:cf:c2:a5:e0:3f:b7:6a:1d:78:7b:
                    5c:7f:87:5c:21:03:64:f2:3f:c5:d2:43:7d:94:20:
                    1c:4c:01:e8:25:f0:35:77:bd:d9:b3:71:d4:7f:07:
                    16:91:78:b8:1c:05:1a:da:7a:e3:15:fb:c4:e9:ca:
                    30:3b:ae:86:ef:51:d7:70:84:f4:e5:a7:39:9a:a0:
                    15:1a:95:18:fd:38:48:a1:e5:1a:1a:c7:26:86:0c:
                    17:02:0d:c2:bb:b3:2a:39:2c:c1:c5:f5:36:48:ba:
                    d6:07:53:f9:ca:3f:97:33:38:23:f8:50:2d:d6:da:
                    58:e5:de:19:97:06:97:cd:8a:9e:ab:83:5e:27:81:
                    cf:65:76:eb:6f:cf:c7:fb:09:50:ca:47:24:ed:90:
                    66:42:4d:82:d4:dc:2a:d5:6f:a0:63:91:fd:3b:f7:
                    45:64:5d:7d:af:ce:dc:19:43:2c:4b:22:4a:38:28:
                    fb:bc:a8:e7:04:3d:1f:22:5d:79:9e:86:a8:38:ad:
                    c3:9f:83:11:06:f4:d1:c2:36:2b:7f:0b:37:9e:08:
                    aa:8b:0c:34:ca:da:3e:d4:15:ff:b7:60:ed:03:08:
                    3c:06:67:c6:36:c1:54:9e:6f:9c:0f:8b:b6:7f:0c:
                    09:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:7A:63:AA:D5:32:07:68:6B:E0:B8:EB:B2:F5:24:D3:D7:B6:20:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8d2f1ef3-a933-3879-9ba7-016a45a24a92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e88:3400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:9d:bf:91:20:e9:3b:92:f0:11:a8:f3:fd:72:05:3a:e0:a0:
         c6:fb:13:9b:9f:5f:e0:61:58:62:3e:96:a9:47:2b:80:a5:f4:
         fd:81:83:9b:c5:d9:35:4f:bf:54:c0:d6:e9:c5:b5:0f:b9:4d:
         24:05:02:47:bb:3d:16:c4:43:a8:53:c6:a4:8c:44:17:e6:0f:
         dd:fc:91:55:40:de:a1:52:25:83:06:ed:4e:88:5b:29:21:7a:
         25:a7:d0:f9:af:d7:d1:05:91:42:2b:ea:14:47:de:d0:e8:d6:
         59:03:73:8e:5c:88:67:45:ad:50:c0:a0:65:17:66:04:6c:76:
         88:71:e4:a3:be:f6:01:78:47:aa:f1:73:61:9c:d6:e9:58:16:
         55:3a:b8:36:77:cd:82:da:42:83:28:ab:48:89:c0:45:42:c3:
         8e:21:54:ca:94:66:ef:a5:71:0e:a9:d9:70:b5:8d:a0:16:b5:
         fa:f4:b8:32:d4:31:ff:82:b7:f7:9e:71:07:e7:65:3e:0d:a1:
         10:fd:e8:bd:64:dd:d6:c5:61:e7:80:84:a0:ec:d3:28:59:c9:
         4f:10:58:3f:0d:31:52:6c:9c:b6:ba:69:04:0f:68:49:bc:23:
         11:46:af:d3:db:be:4a:c3:5b:ab:79:66:1f:cc:41:4f:3f:84:
         bf:dd:c9:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:20:58 2026 by rpki-client