Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/652e8ba8-76eb-3ba1-89c2-20dce02a6690.roa
File:                     652e8ba8-76eb-3ba1-89c2-20dce02a6690.roa (raw, json)
Hash identifier:          YFslFbXGBuWO6UX+J5Hk/7aAUlxLZm9v95WcKi+hX9A=
Subject key identifier:   29:A2:40:31:2C:0C:3B:71:56:FB:33:CD:0F:D2:9A:FE:E8:28:2B:FF
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584E0435D44B8AB0CCC7064B3300
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/652e8ba8-76eb-3ba1-89c2-20dce02a6690.roa
Signing time:             Sun 31 May 2026 13:00:10 +0000
ROA not before:           Sun 31 May 2026 13:00:10 +0000
ROA not after:            Sat 29 Aug 2026 13:00:10 +0000
asID:                     30036
IP address blocks:        2604:2e88:2000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:04:35:d4:4b:8a:b0:cc:c7:06:4b:33:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: May 31 13:00:10 2026 GMT
            Not After : Aug 29 13:00:10 2026 GMT
        Subject: CN=9205b627-f373-401d-92d0-69b2992e5b74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ba:3f:b7:ba:da:47:28:0b:22:a6:1a:7b:49:
                    45:32:22:64:4e:f2:e6:ce:35:de:fc:c2:78:0e:3e:
                    c8:c1:c0:fc:10:e4:34:17:d8:63:d6:4c:b8:2f:e8:
                    c6:3d:8d:00:8e:31:1e:3e:25:5d:22:9f:81:45:82:
                    3e:23:80:30:9c:c5:72:7e:a3:b1:f5:6f:df:4a:0f:
                    ec:f0:e6:25:e5:6e:a3:a7:72:cd:e3:2d:ab:fa:8f:
                    0c:a2:27:2f:74:3d:15:48:9b:7c:b9:b7:c9:cf:0f:
                    6a:38:ce:a8:7b:3e:26:4d:90:f1:bb:5b:ff:9c:83:
                    38:b7:2b:dc:35:03:f5:21:76:a6:1d:a1:22:9e:01:
                    cc:c6:3a:3f:0f:71:23:a3:d5:00:3c:a4:32:00:02:
                    8d:8b:f4:c5:a9:eb:3b:df:86:f0:0e:be:ae:5e:cd:
                    3b:a4:d0:e5:75:4b:ea:e3:16:bc:be:ff:3e:bf:83:
                    a9:96:12:2b:75:4d:2d:80:34:d0:fc:a5:b1:23:57:
                    ec:45:04:5e:95:e8:66:51:6b:70:e5:ab:46:7c:86:
                    ff:c7:7c:4b:74:6e:5a:b6:88:56:80:fa:7d:69:b7:
                    44:f3:3f:85:31:19:03:94:a9:ad:40:59:ee:e3:5e:
                    28:ed:03:2c:c9:1b:25:c5:5e:41:56:8c:24:0f:f4:
                    c6:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:A2:40:31:2C:0C:3B:71:56:FB:33:CD:0F:D2:9A:FE:E8:28:2B:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/652e8ba8-76eb-3ba1-89c2-20dce02a6690.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e88:2000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:d5:30:dc:f6:25:78:e9:8b:cf:70:31:bb:5a:1d:7a:d0:17:
         82:48:1b:90:63:d1:bd:79:21:51:48:14:c4:dd:7e:e4:42:a3:
         77:6b:e4:60:e4:03:fa:28:06:c7:1d:12:41:49:21:f8:16:a6:
         a3:cb:7d:db:cc:28:b2:85:57:18:87:67:2b:4d:30:eb:dd:e7:
         4b:b0:35:36:b2:69:24:f8:fc:0c:56:9f:32:ab:03:d8:83:f4:
         26:c0:9f:cf:48:46:f3:4d:91:1d:8c:5a:46:fc:24:a1:40:21:
         d9:da:67:46:32:e0:4c:ee:9d:36:46:6f:1c:80:4a:dc:1b:02:
         c7:17:0a:20:d4:32:b2:71:27:0e:90:61:29:3c:fc:9b:1d:d7:
         b7:79:2c:5d:fc:85:40:6b:ad:db:9b:75:ce:17:eb:72:38:76:
         0d:5b:f0:31:bc:62:e4:7f:68:1e:69:09:bf:a5:33:1d:23:eb:
         f2:91:39:32:b2:88:c6:42:ea:65:7f:03:fe:b8:a0:26:ea:c4:
         f0:fa:db:5a:46:08:f6:a9:51:6f:6d:7e:d4:7f:27:bc:01:63:
         ba:94:e6:69:84:e1:5b:aa:c9:4e:17:a2:ba:ba:51:b8:f3:b6:
         c3:3f:bd:59:99:4b:92:36:ca:12:ec:71:8f:8b:e6:de:ca:5e:
         38:a4:7f:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:25:57 2026 by rpki-client