Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/13bc8e56-d91e-3505-8d2f-375201003ccd.roa
File:                     13bc8e56-d91e-3505-8d2f-375201003ccd.roa (raw, json)
Hash identifier:          NdCVT1JyrKYcyOBEUYbpONGEtW6rryxY42yU5ZJQh4o=
Subject key identifier:   C1:AF:32:79:A3:D1:7F:29:EC:BB:E9:9A:97:68:A6:D2:8E:2A:60:8D
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584E0435F662CF87CA1CF4EC2880
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/13bc8e56-d91e-3505-8d2f-375201003ccd.roa
Signing time:             Sun 31 May 2026 13:00:10 +0000
ROA not before:           Sun 31 May 2026 13:00:10 +0000
ROA not after:            Sat 29 Aug 2026 13:00:10 +0000
asID:                     30036
IP address blocks:        2604:2e8b:5400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:04:35:f6:62:cf:87:ca:1c:f4:ec:28:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: May 31 13:00:10 2026 GMT
            Not After : Aug 29 13:00:10 2026 GMT
        Subject: CN=c59e43bb-39a3-4803-b16b-bddeb04c7aec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:91:32:c8:12:3b:ab:ca:8d:3e:59:af:71:f9:
                    2f:51:1a:87:a0:4d:da:87:94:04:04:9a:12:0c:cd:
                    ee:bb:6c:b9:06:9b:90:af:99:cd:4c:62:45:0b:59:
                    36:82:6d:20:4b:36:30:32:86:a4:e9:1c:7b:ed:89:
                    f0:e4:cf:80:5b:ab:fb:54:a8:7d:b4:28:58:bb:16:
                    91:6b:93:44:f2:a0:2d:bf:55:58:58:e9:8b:b5:4f:
                    a0:94:4d:8f:e0:ed:eb:a8:a9:74:e1:10:f4:6d:c1:
                    c7:5b:ef:b7:84:80:d8:49:93:0d:31:0b:7b:2c:d2:
                    75:4a:11:13:ad:a1:44:9a:1d:87:18:e1:da:49:a5:
                    ff:1f:cd:8f:b4:50:1b:d5:f7:ec:ca:5d:fc:d4:6f:
                    ba:1c:05:aa:f8:7e:85:4c:65:15:4d:23:a2:f0:ad:
                    6e:c6:45:c3:5d:63:a9:95:a0:2d:ae:a0:75:ea:1c:
                    46:36:55:31:d2:24:bc:e2:de:46:c4:2b:48:5c:7d:
                    ba:cd:bf:57:6c:5e:3f:e2:fc:c8:ba:3b:da:a5:c0:
                    48:1c:c4:bc:0d:e1:1b:46:73:78:90:14:48:45:09:
                    7f:fe:61:54:90:cc:cd:fb:9a:72:13:5f:8f:3a:9b:
                    98:74:49:17:be:05:69:f8:8d:16:3c:a4:02:00:45:
                    df:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:AF:32:79:A3:D1:7F:29:EC:BB:E9:9A:97:68:A6:D2:8E:2A:60:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/13bc8e56-d91e-3505-8d2f-375201003ccd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8b:5400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:fb:ee:31:6f:8e:f3:f4:b6:e7:0c:c1:09:e4:38:b4:ef:2b:
         9e:da:0b:e0:b1:67:33:3c:54:52:07:0f:7d:5a:11:f8:1c:c1:
         6e:95:06:45:df:27:9e:3a:8c:0b:93:2d:9f:6c:86:aa:23:54:
         78:3f:d6:35:e5:5a:14:4c:96:0a:bf:ed:2b:f3:e5:f0:ee:68:
         67:54:55:2a:1e:dd:e0:ed:6f:99:ec:79:cb:2d:ac:a7:b4:c8:
         2a:55:fd:76:7f:b0:ca:67:d7:51:26:4b:d4:34:ef:e8:3f:24:
         11:fe:52:89:12:59:d2:6a:af:06:54:6f:3d:56:db:ab:4e:89:
         57:94:cc:cb:2a:9f:8f:61:be:c0:2f:7b:9d:ce:25:01:d4:ea:
         0d:c1:f4:a1:fd:5b:20:95:b5:81:d5:63:f1:ac:16:26:e0:61:
         2f:d9:d6:1b:ee:30:c3:6f:b3:d0:c5:a5:39:c9:8a:c4:17:33:
         3d:72:cf:75:59:e0:df:31:0a:b8:4a:7a:30:e5:9f:ff:2f:3c:
         7b:9e:a5:2f:ec:2a:90:04:6f:51:23:db:a7:09:24:3c:8d:fd:
         c0:c9:16:f1:3f:4a:83:ed:7b:e6:4f:2b:03:9a:0e:6a:35:82:
         a3:e8:87:37:25:62:94:bc:c5:a4:d2:37:55:fa:54:af:57:1c:
         90:92:d2:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:34:33 2026 by rpki-client