Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1747e583-3d0e-3aa0-ae9e-da6c654234cd.roa
File:                     1747e583-3d0e-3aa0-ae9e-da6c654234cd.roa (raw, json)
Hash identifier:          FFVrBRxZdm4tEH8Zyb2YwcMgwhe1Gm3rFZQn9LM9+40=
Subject key identifier:   2D:BB:CF:E0:31:0D:AC:47:9C:E9:98:9E:2A:08:35:D9:86:4B:4D:21
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584ED431DEA4C45DC7EC88AA07E0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1747e583-3d0e-3aa0-ae9e-da6c654234cd.roa
Signing time:             Fri 14 Aug 2026 01:00:13 +0000
ROA not before:           Fri 14 Aug 2026 01:00:13 +0000
ROA not after:            Thu 12 Nov 2026 02:00:13 +0000
asID:                     30036
IP address blocks:        2604:2e8f:f400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d4:31:de:a4:c4:5d:c7:ec:88:aa:07:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Aug 14 01:00:13 2026 GMT
            Not After : Nov 12 02:00:13 2026 GMT
        Subject: CN=05c76e79-705e-4510-9a1c-e1a319c71e5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c4:2b:7d:3a:c7:f0:0b:bd:c4:31:4d:6a:4f:
                    be:7a:a6:d8:5d:81:7b:92:4d:42:01:a2:d2:57:20:
                    0b:0a:69:4c:02:ac:87:68:f1:04:92:4b:fb:a6:86:
                    15:2c:e3:99:fe:7f:55:f6:ca:c1:b7:33:48:12:f1:
                    a8:4e:a9:e3:92:ec:c7:74:5e:0b:b5:59:95:ac:29:
                    28:e3:00:73:e0:c9:15:b9:f3:0e:52:a2:13:41:cc:
                    9b:8d:ad:a5:60:d1:0c:4d:c7:20:85:0a:d0:2d:09:
                    c5:a6:03:bf:09:bf:4f:52:2f:06:e3:51:5e:65:66:
                    b7:a9:27:10:c4:dc:01:48:df:9d:99:39:63:3e:26:
                    b0:cb:eb:2f:4c:d5:2e:03:93:02:90:e4:ad:76:ab:
                    a2:ce:42:8a:83:1a:17:9f:f6:1c:45:e0:43:1e:ed:
                    d9:de:d8:81:c2:a8:67:2c:c7:f6:55:e8:64:38:32:
                    bf:ad:25:4d:a5:11:7c:4e:b2:ba:e9:08:21:eb:28:
                    f6:64:a1:69:07:5c:8a:ea:9b:b5:05:a8:6d:b9:67:
                    a0:12:d1:01:af:c5:1f:d9:16:e6:cf:e7:64:16:dd:
                    c1:4b:b6:c2:25:4f:dd:2d:b7:0c:c5:cf:7b:3b:d8:
                    71:5f:2c:58:47:db:1b:d2:16:4b:5c:b4:e8:d8:ca:
                    39:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:BB:CF:E0:31:0D:AC:47:9C:E9:98:9E:2A:08:35:D9:86:4B:4D:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1747e583-3d0e-3aa0-ae9e-da6c654234cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8f:f400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:b6:80:1c:d5:17:0e:03:da:5d:61:e1:27:28:94:3a:05:ac:
         aa:5b:71:78:3b:4b:69:97:f2:96:5a:48:e5:8b:f4:7a:58:1f:
         8a:a4:6e:92:76:6d:fa:ba:fb:73:0d:0c:c2:1f:0f:10:54:87:
         d7:c2:ea:2a:e5:ef:f1:31:e8:d5:39:1c:c1:3b:11:f1:0e:5e:
         23:a8:0c:0c:6e:ce:f0:02:00:50:17:be:fd:c0:bd:3e:05:2a:
         07:c0:8e:f7:ea:69:29:f2:12:b9:6e:0e:6b:61:b1:2a:37:66:
         86:a7:f4:4f:d1:1a:cf:95:32:a9:d4:ce:f8:41:86:a2:c9:ba:
         c3:52:f9:e0:19:a5:e3:67:89:62:40:39:88:26:6c:ff:45:9e:
         42:03:b5:4a:a5:10:9c:3f:05:9a:f5:d1:4e:c7:e8:cd:e8:5c:
         80:35:73:f7:8d:36:f3:7f:60:f7:8e:1a:42:d1:09:10:09:c4:
         fe:e0:36:00:5f:dd:03:3b:e2:71:d0:83:2d:16:74:5d:cb:b3:
         67:9f:a9:32:b2:ec:79:cf:2f:14:60:1e:7c:54:77:99:26:90:
         ca:a8:65:66:99:78:8a:61:3c:46:37:91:7d:10:99:a3:a8:c9:
         0d:b2:b0:8f:b7:e8:5c:c2:c2:41:97:0f:1d:71:e5:20:e7:6e:
         9a:01:83:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:46:34 2026 by rpki-client