Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/32151873-ec7e-3099-929c-8e5875f9a843.roa
File:                     32151873-ec7e-3099-929c-8e5875f9a843.roa (raw, json)
Hash identifier:          Jq7L3d/gmR/QWplmpcTwML7whxaVCVH5HDSEvw1nEoU=
Subject key identifier:   93:13:B3:F3:9E:A6:08:58:79:53:E2:15:1D:33:00:1B:83:11:89:F6
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584D71A524CD8FC8E5EC4D282100
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/32151873-ec7e-3099-929c-8e5875f9a843.roa
Signing time:             Thu 09 Apr 2026 01:00:23 +0000
ROA not before:           Thu 09 Apr 2026 01:00:23 +0000
ROA not after:            Wed 08 Jul 2026 01:00:23 +0000
asID:                     30036
IP address blocks:        2604:2e8f:8080::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:71:a5:24:cd:8f:c8:e5:ec:4d:28:21:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Apr  9 01:00:23 2026 GMT
            Not After : Jul  8 01:00:23 2026 GMT
        Subject: CN=6bf357fd-f6ca-47a8-9cc9-781ab3c513b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:60:ab:7e:1d:72:42:56:46:b5:be:ef:e0:56:
                    9c:6e:a5:f7:d5:02:69:7a:28:30:d9:f7:9a:e0:09:
                    cd:7e:c4:27:96:62:01:b5:cb:63:a4:a6:67:a2:ce:
                    9b:5a:c0:0c:a9:cf:61:4d:4c:50:c9:fc:2e:c9:2d:
                    43:0a:8e:ef:27:e3:4a:ab:17:9c:16:84:c6:7a:ec:
                    74:dc:05:4b:38:d3:02:86:2f:e0:db:d0:77:b4:a7:
                    8f:86:68:37:9e:e2:5f:42:d6:f7:9c:f0:2b:56:60:
                    63:09:3b:1a:a6:dc:f3:7a:cc:7d:c1:8f:66:ba:26:
                    db:09:af:06:28:58:fc:aa:2f:0a:1e:1f:2b:0d:a4:
                    8a:b3:44:65:08:93:06:f1:4c:e8:90:c5:30:55:f5:
                    b2:3f:66:8f:e3:1e:fa:c0:7a:ed:84:39:5f:dc:3e:
                    aa:a9:96:89:e0:ab:ab:9b:65:78:42:59:6c:5f:3f:
                    fd:b3:dc:65:a6:a6:c3:59:47:1a:ec:95:ea:e7:0e:
                    97:50:c9:e0:f0:12:af:e7:dd:db:5d:72:41:9f:a8:
                    73:84:3d:9a:46:7b:d0:99:65:e9:5b:c9:ab:d0:10:
                    71:76:ba:1e:8e:1c:9f:0d:53:8b:fb:e0:ac:c5:93:
                    c9:a4:4d:1c:b1:bd:9d:7f:f8:c6:05:68:f6:86:d5:
                    7a:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:13:B3:F3:9E:A6:08:58:79:53:E2:15:1D:33:00:1B:83:11:89:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/32151873-ec7e-3099-929c-8e5875f9a843.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8f:8080::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:91:7c:18:de:43:17:be:21:d3:9b:d7:73:45:2d:de:49:fa:
         e1:d2:7d:d4:c6:8f:e8:6e:ac:6a:44:bf:c5:4e:47:d6:1b:34:
         35:06:e9:a8:f3:d5:ff:f3:ad:e0:ad:de:b8:90:c2:68:7d:c4:
         11:02:25:4d:f9:97:b4:7f:78:d0:81:f5:26:33:88:45:13:a1:
         48:f3:36:9f:79:e8:5c:4a:15:d0:3c:e9:3f:96:84:6a:47:88:
         a4:6c:5c:bc:42:8b:0b:3c:69:94:b0:5a:13:75:b5:14:bb:b9:
         c2:a6:83:86:cd:a1:26:46:71:5c:64:83:a9:22:c8:f5:3a:a5:
         c0:67:ff:28:7c:cb:1f:bc:02:eb:57:35:15:ed:07:23:fc:48:
         c3:75:87:37:31:03:64:24:2f:32:83:19:92:7b:c7:02:97:90:
         22:97:31:94:b5:83:39:42:79:fe:27:98:b2:63:60:2e:75:c0:
         00:a8:b1:58:17:5e:9c:28:d0:dc:14:ec:96:ec:26:6e:29:e1:
         01:d1:73:5e:17:13:e6:ee:f1:36:78:7e:91:5d:9b:52:10:91:
         5d:b6:29:71:5b:57:c0:ea:03:bc:1d:fe:01:ed:b1:f4:88:4d:
         86:b1:1e:bd:79:fa:9f:71:f1:96:3b:20:8a:9b:56:a0:18:3a:
         2c:ab:c2:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:33:11 2026 by rpki-client