Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f3f3e2a0-ddf0-3b5f-ab35-ba81e32d3c45.roa
File:                     f3f3e2a0-ddf0-3b5f-ab35-ba81e32d3c45.roa (raw, json)
Hash identifier:          oSQYaW1zyi+gNLh3bTvg9cINUZCebULL4c1sr/mNcbo=
Subject key identifier:   32:CD:C0:7C:9D:4D:24:81:AD:59:86:C2:C8:F8:34:3C:71:98:65:1D
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584EAA519A38C387C02EA0F19340
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f3f3e2a0-ddf0-3b5f-ab35-ba81e32d3c45.roa
Signing time:             Thu 30 Jul 2026 01:00:12 +0000
ROA not before:           Thu 30 Jul 2026 01:00:12 +0000
ROA not after:            Wed 28 Oct 2026 01:00:12 +0000
asID:                     30036
IP address blocks:        2604:2e8b:d800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:aa:51:9a:38:c3:87:c0:2e:a0:f1:93:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jul 30 01:00:12 2026 GMT
            Not After : Oct 28 01:00:12 2026 GMT
        Subject: CN=df894bc5-fc97-402e-98df-ad19e15b041e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:9e:ec:f5:ec:18:4c:21:50:00:48:c7:e0:7f:
                    cd:05:65:8f:70:26:94:77:00:b3:d2:b1:a8:77:32:
                    b1:32:65:88:58:56:63:71:e6:9e:d8:6d:87:65:21:
                    3b:36:42:02:57:d4:4b:37:c0:b2:28:87:91:89:a5:
                    65:98:04:8b:ab:8b:55:2f:86:32:dd:65:46:70:41:
                    1d:8e:5a:14:5a:77:fc:e1:74:de:f2:fa:6f:9a:da:
                    43:ff:55:f3:94:af:77:5d:22:66:03:63:a8:d8:d2:
                    6d:54:c5:1c:6e:e9:2c:61:5d:b8:cb:f8:a6:fa:fc:
                    6e:29:8f:6f:79:e5:1b:51:fd:ad:b5:ee:24:92:6e:
                    ae:79:e4:e4:41:55:b9:03:67:a2:cb:04:09:c3:4c:
                    6b:3d:7e:00:07:87:24:39:87:38:9e:25:b1:e0:94:
                    46:06:92:51:c8:15:d8:b9:0e:54:8a:73:f4:74:01:
                    db:31:4c:0c:66:d0:26:75:a2:d0:53:28:4b:e3:8d:
                    28:61:88:af:50:a4:10:84:68:5e:1d:95:21:d0:45:
                    21:a1:af:5d:98:81:29:c7:3e:91:e1:71:52:b1:e1:
                    ca:43:f2:4b:38:1a:ea:14:69:dc:cd:41:88:86:4b:
                    b3:22:7b:78:2a:80:bd:88:d3:06:21:5e:6d:2f:7c:
                    af:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:CD:C0:7C:9D:4D:24:81:AD:59:86:C2:C8:F8:34:3C:71:98:65:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f3f3e2a0-ddf0-3b5f-ab35-ba81e32d3c45.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8b:d800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:18:38:eb:34:57:86:a3:80:7b:1a:ea:2d:06:c3:06:64:c2:
         67:ca:a5:94:6d:92:cd:83:45:ca:36:c4:5a:46:c7:46:b7:d7:
         49:50:92:d9:4e:67:60:5d:08:10:ae:d2:0d:15:0f:27:06:fd:
         83:46:f3:c9:94:ff:e8:4e:20:57:24:6f:ac:95:33:48:59:7c:
         fa:d9:0b:58:46:22:72:98:74:73:07:25:f2:8b:97:61:dc:73:
         56:4d:83:5e:d9:e4:59:ab:91:24:a6:8d:e5:81:05:5b:37:cc:
         3c:df:06:46:b9:14:b7:92:d2:dd:5b:55:19:ee:1e:a7:b3:ca:
         84:5e:0f:56:9d:b0:3a:c0:7a:e8:42:e8:dc:f7:79:b8:23:b9:
         d0:91:bf:ab:d4:9b:7b:2b:fe:ad:68:11:c6:cc:56:eb:4b:bb:
         fb:cf:c1:cb:09:0a:18:7c:86:56:4c:ef:15:41:15:29:d5:4c:
         12:1f:51:48:9f:da:b6:2b:22:28:c2:1d:93:e0:5d:d5:98:3e:
         57:7b:5d:4c:6a:35:26:ae:f2:05:14:63:87:2d:4d:7a:2d:34:
         1e:ad:18:ba:7a:e8:2f:54:9b:39:1d:64:1c:63:8b:f3:23:4b:
         95:4e:3a:da:3e:76:a9:84:90:90:86:ce:84:c4:fd:fc:f2:4e:
         18:81:2b:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:01:07 2026 by rpki-client