Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/7dc0127b-7879-3319-be41-9fa9676a5efb.roa
File:                     7dc0127b-7879-3319-be41-9fa9676a5efb.roa (raw, json)
Hash identifier:          bW8GcIAnfjhCGTrurZlvkVwC+uNuYHQp6MQkjCZDFx8=
Subject key identifier:   C6:F0:A7:79:F1:70:90:4F:75:92:8D:12:20:0F:27:F2:24:50:E9:71
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584E0435E834606E207947669F00
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/7dc0127b-7879-3319-be41-9fa9676a5efb.roa
Signing time:             Sun 31 May 2026 13:00:10 +0000
ROA not before:           Sun 31 May 2026 13:00:10 +0000
ROA not after:            Sat 29 Aug 2026 13:00:10 +0000
asID:                     30036
IP address blocks:        2604:2e88:1c00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:04:35:e8:34:60:6e:20:79:47:66:9f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: May 31 13:00:10 2026 GMT
            Not After : Aug 29 13:00:10 2026 GMT
        Subject: CN=9ca759eb-b088-4ce5-9822-e0eca4dcd31c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:07:ec:29:a6:d0:f1:77:d8:c4:16:cb:9b:f4:
                    95:24:4f:16:93:4b:c8:19:52:66:51:dd:57:05:78:
                    a3:44:dc:04:4c:83:be:fe:47:06:b7:c0:92:70:02:
                    ef:18:71:96:17:b3:5b:12:a1:90:3b:f1:7a:27:95:
                    d6:b0:3e:5a:60:2b:3c:40:67:dd:26:1f:5c:9c:41:
                    5c:f2:54:20:96:78:49:a9:92:73:65:1d:ae:37:12:
                    19:2d:73:3d:e4:16:d5:d4:01:e3:e4:47:f1:51:27:
                    2b:d6:59:02:de:45:ad:49:8a:85:e5:65:48:2c:c5:
                    4d:55:44:39:9a:c7:fc:72:f8:95:a0:78:84:db:1c:
                    27:a5:9c:db:83:1d:b4:e2:79:ac:98:13:25:ec:66:
                    c9:c4:b8:54:e0:a1:1f:f2:73:79:e7:a0:d3:bc:9e:
                    18:26:18:d4:37:5c:de:29:04:74:c3:fd:69:94:52:
                    37:6a:8f:59:dd:f0:52:17:c8:d6:99:fd:4a:00:5e:
                    08:a5:c3:64:cf:56:01:ca:d1:ea:92:9b:71:15:2a:
                    8b:de:2a:bb:c7:c8:42:6a:43:18:62:6c:6b:5d:92:
                    f4:f0:7a:d1:29:4f:61:09:2e:75:ed:25:70:49:29:
                    5b:e9:c2:6e:1c:15:7a:68:46:0c:37:e4:60:33:44:
                    33:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:F0:A7:79:F1:70:90:4F:75:92:8D:12:20:0F:27:F2:24:50:E9:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/7dc0127b-7879-3319-be41-9fa9676a5efb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e88:1c00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:9d:c7:47:71:57:bf:46:8c:7a:80:70:a8:5b:5e:84:39:bd:
         aa:8c:66:e8:cb:ec:2d:02:4d:e4:5b:04:42:b6:e0:7c:d2:75:
         f0:61:af:15:75:0e:5a:74:1b:4e:bc:fe:2c:ce:52:ee:df:3b:
         f5:73:f8:5c:2f:64:55:fe:00:e2:84:3a:5f:f0:dd:50:9f:06:
         85:eb:e4:8d:67:48:c9:46:7a:4d:97:ce:81:34:d5:40:3f:36:
         8c:46:09:34:61:44:7b:f4:27:a6:39:37:81:ae:04:27:e5:76:
         cd:4d:6e:fb:54:82:01:08:98:ab:94:1b:47:ef:97:0a:d5:f9:
         db:ed:36:1f:6e:95:32:2b:6c:bd:5e:b8:4b:35:0a:7e:b8:4d:
         aa:f2:78:26:87:1d:3e:f1:f4:2e:08:7e:32:3c:c5:96:c9:15:
         d7:5c:e4:0d:3c:7f:19:27:b9:34:e4:19:ac:16:7c:0a:38:88:
         6b:62:72:6f:eb:24:73:3a:7d:8e:77:e4:2e:93:89:ad:d3:86:
         d1:e2:9c:cc:3e:d3:52:98:9c:04:46:f9:61:fb:38:55:b9:d1:
         c8:6e:fa:81:79:e4:fd:02:9a:0f:6d:ff:f2:af:6b:44:9c:47:
         a6:dd:d2:8c:39:09:4f:11:f5:77:e9:93:a1:59:59:3e:fd:ff:
         33:0e:83:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:37:47 2026 by rpki-client