Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a3f3e58b-8c43-3a69-82dd-fa2e49703642.roa
File:                     a3f3e58b-8c43-3a69-82dd-fa2e49703642.roa (raw, json)
Hash identifier:          QimhExjiR8OJ75MOsYy1fvZwVt+WF/y72asZIz3XcRY=
Subject key identifier:   92:CF:77:F6:80:07:C7:61:84:CD:A8:4D:DB:84:A3:B4:2D:B6:A0:BF
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584E7D2F7C795669A2DFDAF3BF80
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a3f3e58b-8c43-3a69-82dd-fa2e49703642.roa
Signing time:             Mon 13 Jul 2026 21:00:12 +0000
ROA not before:           Mon 13 Jul 2026 21:00:12 +0000
ROA not after:            Sun 11 Oct 2026 21:00:12 +0000
asID:                     30036
IP address blocks:        2604:2e8f:d000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7d:2f:7c:79:56:69:a2:df:da:f3:bf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jul 13 21:00:12 2026 GMT
            Not After : Oct 11 21:00:12 2026 GMT
        Subject: CN=8bf85418-e092-4ca1-aa1f-89c514be4bc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:7f:51:bd:59:51:15:63:05:8b:38:3c:f6:79:
                    00:bd:b4:61:b9:b9:2a:ba:76:b0:03:47:38:88:be:
                    df:90:7f:af:01:52:57:a9:d0:0f:8c:55:cd:f1:ce:
                    77:fe:c5:77:f2:10:df:48:84:d5:b3:3a:06:9f:36:
                    b6:ad:95:37:23:01:0a:e6:62:7c:92:be:69:be:c3:
                    87:6e:1d:9e:13:6c:57:ed:16:f2:91:dd:30:3e:ea:
                    e1:f7:df:ef:6c:4e:d5:f5:29:3d:76:06:00:9f:ae:
                    e3:43:10:f1:3c:e1:fb:fd:0a:43:0e:58:32:c7:6a:
                    02:ce:ec:fc:99:8c:d5:1c:8e:95:4f:20:29:b2:ae:
                    fd:a5:a4:08:41:9a:03:98:30:27:fb:74:8d:b8:1e:
                    45:38:07:a9:24:ed:c4:10:83:5c:1b:81:fb:0b:5c:
                    43:2f:4a:d0:79:b6:ba:62:80:2d:ae:9b:52:56:c7:
                    1d:99:e0:00:94:65:7f:68:8d:b1:c0:a2:a4:33:1a:
                    71:59:90:22:3a:cc:98:89:84:75:c8:cd:29:1f:d5:
                    b3:bb:75:eb:2a:d1:1d:76:35:ab:dc:38:d6:a5:c1:
                    87:b5:db:2e:03:ae:9c:84:b6:1a:9b:b2:67:4e:29:
                    da:6e:c6:37:e9:c9:07:a6:34:54:6d:4c:6d:35:5c:
                    dc:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:CF:77:F6:80:07:C7:61:84:CD:A8:4D:DB:84:A3:B4:2D:B6:A0:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a3f3e58b-8c43-3a69-82dd-fa2e49703642.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8f:d000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:e2:60:30:64:5d:58:77:09:ce:51:16:56:94:98:a5:6d:4e:
         32:bb:8e:83:2a:f1:16:b0:11:eb:fb:72:a7:4b:1a:3b:9d:10:
         c3:8e:59:44:cc:88:ee:f3:01:8a:12:35:7d:cb:7c:e4:93:42:
         41:8b:d1:3d:e5:dd:27:d7:2d:8c:ff:9b:4c:a5:18:da:8d:da:
         9c:e5:fa:b2:4c:b5:a4:1f:09:18:1e:30:5d:46:3e:ce:69:06:
         a9:8f:1d:f2:9e:10:06:88:2b:e4:62:0c:85:25:6e:07:a5:57:
         5f:2e:7e:5c:04:14:e3:8c:d9:d0:3e:bb:c0:dd:d9:49:b6:52:
         5a:33:5a:02:1a:ba:bd:07:19:ee:e1:fc:ba:9e:bc:a1:2e:17:
         d7:7e:4f:ab:d8:d4:52:4f:f9:c4:70:b9:22:e3:a7:25:21:73:
         6a:79:bd:bc:48:b1:75:ac:ad:ba:67:7b:ec:d4:8d:54:c9:54:
         d4:50:c3:11:4e:33:af:6d:9a:c3:6c:94:15:be:21:09:2e:8c:
         1a:e3:a2:89:07:d3:68:1e:e9:fe:18:dc:8f:e6:38:e2:8b:a8:
         fa:e7:88:77:c0:04:54:c2:c8:86:94:87:d1:82:48:f6:25:66:
         f9:07:47:4b:fb:d1:6a:19:85:75:3c:07:d4:dd:07:3c:a8:31:
         24:51:13:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:27:02 2026 by rpki-client