Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4763358d-9093-3575-a353-5f77d318e9e3.roa
File:                     4763358d-9093-3575-a353-5f77d318e9e3.roa (raw, json)
Hash identifier:          E2cjkCMyNS7vIPjPo5cNfdR+xJvyqSFvfOqsYmNX+hw=
Subject key identifier:   B1:AC:29:7D:52:D7:C1:16:EC:D1:F0:A9:2F:53:9E:5F:1E:F7:93:6C
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584EA7A101A466A1751919108340
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4763358d-9093-3575-a353-5f77d318e9e3.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     30036
IP address blocks:        2604:2e8a:fc00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:a1:01:a4:66:a1:75:19:19:10:83:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=deca33d2-0901-4953-9707-1eec0fffa93d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:c7:3a:69:28:cd:33:31:48:03:04:10:e6:64:
                    f8:06:b2:cf:52:07:d4:30:e9:29:1c:79:ac:78:af:
                    46:49:11:37:49:33:e7:7c:51:cc:02:ee:73:6b:52:
                    58:c8:97:6a:24:20:35:e6:67:a4:6c:f8:64:04:bb:
                    c5:4e:0c:f9:22:44:10:4a:06:23:c0:66:a6:54:9e:
                    84:c2:7a:09:f6:32:e3:71:7c:bc:70:8e:e2:c3:36:
                    00:06:d0:f6:a1:23:4f:4a:40:f4:a0:5b:c3:e5:84:
                    c4:d9:34:e0:80:0d:43:cf:bc:8c:23:6e:76:70:e0:
                    9b:f2:b1:33:91:06:46:82:0f:0f:67:85:55:9a:ba:
                    a3:c4:96:44:c5:4a:90:c1:40:b1:2c:45:ad:70:05:
                    11:d6:85:10:ce:49:68:6f:18:0f:45:27:13:fa:76:
                    fc:89:fb:f1:d7:05:f2:5d:6a:26:ca:da:90:3b:4c:
                    42:0b:f8:70:21:bc:cf:63:01:ef:6d:16:20:07:3c:
                    32:10:c5:ee:84:eb:5a:97:b5:b5:2d:4a:75:2d:a6:
                    2e:9a:d1:77:bc:f2:8c:e1:d9:30:2c:ed:49:40:5b:
                    ac:54:9e:8a:2e:a4:c2:59:5a:77:10:d1:bf:10:33:
                    01:36:5f:df:c0:61:f9:c3:78:6e:f7:8e:0f:ad:10:
                    f7:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:AC:29:7D:52:D7:C1:16:EC:D1:F0:A9:2F:53:9E:5F:1E:F7:93:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4763358d-9093-3575-a353-5f77d318e9e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8a:fc00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:2f:0a:82:93:c7:30:ff:18:b4:2f:90:e7:39:c4:45:12:51:
         a1:2e:b9:2b:90:c5:83:4a:91:a8:95:db:50:bc:b8:68:49:75:
         73:fd:12:24:07:ca:a0:db:dc:b5:88:e9:57:e1:9a:2f:85:3c:
         b0:31:09:9b:75:b6:7b:b1:f9:98:90:cb:4f:b5:11:3b:b5:7a:
         59:b0:3c:85:1d:2c:a9:d8:b0:cd:71:c6:a7:c2:76:f1:20:ee:
         8a:1f:21:69:75:21:68:47:91:96:e7:95:84:fa:b7:7d:d2:c7:
         99:65:2b:73:4f:c0:37:2a:2c:9c:cb:45:7a:68:25:bb:e8:61:
         55:6b:5e:41:61:18:fc:09:62:0c:de:c2:8f:ee:4a:c4:f2:43:
         a9:f6:6a:d8:75:74:a0:e6:1f:fb:76:0c:93:07:9f:69:d9:6c:
         34:1d:53:9f:f7:9f:dd:fc:a0:eb:e4:c4:75:ae:97:53:c0:1d:
         93:fd:40:9a:ad:1e:f9:fa:6e:7d:55:06:3d:47:3a:ed:53:e3:
         a5:51:7d:ef:a7:95:36:32:21:55:6f:8c:84:50:a2:3d:03:07:
         24:b7:f4:a9:8d:81:fc:95:28:ad:2b:5d:23:be:25:f1:0b:36:
         03:b5:ca:84:62:56:ed:0b:63:90:05:3a:31:f7:71:e2:3a:cd:
         d4:5e:c1:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:48:36 2026 by rpki-client