Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/31ce2175-a8ad-3987-81c2-b1d0843962c7.roa
File:                     31ce2175-a8ad-3987-81c2-b1d0843962c7.roa (raw, json)
Hash identifier:          Hmb/RovrrLnSiZFQDWpEAzLQITbo/hlcsY/3YFnBxxk=
Subject key identifier:   9D:0A:48:49:4C:F7:9E:D9:1C:50:F7:C3:B0:A8:58:C2:E0:C8:02:AF
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584EA798C75D9B10C81E6038D1C0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/31ce2175-a8ad-3987-81c2-b1d0843962c7.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     30036
IP address blocks:        2604:2e87:6000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:98:c7:5d:9b:10:c8:1e:60:38:d1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=d6d75533-8d1a-4fef-8abe-d5d90e4b500c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:89:28:a1:c7:93:f7:b6:3a:1b:64:3a:54:32:
                    6a:9c:05:45:2c:4c:5a:5c:c2:24:e1:29:57:ba:25:
                    15:ce:9a:6b:b9:16:f5:30:3d:eb:21:c3:7e:55:c5:
                    9f:11:97:47:1c:48:1b:4b:4a:87:b7:31:5c:d5:2d:
                    9d:02:67:91:89:71:54:3d:82:36:67:46:c7:43:3b:
                    81:62:2e:e1:84:c9:cc:c4:10:e8:7b:e4:dc:d6:c2:
                    dd:7e:e2:f8:93:6e:1c:89:ae:48:65:5a:6d:9a:77:
                    9f:b8:33:22:15:2c:a9:65:b4:c1:88:14:3e:7d:b1:
                    35:93:ce:1c:45:79:73:6f:de:13:bd:ae:ad:36:07:
                    08:55:c6:a5:be:85:e0:6a:35:84:f9:0a:6c:21:5d:
                    8c:d8:91:79:97:90:aa:e7:89:f2:96:d0:1c:ff:a8:
                    75:f9:bc:cd:c5:73:ea:60:38:e1:84:8b:29:ae:05:
                    63:25:47:52:52:1a:ce:7f:5a:e2:a4:f8:50:ba:a6:
                    0c:2e:ed:5f:01:7d:88:2e:32:cb:55:6d:87:bc:1d:
                    a5:e0:3b:4d:1f:31:75:27:8e:c8:00:e4:c8:a7:45:
                    d6:56:59:03:f9:dc:a7:67:a4:fa:1d:97:d9:fd:17:
                    30:74:bc:87:8e:27:5e:6a:3c:b7:01:61:da:ad:ee:
                    31:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:0A:48:49:4C:F7:9E:D9:1C:50:F7:C3:B0:A8:58:C2:E0:C8:02:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/31ce2175-a8ad-3987-81c2-b1d0843962c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e87:6000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:3c:02:88:fc:b2:35:23:40:5f:ff:ff:0a:ad:23:22:68:a0:
         e4:c6:1f:eb:af:2d:23:56:6b:f1:c1:5e:54:93:3e:c1:b8:f5:
         3c:a4:52:68:08:80:c6:0d:87:7b:bf:6a:44:3f:2b:87:c2:65:
         25:a8:0b:27:6b:5a:8f:78:7d:fe:97:4b:23:f4:6f:df:a2:a1:
         eb:a9:2c:e5:85:db:37:1d:bb:a9:55:03:84:bf:7c:88:1b:c2:
         5a:19:45:d2:74:ce:a9:89:82:8a:d5:9d:fb:7b:b7:76:83:d7:
         c6:36:3b:6e:1a:8f:5a:e9:8d:a7:3d:e0:75:d9:cc:e7:13:f3:
         bb:69:bd:dc:30:88:69:ab:a8:22:b9:5b:3a:90:c9:02:85:05:
         b1:18:c5:5a:0b:44:0f:46:80:6c:7b:12:7a:ec:69:6b:1f:16:
         33:ff:b0:f6:fc:cc:4f:d4:85:c7:c6:af:82:66:b5:f2:b8:19:
         d5:f3:c4:a5:bc:0f:cf:a1:f0:59:5d:a5:f3:f0:ab:5f:8c:be:
         1b:8d:b3:fc:cb:a2:5e:14:eb:fc:a5:6b:3d:6a:2b:96:3e:50:
         d0:23:d0:bf:a7:fe:39:d1:a2:cc:09:c6:22:76:84:86:2e:54:
         d1:6b:4d:0b:15:37:42:41:83:a2:b4:5d:33:f3:a9:c2:db:0a:
         f3:36:1c:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:48:04 2026 by rpki-client