Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4691484a-b551-3207-a7de-902605b6e48a.roa
File:                     4691484a-b551-3207-a7de-902605b6e48a.roa (raw, json)
Hash identifier:          a7oX7/FQyhJR+Ni0mPTTQqQCD7b+Nhw0DmEOE/RL1VI=
Subject key identifier:   FF:D0:98:AF:1B:68:53:BF:36:15:62:41:5B:E3:7E:D1:74:48:79:70
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584D75D52F5D0BEA0367D5042DE8
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4691484a-b551-3207-a7de-902605b6e48a.roa
Signing time:             Fri 10 Apr 2026 13:00:31 +0000
ROA not before:           Fri 10 Apr 2026 13:00:31 +0000
ROA not after:            Thu 09 Jul 2026 13:00:31 +0000
asID:                     30036
IP address blocks:        2604:2e8b:4c00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:75:d5:2f:5d:0b:ea:03:67:d5:04:2d:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Apr 10 13:00:31 2026 GMT
            Not After : Jul  9 13:00:31 2026 GMT
        Subject: CN=2d6a9d3f-a6c7-4c60-a77d-20df92dfb69f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:b8:1a:9f:d1:c4:09:19:a3:b9:61:45:94:1d:
                    ae:a3:11:3a:55:06:b6:d3:16:19:ea:86:57:8f:3b:
                    f1:55:62:c0:79:10:9a:e0:08:8a:e4:8e:bd:7c:f1:
                    c4:12:f6:8d:51:b5:b5:a0:02:87:17:c7:f3:7f:f3:
                    9e:92:09:83:f2:af:58:6c:26:23:62:51:b8:f1:a3:
                    9f:54:45:f5:84:c2:45:fa:0a:c0:5f:3d:b5:b4:76:
                    70:03:b3:98:43:e4:d2:d9:02:16:c9:4f:f0:4a:bc:
                    74:74:e3:38:e3:21:fd:cc:d9:28:11:15:66:5d:7b:
                    36:16:6a:53:0c:05:71:04:d5:af:63:e4:2c:89:c2:
                    09:2a:02:75:f1:c8:5d:be:a9:af:de:16:40:7c:d6:
                    13:b8:c1:61:dc:34:bd:71:50:65:8a:ea:59:9a:af:
                    c1:7b:94:9a:64:1b:c1:48:a4:10:5b:94:0b:ac:5d:
                    71:22:6f:1b:65:5f:64:8f:db:11:f9:63:f3:50:cd:
                    34:ba:13:93:45:8d:f2:8d:b5:3f:2e:f5:e6:1c:e0:
                    cb:b4:9f:9f:a0:b8:28:df:c8:94:86:aa:71:ad:ce:
                    05:06:b0:85:5d:03:19:b6:5d:4a:c9:31:74:f3:1f:
                    f9:79:b5:19:12:a9:e8:3e:51:60:04:53:4b:2c:25:
                    7b:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:D0:98:AF:1B:68:53:BF:36:15:62:41:5B:E3:7E:D1:74:48:79:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4691484a-b551-3207-a7de-902605b6e48a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8b:4c00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:c5:e2:32:fa:38:b3:21:62:d7:98:55:b3:44:cb:af:9d:bb:
         c6:a1:d9:b4:f3:cb:14:f1:62:c5:3e:43:97:31:e7:e0:ea:c5:
         2b:06:61:bb:5e:f6:2f:50:1b:b1:15:01:9a:75:e1:28:90:85:
         5e:4f:17:5c:f8:57:1e:08:b1:5d:53:93:df:77:a0:d0:51:ba:
         ca:4f:44:e9:2f:f0:45:b2:0a:76:01:67:26:62:3d:96:a4:b9:
         56:4a:74:a0:54:3c:80:26:83:16:8a:d1:a2:a2:13:e8:33:81:
         24:a1:7f:61:64:55:28:81:ee:df:c1:49:82:a5:2d:47:f8:b1:
         de:c0:46:91:3b:eb:c7:c5:13:4e:21:f3:bf:d9:6d:d9:b6:56:
         4b:de:ef:5f:cc:46:89:24:36:5f:92:5a:90:75:6a:a6:90:75:
         6f:e8:c2:16:25:e0:6b:4b:99:c4:d7:f2:33:58:31:3d:57:ab:
         33:6d:29:a7:84:e0:a3:8c:4d:01:6f:c8:6a:88:8b:28:4d:d4:
         fe:cc:cd:08:f1:9d:0c:b6:48:46:34:c9:d2:ca:4d:80:5e:30:
         05:ad:dc:2c:7d:ea:65:43:9c:06:dc:e0:8f:16:d0:a0:c0:01:
         2a:4e:c7:93:db:99:9e:09:11:f2:e2:fc:c2:47:82:c3:53:0e:
         2e:21:d4:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:41:29 2026 by rpki-client