Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/e8f8cf6f-461d-33ff-a344-67d1492d3b1b.roa
File:                     e8f8cf6f-461d-33ff-a344-67d1492d3b1b.roa (raw, json)
Hash identifier:          lZp/3qKTx7u0D4Z/s+HBt6aiiJ3ccMtVowiZMCbWevo=
Subject key identifier:   1A:9A:1B:57:37:7B:F3:59:23:68:06:8C:47:08:80:F1:C7:CC:10:1A
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584F71ED847A527712DC5F2808C0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/e8f8cf6f-461d-33ff-a344-67d1492d3b1b.roa
Signing time:             Fri 09 Oct 2026 13:00:13 +0000
ROA not before:           Fri 09 Oct 2026 13:00:13 +0000
ROA not after:            Thu 07 Jan 2027 14:00:13 +0000
asID:                     30036
IP address blocks:        2604:2e87:2400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:71:ed:84:7a:52:77:12:dc:5f:28:08:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Oct  9 13:00:13 2026 GMT
            Not After : Jan  7 14:00:13 2027 GMT
        Subject: CN=4cd0a5a8-df5a-4c0f-a2ed-8e9c5b7cc18a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:2b:33:37:b3:f7:f5:40:46:d2:d8:41:ed:b9:
                    39:f8:a1:76:c5:75:e8:56:8b:01:ad:78:87:72:fd:
                    41:81:83:20:92:06:bd:0e:a8:a0:24:db:1d:04:03:
                    51:3d:4c:97:43:62:be:73:4a:9f:1d:84:21:9c:98:
                    cc:0d:b6:96:e8:fd:4d:00:eb:91:1c:df:57:c9:a1:
                    25:07:4e:62:cf:a2:56:e1:7d:d7:dc:26:f0:97:ce:
                    5c:8b:a0:08:0f:cd:96:84:57:dd:79:e5:70:90:1e:
                    76:71:29:89:df:ce:82:35:fb:ca:73:a0:81:7e:5a:
                    32:e9:c5:d5:fb:7d:80:f3:e0:c1:7a:82:04:41:d2:
                    95:82:a6:d4:87:0e:5f:cf:f2:24:46:21:49:70:51:
                    67:8e:3c:c2:c6:5f:ec:f8:58:b0:49:9c:7f:8a:c7:
                    7c:4b:28:d6:cb:21:09:90:b9:80:74:6f:0e:96:b6:
                    34:d2:79:74:68:42:66:c8:9c:e0:3a:6b:59:e7:a0:
                    40:76:3d:34:0f:68:b5:36:7f:69:5d:fc:23:51:e4:
                    8b:32:42:73:61:04:68:ae:6d:5c:f2:3c:20:65:62:
                    b1:c3:00:83:9a:53:e8:b2:3a:8f:1d:57:82:02:72:
                    d1:4b:19:96:32:58:6c:6f:a9:c5:48:0d:dc:54:2d:
                    fe:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:9A:1B:57:37:7B:F3:59:23:68:06:8C:47:08:80:F1:C7:CC:10:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/e8f8cf6f-461d-33ff-a344-67d1492d3b1b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e87:2400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:66:51:a1:dc:09:c6:95:0f:68:9f:4c:0d:40:7f:1e:13:59:
         63:36:e8:8b:c8:b6:84:52:ec:a1:ae:6c:27:be:9e:10:0b:46:
         f8:1e:9b:ea:92:40:92:2d:6b:47:96:d7:a3:bb:ea:f5:36:ad:
         c3:ca:f7:ca:5a:d5:7c:ec:48:fc:b0:72:e4:29:59:d7:c9:c8:
         8d:88:f2:ce:a4:06:0d:b1:36:47:66:08:b9:da:1e:68:d8:e8:
         a9:35:84:d0:39:88:8e:b7:c3:bf:8d:65:98:fd:fb:90:64:66:
         2d:4e:6e:9a:2d:da:ec:d4:d8:ec:8f:ca:6c:f0:4d:80:02:b5:
         64:a0:2e:db:8c:5c:0d:7a:03:50:1a:15:76:dc:bc:1b:73:90:
         35:8f:9d:59:a2:5d:c0:fa:c2:b3:a8:85:23:26:55:88:eb:1a:
         cf:d2:24:cd:2c:3c:86:fd:b8:b9:c4:8f:be:f1:b6:5b:bf:9c:
         29:3f:9d:ac:27:ef:91:f2:0b:07:b5:f2:e2:18:bc:e9:93:f9:
         59:f2:cd:35:13:c0:c7:81:75:63:2d:65:54:c5:81:56:38:ad:
         59:59:2a:e7:05:4f:50:4e:de:01:e8:b7:8e:a2:2b:cf:71:d7:
         22:30:e1:4b:d2:db:94:50:c0:61:cc:7a:c7:fe:2a:13:19:e4:
         bc:7b:59:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 06:20:00 2026 by rpki-client