Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/e50e77d8-d05d-3648-8ddf-1818b3acb85d.roa
File:                     e50e77d8-d05d-3648-8ddf-1818b3acb85d.roa (raw, json)
Hash identifier:          wiQ01eXp5fn5ciwUs2dlrVnXx1vz0VX2QS0GiCqIAMA=
Subject key identifier:   54:6F:DF:10:03:68:6A:FA:57:AE:F6:D2:E3:50:98:7E:F5:AB:28:5B
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584EA79D17CB8A56C353856C8080
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/e50e77d8-d05d-3648-8ddf-1818b3acb85d.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     30036
IP address blocks:        2604:2e8d:2800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9d:17:cb:8a:56:c3:53:85:6c:80:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=99376b52-1db2-4cc6-a8b4-503e4276e592
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a3:29:ec:a3:7d:7b:6c:13:d2:b0:50:65:bc:
                    ec:c0:20:76:4b:31:31:8b:99:42:7d:a4:28:ab:6d:
                    e7:ff:f4:0c:5b:6b:3a:51:91:08:5a:60:b8:b9:a2:
                    35:f8:9c:fc:87:f2:b6:c2:00:ea:bd:1c:21:b2:8b:
                    7d:6a:42:8f:24:32:4e:f7:c1:03:08:1b:16:ea:4a:
                    ec:b0:a9:0f:53:90:4f:f2:b4:f2:28:56:c3:01:e6:
                    1d:5e:ec:ea:65:2f:82:0b:56:8d:7a:b6:09:77:4b:
                    da:80:84:3f:46:ac:eb:6a:e0:a0:e9:b6:4c:3e:ac:
                    e9:ce:e9:7b:2e:dc:55:e5:89:47:49:43:bd:ae:ea:
                    bf:78:0a:20:04:5c:bf:9e:63:61:f5:96:6d:82:74:
                    67:1f:03:ba:73:25:4c:ca:1c:08:eb:bd:a7:96:37:
                    37:46:3a:3c:d5:a1:46:f7:bd:1e:93:26:54:c9:e8:
                    f5:14:39:90:2f:1c:ce:bf:48:06:55:61:95:12:0f:
                    0d:11:3c:76:fc:68:d4:0c:79:8f:5b:b6:d9:f7:e2:
                    96:74:70:09:b8:a9:b2:3b:12:05:41:d0:1d:dc:c4:
                    47:67:e0:9e:13:44:eb:d8:35:9a:cb:21:b6:4c:19:
                    44:e4:fd:e8:74:01:ec:16:ee:9e:7b:02:09:ff:10:
                    c6:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:6F:DF:10:03:68:6A:FA:57:AE:F6:D2:E3:50:98:7E:F5:AB:28:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/e50e77d8-d05d-3648-8ddf-1818b3acb85d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8d:2800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:cc:e1:d3:61:66:ca:5f:9d:f2:11:45:11:75:df:ae:d9:45:
         37:8d:fe:18:f3:53:50:65:99:38:55:dd:e7:d6:2c:09:a7:71:
         ab:42:c8:56:f9:5b:86:e3:b7:75:a4:22:15:90:fe:b1:aa:f3:
         2b:98:a8:09:e8:41:05:de:c7:5c:f5:bb:f8:23:ea:39:18:cc:
         3d:68:68:f9:55:47:20:14:7d:c4:aa:87:b1:9c:bf:0f:bc:69:
         83:43:38:f3:db:7f:79:34:c5:ad:76:0d:98:01:d3:c2:89:ad:
         59:c2:26:4d:c8:6e:bb:26:e0:69:a2:f0:d5:d0:cd:b9:d0:57:
         e9:22:e7:6e:b3:7d:72:c6:1e:66:77:c5:e0:53:73:23:d1:99:
         f7:7e:07:89:bb:2d:e2:75:b2:62:1b:f3:f2:22:3b:2f:19:6d:
         e2:38:28:bd:46:3b:ae:b2:f1:bf:9e:6c:50:2c:60:7a:18:56:
         f3:94:a9:b7:36:4e:0b:12:dd:06:e6:e5:8c:a1:90:b5:9a:b8:
         27:2b:b7:5e:48:85:ca:da:10:d2:f5:75:9b:50:64:be:b4:3c:
         70:97:af:1d:a1:26:b0:f7:53:08:da:a0:e8:d3:63:46:82:ea:
         ff:db:20:26:08:87:ad:97:f7:7c:0c:4f:ea:bc:6d:f7:f9:54:
         31:ed:f8:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:45:18 2026 by rpki-client