Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/6d25562a-8b81-3647-90cd-106d48d370e2.roa
File:                     6d25562a-8b81-3647-90cd-106d48d370e2.roa (raw, json)
Hash identifier:          UxQPx21X3gUWQ8cJA86j7IjFvR2q7IQcy40gUcyy65s=
Subject key identifier:   B3:CF:B9:25:95:94:85:1F:90:9A:23:C6:D0:6E:15:1B:62:95:EE:F2
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584CE5B16102D490B5ACDA46BDC0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/6d25562a-8b81-3647-90cd-106d48d370e2.roa
Signing time:             Tue 17 Feb 2026 21:52:09 +0000
ROA not before:           Tue 17 Feb 2026 21:52:09 +0000
ROA not after:            Mon 18 May 2026 20:52:09 +0000
asID:                     30036
IP address blocks:        2604:2e88:b400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e5:b1:61:02:d4:90:b5:ac:da:46:bd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Feb 17 21:52:09 2026 GMT
            Not After : May 18 20:52:09 2026 GMT
        Subject: CN=6c0ed86d-c680-4097-aab8-5450a099673c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:4e:b3:27:41:63:0d:2e:45:14:5b:36:bb:d6:
                    e5:1b:87:97:5f:77:93:e9:c8:b5:95:90:02:1b:fe:
                    81:b4:72:a4:ec:28:32:a5:a2:62:69:6f:bd:b5:a9:
                    9a:b8:6f:41:fa:9e:6a:3c:69:92:49:d2:7b:d1:de:
                    d1:e9:de:a8:f5:25:c3:a4:68:a4:e2:ff:c6:74:60:
                    6e:6e:1c:a0:ca:2b:fc:be:65:ca:79:37:2e:2b:d7:
                    3d:c5:b8:5b:6b:dc:e9:52:72:b9:d6:86:92:1f:3d:
                    cf:52:ad:69:a1:03:06:7d:3d:db:7f:94:bb:51:18:
                    2b:54:d8:cb:89:18:f1:42:d2:33:2a:90:71:b2:53:
                    88:08:5b:80:b0:ca:eb:c8:b3:3b:2b:75:0c:f5:4c:
                    8a:23:82:d3:c3:ff:f1:23:b4:86:a2:37:b7:a8:f3:
                    38:09:af:8d:ae:c9:11:42:d0:49:e9:8d:e1:3e:73:
                    81:c7:40:7a:21:26:53:c6:1a:ac:1e:a6:f8:64:85:
                    fa:df:38:84:bd:f0:02:98:d3:e3:c3:96:af:70:d1:
                    8a:42:11:90:4a:58:c8:7f:0d:00:f9:1d:e9:45:88:
                    88:d3:a5:c0:43:ba:f4:49:c0:8c:06:b6:11:f5:03:
                    aa:83:03:05:c6:06:da:11:04:5b:6b:09:32:b2:5e:
                    ea:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:CF:B9:25:95:94:85:1F:90:9A:23:C6:D0:6E:15:1B:62:95:EE:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/6d25562a-8b81-3647-90cd-106d48d370e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e88:b400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:3a:4c:57:78:9e:f0:70:ee:4e:d9:54:55:c1:b7:01:81:ec:
         7b:f2:17:dc:95:4a:79:b1:e8:c2:c5:e0:c7:7b:12:e3:28:a0:
         7f:10:f2:ee:54:a0:cf:b0:1b:78:77:99:04:bb:d8:07:84:03:
         ca:7a:ce:80:70:38:bd:3f:ec:87:a3:e0:0e:e1:d1:64:8d:a4:
         ef:11:a4:98:fc:dd:3e:0b:46:04:a5:28:49:bb:ca:a7:1b:aa:
         cd:b6:34:8a:0f:89:4e:0f:7f:15:02:9f:e1:65:76:e1:1e:30:
         90:6f:56:aa:13:d6:f3:c9:ca:c3:9d:c1:35:c6:4a:c8:26:5c:
         de:e9:cc:d6:ab:3c:f8:fc:f3:73:62:e3:4c:38:d0:4c:34:1c:
         21:41:c6:ce:a0:46:c1:d1:44:a6:f9:58:8c:7e:f3:42:55:5f:
         25:a3:d4:7d:ea:29:d5:ff:05:ab:8e:b8:ff:a0:70:4a:40:44:
         17:b5:7f:e2:03:1c:8d:71:34:07:bf:a1:b2:9a:a9:ef:93:f3:
         ef:a2:84:95:f3:3f:e1:73:4a:28:4d:f3:9b:e9:31:fe:e9:cf:
         0f:d7:aa:76:26:1a:3f:94:42:13:9d:cf:b6:87:03:a2:6c:5d:
         74:5e:9b:ab:56:6f:ba:91:e0:a9:f0:2e:89:0f:d0:b0:c8:bc:
         b1:ff:6a:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:45:04 2026 by rpki-client