Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/229aa618-e791-3a56-9b12-73e308d2db33.roa
File:                     229aa618-e791-3a56-9b12-73e308d2db33.roa (raw, json)
Hash identifier:          PjJ2H7rtxfZ636ossfMlWL5sQAV3eGcWcwfe/oMulJ4=
Subject key identifier:   A1:7A:31:DE:E6:CF:4F:39:10:F6:AB:80:69:F4:93:2E:0B:A3:C7:C4
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584EA79BC3AE84C5A6E5A6EB6800
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/229aa618-e791-3a56-9b12-73e308d2db33.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     30036
IP address blocks:        2604:2e8a:5c00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9b:c3:ae:84:c5:a6:e5:a6:eb:68:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=f5841965-d6ca-4cd1-8933-78eeb6631b8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:86:55:fb:ed:d7:28:2c:f0:15:9a:6d:54:ed:
                    84:11:fb:f1:05:1b:f4:91:cc:d8:51:5b:ba:2b:f7:
                    8a:6c:ea:e2:fc:dd:15:f6:aa:87:b9:7d:25:39:31:
                    af:2d:65:68:0f:78:be:e6:df:46:33:6d:8c:5e:5b:
                    08:e0:cd:36:a7:60:81:13:0d:49:04:64:bc:ad:63:
                    7a:bc:6c:31:9a:cf:a1:05:c0:4c:6a:40:45:77:0d:
                    d6:e1:c2:df:38:36:46:72:95:70:9d:0e:42:28:ba:
                    cf:42:41:7a:05:d3:c9:3f:f5:0e:13:31:cc:37:c0:
                    da:9c:42:c6:b5:fc:c8:5f:89:dd:9d:09:ac:89:75:
                    e3:7b:f7:0a:18:ca:7d:d5:cb:58:d2:ef:ea:b1:0a:
                    48:47:56:d6:d5:e7:5d:bc:b1:32:b7:c8:db:ee:0a:
                    25:fd:18:88:ab:f5:59:2e:5b:7c:19:44:77:8e:ac:
                    d4:aa:16:c1:e5:51:3c:06:1d:88:7a:08:21:1c:d3:
                    fb:43:83:72:13:3e:61:cf:38:11:b7:c4:9e:29:ca:
                    18:fc:cd:01:a5:7f:19:d4:7f:98:ba:06:ca:9a:e9:
                    2d:74:40:f5:e8:f7:84:f0:39:76:15:10:e8:2a:5e:
                    c5:27:23:25:de:e2:32:c9:62:90:60:7a:da:82:32:
                    82:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:7A:31:DE:E6:CF:4F:39:10:F6:AB:80:69:F4:93:2E:0B:A3:C7:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/229aa618-e791-3a56-9b12-73e308d2db33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8a:5c00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:12:8a:0a:10:3e:fe:cd:fd:48:4c:32:f4:de:0a:03:25:c6:
         a5:ce:3b:f8:d5:e9:ae:f9:69:bc:41:c4:6d:51:75:32:b7:09:
         99:f5:a2:b3:e1:e0:13:9e:4c:64:74:06:fc:45:5c:9d:35:38:
         35:75:3b:51:ab:b1:5f:ef:4e:8e:92:1b:e4:39:cd:de:ea:4b:
         b1:ad:95:dd:03:98:c7:ed:f5:3f:09:d5:df:d6:42:f2:26:08:
         93:8c:9d:dd:6d:bc:56:2e:f1:7e:cb:fd:7f:b4:7f:7c:40:b1:
         6c:73:66:d4:3b:48:31:af:60:27:c0:cb:e5:3a:b0:9b:2c:d7:
         0f:8d:8e:95:a5:57:fe:12:e9:5e:f5:9c:1d:73:a1:e6:2c:dd:
         ea:54:85:dc:81:f1:59:19:58:cc:aa:9b:72:78:b3:60:6e:0d:
         21:94:66:e9:1a:4b:25:c2:6a:83:e3:d2:52:b7:d4:30:18:6c:
         92:d1:d9:96:ac:a1:21:3a:31:56:2d:98:69:55:b0:0c:88:b7:
         a7:5c:2b:b6:ed:f7:6a:a5:d3:cc:58:ba:18:ea:a6:b0:fc:53:
         e9:22:bc:a9:ce:4d:ee:d2:03:cb:79:08:bb:ca:2c:b1:ee:e2:
         d5:6a:aa:3a:48:10:68:a0:5f:5a:45:24:d4:3e:55:39:65:2e:
         9a:9d:c4:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:43:25 2026 by rpki-client