Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/7146542b-1d65-3816-8c2a-96d3c9f2767d.roa
File:                     7146542b-1d65-3816-8c2a-96d3c9f2767d.roa (raw, json)
Hash identifier:          9oRXKnnYMem7B/I3xeCLblPWcdcGr6orBVkREM2hEco=
Subject key identifier:   E0:F4:4D:44:F8:A9:6E:F9:3F:76:F4:E1:8A:19:4A:FC:81:18:20:D5
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584EA797A58E32E34FED16151B00
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/7146542b-1d65-3816-8c2a-96d3c9f2767d.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     30036
IP address blocks:        2604:2e88:4800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:97:a5:8e:32:e3:4f:ed:16:15:1b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=9ac1d30e-3b3f-443a-9111-8b6836e46d4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:2c:a1:b4:73:e5:1f:fa:ca:be:a1:48:31:87:
                    b3:40:70:f7:43:e0:5a:e1:d6:8c:ec:3d:7e:e8:d2:
                    b6:81:43:64:54:d5:6c:4e:ec:9a:8e:90:45:dc:a0:
                    78:6b:17:96:f3:13:71:2a:7e:ca:7a:03:e9:00:a3:
                    e1:69:ac:17:78:f3:b9:65:25:c1:e3:ed:7a:ee:c9:
                    4f:ac:4b:1d:33:66:41:fe:3f:7e:58:50:3f:ac:5e:
                    2c:10:34:e4:39:06:d7:c4:00:3d:99:7a:c9:a1:a0:
                    8f:f6:18:df:2c:2d:76:4c:c9:c1:15:1d:9b:6b:ad:
                    aa:c5:8f:3b:40:a8:27:bb:5a:1c:f1:9c:ed:65:5c:
                    c8:ff:9c:8c:c7:50:6d:41:ea:d7:14:11:74:a1:b1:
                    7b:58:3a:04:19:77:93:0e:8d:0c:ab:6f:3b:ee:9a:
                    e0:ca:fc:c3:bb:27:ba:d9:49:73:e4:a1:5a:37:39:
                    e5:35:65:9a:25:5f:66:24:ac:1f:0e:43:a4:70:79:
                    7f:42:32:e4:9e:2b:fe:25:2f:ab:51:e3:b1:10:51:
                    91:fa:24:e3:b3:5c:2a:ac:1c:b7:42:14:42:2c:04:
                    f0:e0:f9:9b:0b:c3:1a:96:43:e6:9e:55:04:e6:fb:
                    6d:9b:81:89:c6:19:66:43:20:21:e8:5c:31:bc:75:
                    6b:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:F4:4D:44:F8:A9:6E:F9:3F:76:F4:E1:8A:19:4A:FC:81:18:20:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/7146542b-1d65-3816-8c2a-96d3c9f2767d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e88:4800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:27:c8:88:02:f9:27:83:3a:e2:98:91:3d:6f:6f:ba:73:c1:
         50:94:02:8e:8d:f6:6b:11:e5:7f:09:85:51:c3:f8:54:61:7e:
         69:07:17:ac:68:5b:08:cb:0a:18:fb:81:7b:e3:90:2e:dc:f0:
         31:15:8b:4a:9d:4f:95:0b:e1:f9:df:95:ec:04:72:55:60:32:
         b2:ae:7e:d6:f5:52:7d:d8:00:07:42:f2:63:29:e8:2e:92:8b:
         d2:99:d4:76:ae:25:0f:bf:f9:c7:20:8e:d4:bb:29:9b:80:5f:
         4b:b9:92:72:f3:c8:f9:15:70:78:47:74:f9:b8:65:12:c0:46:
         84:88:0b:1e:06:5b:d9:95:ed:b3:87:f7:be:23:1f:0d:8b:2b:
         d3:26:15:0a:8a:be:4e:f4:8a:72:5e:4a:30:18:30:f6:13:f1:
         a7:be:c3:a2:bd:34:3e:ac:3a:8c:7c:15:4d:95:e5:91:83:7c:
         47:ad:ca:24:75:75:7d:c9:b0:a6:7c:a9:66:b2:a0:b6:82:b5:
         38:79:4b:71:96:4d:55:96:34:ed:ab:e1:89:19:44:38:b3:4d:
         e4:fd:c4:70:16:c5:1f:81:bb:ba:9c:4a:7f:44:b5:05:de:c8:
         18:25:13:8a:78:e5:48:3d:de:f6:54:98:39:0a:3e:5a:32:a1:
         3a:fb:f4:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:47:35 2026 by rpki-client