Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c1ad2cc5-4739-3685-8f6e-1113e0e20e4a.roa
File:                     c1ad2cc5-4739-3685-8f6e-1113e0e20e4a.roa (raw, json)
Hash identifier:          6rgxQ6y+ywBlhsXsirE+y0miaxU+R8snTB13UHBerm4=
Subject key identifier:   F1:D6:61:74:1D:F6:1E:70:FF:C5:8B:CC:8E:D0:17:DD:A7:99:D8:69
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584EA79BDF447123FB00CEC18400
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c1ad2cc5-4739-3685-8f6e-1113e0e20e4a.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     30036
IP address blocks:        2604:2e88:3800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9b:df:44:71:23:fb:00:ce:c1:84:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=1aefcd64-8643-49b0-a859-4654188dd4d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:97:2a:e0:e0:46:99:32:e7:0c:94:d3:7b:d2:
                    e9:77:10:e4:f4:2f:15:a9:dc:20:15:f8:99:d1:1a:
                    cc:42:c7:ec:cd:3a:d6:4a:89:04:11:7e:53:5e:08:
                    6a:c2:08:0b:fc:60:41:22:8d:97:2a:5b:56:3e:83:
                    83:21:bc:01:8c:50:8d:c8:14:68:56:70:cc:bd:9c:
                    7b:ae:e2:c7:67:0d:c1:e2:64:45:79:e4:ac:65:57:
                    19:19:8d:9c:05:03:c6:17:a0:d6:99:b9:35:e5:ac:
                    e6:0e:5d:58:bc:a2:f7:67:93:23:ea:47:d8:f3:56:
                    71:21:e7:8c:38:a3:1a:74:64:42:84:d6:0b:ee:d6:
                    8c:cd:26:86:c1:68:ae:d8:9b:34:a7:95:b9:cb:c0:
                    d2:03:13:8e:f3:81:28:d2:5b:8f:83:ad:a7:76:92:
                    bd:ff:79:1f:76:97:37:82:42:1e:89:22:b3:cc:ce:
                    7d:a2:bf:6d:93:fa:65:b6:84:84:05:75:77:c6:ab:
                    c5:1d:e9:16:c2:a7:cc:f6:cc:69:ea:62:29:8b:05:
                    b8:2e:26:1a:71:be:2f:65:29:15:e0:2c:d8:65:e6:
                    47:04:bd:e5:8b:e7:ad:55:17:72:a5:d3:04:ed:e6:
                    23:d7:b5:21:ad:f4:f0:21:f8:b7:c3:10:4a:58:88:
                    6a:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:D6:61:74:1D:F6:1E:70:FF:C5:8B:CC:8E:D0:17:DD:A7:99:D8:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c1ad2cc5-4739-3685-8f6e-1113e0e20e4a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e88:3800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:23:d9:77:36:42:09:42:73:8c:50:1c:f8:1e:26:a2:a0:33:
         60:5d:0d:06:44:19:7e:2c:40:7b:d6:cd:9e:27:c6:c9:31:22:
         91:73:23:cf:96:85:e0:25:0a:25:9e:3d:bf:08:b6:9d:4b:e8:
         36:9d:50:d5:da:bb:6c:aa:87:ce:45:b7:93:87:1e:aa:a3:ea:
         4f:6a:81:d8:f4:64:9b:b2:d3:a7:04:57:cc:b5:1a:72:d3:12:
         5e:da:01:4c:3d:8d:91:d2:1e:5b:fb:08:db:ed:f9:ae:68:4f:
         ac:60:79:1d:5b:4b:a6:1c:40:93:d0:69:65:91:28:a5:e3:fe:
         41:fb:c7:c2:b9:d1:f2:ad:b1:52:23:70:13:cc:48:8a:f9:70:
         db:39:a2:40:b2:7a:5a:45:9d:cc:47:01:c2:8a:eb:99:fe:2a:
         be:c2:61:03:d1:fa:52:ba:13:a3:e1:67:1b:08:0c:53:a3:32:
         7b:02:7c:d9:97:34:d3:b2:67:fa:2b:ef:db:ff:f4:df:b1:08:
         c9:b7:6d:8f:45:85:c2:b7:17:a9:ac:66:eb:91:d1:71:24:56:
         2a:30:57:f7:9f:a7:87:5b:b9:75:c6:fa:d5:c4:62:b2:be:10:
         1d:16:c5:a6:6b:6e:39:0f:f2:b8:ce:aa:b4:3a:99:06:b5:86:
         50:ff:1a:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:47:31 2026 by rpki-client