Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9c2a2db6-1857-342e-b5a5-6dfdecce71c1.roa
File:                     9c2a2db6-1857-342e-b5a5-6dfdecce71c1.roa (raw, json)
Hash identifier:          Nw+NfdNXb/RWGn+0tPBiXZZe7D9iS9nPNoN3pvsGYUo=
Subject key identifier:   6E:21:20:AE:A2:F7:24:29:29:5A:69:35:22:C1:C9:C3:0B:88:CC:CA
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584EA79C7B261E184F43EF7B1E40
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9c2a2db6-1857-342e-b5a5-6dfdecce71c1.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     30036
IP address blocks:        2604:2e8f:8180::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9c:7b:26:1e:18:4f:43:ef:7b:1e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=2b7a1588-b81a-4e81-9d36-75b6c24c16ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:14:3f:6d:91:dd:82:21:ba:cf:ec:26:ee:10:
                    59:9d:ed:c1:3c:de:f8:59:6e:71:a8:52:4e:04:9c:
                    fd:de:2c:a4:8e:18:0b:ec:3d:df:49:ac:80:18:17:
                    d4:47:67:2f:d7:f5:5b:b3:f6:23:f2:ad:86:cf:cd:
                    e0:4b:25:0e:2b:df:1f:8c:9d:64:41:2a:e9:ba:b0:
                    0c:82:cd:49:be:40:16:e6:f6:89:92:fb:ae:be:0c:
                    1f:62:8f:f4:11:68:14:00:6a:d7:6f:9f:2e:f0:c5:
                    15:02:e4:d4:06:17:84:77:b9:58:5d:f3:6c:79:d7:
                    50:b9:53:fb:40:f4:a6:04:ac:82:63:eb:d1:f7:3d:
                    42:9f:2f:ac:a4:26:be:38:15:91:27:68:68:67:66:
                    7d:7a:95:52:5b:8c:4c:8a:88:84:d1:c1:57:7c:21:
                    b3:1f:ef:b3:69:52:5d:53:3c:b9:40:90:8b:8f:32:
                    fe:e2:78:66:12:10:ff:86:3e:82:58:b8:cd:d9:97:
                    8c:8d:fc:45:17:b0:52:8d:5e:eb:fc:90:e9:4e:92:
                    56:e2:9d:13:16:64:ce:dd:f4:e9:e1:fb:15:2d:31:
                    3d:9c:5a:63:8f:30:eb:62:82:b8:8b:9f:bb:30:e0:
                    6a:22:b3:31:d5:23:85:92:0c:6b:8a:fb:fb:1a:ae:
                    2b:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:21:20:AE:A2:F7:24:29:29:5A:69:35:22:C1:C9:C3:0B:88:CC:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9c2a2db6-1857-342e-b5a5-6dfdecce71c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8f:8180::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:cd:a5:e3:b0:4f:6c:4a:5a:c7:47:77:c3:04:bf:81:08:c9:
         f2:32:e3:a1:e2:e5:1c:72:83:b5:98:e5:03:52:7c:b5:02:5e:
         40:36:dc:db:de:43:09:73:aa:ad:e1:a9:4a:68:3e:9b:93:05:
         28:fa:3b:f7:b5:6e:94:6b:aa:59:a0:02:2d:71:e3:b1:c0:9c:
         5a:39:36:df:48:62:f7:e4:be:91:ac:59:ea:1a:63:87:17:01:
         d1:80:38:b4:d4:00:5c:b3:bc:b8:1e:97:c3:7c:02:2d:06:97:
         c6:a0:57:c1:73:b2:69:05:82:e5:d6:16:ce:81:4f:76:fd:4e:
         41:8b:e0:96:23:35:a2:8c:11:f0:bf:b6:5d:07:f2:d2:52:15:
         c7:33:ba:1c:8f:47:77:52:88:03:b8:c1:2b:b2:90:b9:42:f7:
         02:e1:20:75:2d:16:27:4c:4a:3b:8d:2c:04:c6:55:5d:37:e2:
         1a:4b:b1:93:3a:d7:b1:ff:f1:86:00:50:55:50:b8:70:31:df:
         e3:1c:5c:82:9c:0f:40:33:0b:11:ca:2b:9f:8a:99:6a:f0:8f:
         51:55:38:c9:bb:00:7e:47:ff:37:0b:79:74:94:42:33:a9:82:
         d8:88:f1:8a:6d:c1:78:2d:b0:5d:fc:09:c8:43:4b:fa:a9:82:
         36:bc:f1:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:43:58 2026 by rpki-client