Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0080bb82-5914-3851-a7c3-e0f6d5cabb62.roa
File:                     0080bb82-5914-3851-a7c3-e0f6d5cabb62.roa (raw, json)
Hash identifier:          bDdx/K4Wll+UEzczFpWbPs0CQo+wYvtjgbkrnldCbro=
Subject key identifier:   43:58:EE:98:9D:B0:F7:60:CD:CD:7D:34:08:3E:0B:AA:27:DB:CB:06
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584DF7A5D6D801A0BFA788D14080
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0080bb82-5914-3851-a7c3-e0f6d5cabb62.roa
Signing time:             Wed 27 May 2026 01:00:14 +0000
ROA not before:           Wed 27 May 2026 01:00:14 +0000
ROA not after:            Tue 25 Aug 2026 01:00:14 +0000
asID:                     30036
IP address blocks:        2604:2e88:3000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f7:a5:d6:d8:01:a0:bf:a7:88:d1:40:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: May 27 01:00:14 2026 GMT
            Not After : Aug 25 01:00:14 2026 GMT
        Subject: CN=aebf3c20-844e-4b64-be81-bb8839ddf888
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:66:c5:da:e2:b0:94:63:a3:2d:fc:e6:8a:37:
                    f4:2c:a3:1d:1c:5a:b2:37:7e:eb:5b:ff:d0:01:16:
                    ca:74:17:59:a9:e9:3b:55:8f:86:9f:be:ad:0a:a3:
                    77:67:f3:fd:ba:27:64:80:cb:da:34:bf:a8:74:69:
                    40:d1:2a:70:e2:04:d6:f9:a6:4f:cf:f2:2f:b1:1a:
                    88:da:45:b2:4d:d7:a5:cd:51:35:e7:f0:8b:95:e4:
                    bf:c2:4e:7b:f9:8e:5e:bc:97:0b:0f:5f:23:e4:ab:
                    fb:a4:87:d5:29:f7:82:1a:81:70:79:be:6c:72:f5:
                    36:69:f5:73:39:2e:02:55:eb:fe:f7:69:0c:0b:45:
                    b2:d4:ab:a3:1b:d5:74:63:fe:ed:f3:16:57:a9:f9:
                    46:86:ba:d0:42:3b:83:71:c2:fe:53:f0:81:67:5c:
                    c6:dd:68:10:16:6e:ea:52:7d:71:f6:3a:3a:cb:a9:
                    e4:64:f4:a0:62:64:82:fb:b4:b0:77:ec:da:b2:1d:
                    ac:a0:0c:78:b7:5f:9d:06:4a:72:cc:f1:15:1f:26:
                    4b:17:92:75:70:d3:f3:2b:d3:6a:bb:fa:45:aa:9a:
                    75:3b:c2:a4:ac:0b:93:4b:a6:06:4a:7c:fc:1c:71:
                    d5:12:0a:a6:91:98:e0:cd:bf:43:ed:f9:96:45:05:
                    79:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:58:EE:98:9D:B0:F7:60:CD:CD:7D:34:08:3E:0B:AA:27:DB:CB:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0080bb82-5914-3851-a7c3-e0f6d5cabb62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e88:3000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:06:15:46:2e:01:d8:97:14:cc:f8:df:25:3d:5c:56:bc:26:
         f1:18:3a:5d:61:1e:ff:2f:02:4a:46:95:18:5b:d1:1f:10:79:
         a6:e6:80:6d:cc:64:b6:34:fa:e8:46:e7:c2:ec:23:77:3b:b8:
         8d:66:81:71:d9:d2:38:35:2b:1d:da:33:e3:f9:2e:5b:3f:ef:
         a7:18:70:e9:b8:b5:18:5f:73:a1:64:f4:14:ac:b0:08:b9:4e:
         0c:97:ce:0e:33:83:05:41:f2:3f:d2:9d:d8:93:ab:26:94:5c:
         18:8d:39:58:a5:21:ab:a1:99:c9:67:8d:aa:87:ab:49:a9:55:
         33:34:d9:cc:5b:a6:01:cc:b1:b9:15:23:cc:b2:ca:c9:5d:3a:
         01:ba:bb:ca:96:8b:20:4f:d8:bc:41:46:84:1f:cb:9e:f7:59:
         3c:be:8a:84:7f:68:95:d2:40:88:b0:9d:2c:62:36:c5:d5:17:
         1f:6f:02:01:2f:dc:4e:e0:06:71:ae:a5:41:ed:80:1e:40:9e:
         df:8d:3e:fb:c1:6a:12:49:f9:67:e4:40:07:c5:86:d7:ab:4c:
         18:5b:65:a8:30:f4:c8:eb:2e:08:3a:b0:b8:84:ac:c9:b2:78:
         32:f1:4c:3a:de:d7:93:6d:60:ba:8f:ad:a3:58:95:d2:44:f4:
         22:46:a4:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:43:36 2026 by rpki-client