Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a47a876e-603f-3cc1-b454-b69a02691345.roa
File:                     a47a876e-603f-3cc1-b454-b69a02691345.roa (raw, json)
Hash identifier:          heBJY9I4Trj1TjvIeQoQkfPzo3Y66Ns8G9jNK2icvjQ=
Subject key identifier:   BE:26:CC:7D:66:25:6A:6B:C4:AE:C8:CD:A9:8D:3E:05:B4:81:6A:E2
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584E59506649D335237BE127E700
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a47a876e-603f-3cc1-b454-b69a02691345.roa
Signing time:             Wed 01 Jul 2026 00:37:27 +0000
ROA not before:           Wed 01 Jul 2026 00:37:27 +0000
ROA not after:            Tue 29 Sep 2026 00:37:27 +0000
asID:                     30036
IP address blocks:        2604:2e86:2000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:59:50:66:49:d3:35:23:7b:e1:27:e7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jul  1 00:37:27 2026 GMT
            Not After : Sep 29 00:37:27 2026 GMT
        Subject: CN=0af47119-141a-42e3-8743-7fbc0c67119c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:52:65:e0:6c:56:75:47:2a:1c:2d:ad:78:3a:
                    84:8a:74:7c:f9:46:ee:40:b1:10:86:59:7b:78:30:
                    54:4a:ed:60:74:5a:ef:1a:93:0f:30:21:ca:62:60:
                    8d:c1:e8:54:b4:e6:13:36:bb:d9:bb:29:cf:29:5f:
                    82:8e:76:a0:67:27:80:e9:ec:14:04:84:ba:dd:b8:
                    0d:1c:6c:d1:90:77:ac:a2:ef:f2:ad:b4:5a:66:69:
                    ac:7a:ea:7e:b9:4c:0e:82:7e:02:6f:02:7d:14:36:
                    31:1b:dc:aa:c0:b5:97:08:1b:14:6c:4f:35:5b:15:
                    57:3d:c1:40:15:36:aa:a9:3a:58:5f:84:61:a3:06:
                    e3:83:ea:48:4a:8f:af:ee:f0:42:e4:21:95:d4:ac:
                    95:a1:15:f8:d4:70:57:a7:97:0c:fe:1d:c0:65:b4:
                    41:e8:b2:c9:7c:d5:0a:20:d7:12:ab:4d:e1:f5:f0:
                    fd:bf:02:1a:7f:cc:c9:fe:5a:2c:70:71:c1:aa:30:
                    ee:fe:9e:de:71:e9:40:24:d9:35:0d:7d:9f:be:d2:
                    5c:4d:8f:23:ce:0c:20:66:12:0e:92:d9:f5:d9:d3:
                    29:eb:7d:9b:57:0f:8f:95:93:ea:39:4e:16:c9:e0:
                    27:12:06:b3:60:e4:9c:60:f2:4e:7a:c5:6e:1b:c2:
                    f5:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:26:CC:7D:66:25:6A:6B:C4:AE:C8:CD:A9:8D:3E:05:B4:81:6A:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a47a876e-603f-3cc1-b454-b69a02691345.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e86:2000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:93:d6:af:19:68:dd:5a:76:3e:03:b3:ab:64:a1:fc:ce:b9:
         27:30:c6:71:5c:69:64:81:c8:59:5c:fe:98:ed:2c:6f:df:00:
         f4:6f:bb:a5:59:8d:fb:83:3a:5b:fd:04:13:44:c8:c1:96:09:
         1a:37:dd:39:48:88:e6:ce:bc:6b:30:15:32:b9:79:01:2b:5f:
         aa:78:ba:25:80:89:a6:02:8e:a0:d3:22:ff:e6:03:87:78:b3:
         8e:4f:4f:59:16:4b:a4:55:2a:5c:04:fa:1c:5e:65:39:6e:ef:
         6a:dd:b9:d6:38:83:31:2e:c2:73:0f:a8:2d:0f:1c:40:d3:28:
         38:cc:55:40:86:64:5e:0d:37:f0:7a:bb:fa:dc:1a:8d:47:59:
         2c:22:df:ff:c8:77:fc:ed:73:89:d3:85:21:cd:89:fd:82:d0:
         55:cc:cd:72:90:9c:af:c2:02:13:80:9b:c0:3c:e0:a6:1d:6a:
         c8:26:91:97:1d:1c:ce:ec:76:d2:e6:69:e9:35:f6:4d:f9:db:
         bd:60:af:2e:2d:6e:73:10:ae:0b:0c:7b:5b:d2:b0:1d:bc:db:
         15:50:da:66:9e:0c:a7:b3:75:36:b6:0c:3c:51:1e:c7:55:ac:
         87:46:70:61:06:0d:01:8c:1c:14:31:da:3e:16:94:cd:7b:0c:
         fd:05:ec:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:20:16 2026 by rpki-client