Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0065fc65-bd2c-3357-b051-a0feb3c33a10.roa
File:                     0065fc65-bd2c-3357-b051-a0feb3c33a10.roa (raw, json)
Hash identifier:          LHPGfWVaGp2vTYOwEavLdlmYzdIVYitoAM6ZImS1ZvY=
Subject key identifier:   5B:10:A6:2C:E6:22:24:61:DF:3E:5D:17:81:EF:A5:5A:D8:BC:F7:67
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584DF7A5E8B8EE6A47EE6AA2A040
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0065fc65-bd2c-3357-b051-a0feb3c33a10.roa
Signing time:             Wed 27 May 2026 01:00:14 +0000
ROA not before:           Wed 27 May 2026 01:00:14 +0000
ROA not after:            Tue 25 Aug 2026 01:00:14 +0000
asID:                     30036
IP address blocks:        2604:2e88:9400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f7:a5:e8:b8:ee:6a:47:ee:6a:a2:a0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: May 27 01:00:14 2026 GMT
            Not After : Aug 25 01:00:14 2026 GMT
        Subject: CN=7a69b16f-9aad-45af-878d-6acbca3b8eaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a6:1e:13:05:0d:db:49:47:72:fd:0d:c1:02:
                    35:e3:44:a8:5c:84:0f:92:3f:a0:18:4d:66:2c:7d:
                    48:37:bf:f9:29:c2:12:08:f3:bd:93:7c:9e:df:fa:
                    84:a3:86:bf:ff:27:b2:ce:85:d0:c6:ae:5b:7e:33:
                    ad:1a:73:5d:fa:ed:57:d3:b1:e2:43:bd:fd:9d:b3:
                    2e:f2:59:14:42:3c:c1:6c:0b:d3:93:40:c8:82:b6:
                    57:91:9d:f4:d1:65:48:9a:df:04:a1:bf:70:a7:ac:
                    13:59:d1:e5:13:1c:6b:2f:6f:83:d6:36:99:69:cd:
                    25:81:b4:31:d3:3c:01:e9:1b:ca:92:31:a6:04:73:
                    22:45:06:fb:ae:bc:90:ec:42:61:d8:d6:2d:21:72:
                    ed:87:02:95:a2:04:47:1d:42:03:9c:91:73:82:0a:
                    ba:32:da:8c:fb:88:65:b8:4d:ab:fb:b5:12:9d:eb:
                    f0:f9:06:ce:20:61:14:78:55:c1:f1:a1:1e:67:8c:
                    dd:6c:20:10:14:1c:8a:d8:fa:0e:25:12:8f:87:97:
                    51:9e:47:50:66:88:1f:26:36:85:04:ff:07:72:f4:
                    18:ad:f5:bd:8a:17:99:74:5b:31:94:07:ed:bc:a6:
                    20:95:58:87:c4:bb:70:20:f8:09:22:25:89:2b:39:
                    fc:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:10:A6:2C:E6:22:24:61:DF:3E:5D:17:81:EF:A5:5A:D8:BC:F7:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0065fc65-bd2c-3357-b051-a0feb3c33a10.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e88:9400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:d1:af:2c:f4:20:0c:4c:78:3e:60:7d:79:e9:af:88:90:a8:
         17:48:4d:01:d8:c5:92:a4:09:33:57:c0:20:fd:1e:0f:a8:32:
         75:2b:9b:ee:7b:0d:33:0f:9c:18:e8:b1:78:45:59:17:03:f9:
         fd:d8:1c:19:98:f7:78:48:96:d7:88:ec:f4:17:e8:8a:4e:10:
         c0:91:31:64:24:93:42:40:fe:78:1a:5d:64:28:ba:1a:34:28:
         52:91:03:c9:50:77:63:89:e3:ed:38:1b:1d:bc:78:f3:49:26:
         16:73:8d:00:11:e7:44:55:f0:64:f5:3a:c0:c6:b3:9f:65:c9:
         cb:1b:9c:c3:c1:e9:11:3a:92:de:9a:cd:00:68:68:8e:43:b8:
         e3:7a:ee:9d:75:12:f5:89:c7:bd:bd:9b:8f:67:a0:e6:2a:a4:
         28:44:02:4e:37:e8:05:48:ed:f4:71:e9:64:71:26:c3:a6:a8:
         a4:2c:ef:30:e5:0d:2e:c8:9c:2f:9d:fc:e4:c7:bb:3d:70:03:
         69:22:c4:eb:eb:30:f5:67:37:ce:b3:c7:90:ad:66:10:1e:ef:
         9f:a6:1d:91:86:c6:c6:84:61:07:38:40:97:61:51:3b:5a:c8:
         db:36:44:ce:d2:ec:8b:b3:e3:4a:d8:77:17:19:b4:09:c5:e3:
         04:3f:8d:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:26:03 2026 by rpki-client