Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/7dc6a19a-23ec-3346-84ac-69ed24443f55.roa
File:                     7dc6a19a-23ec-3346-84ac-69ed24443f55.roa (raw, json)
Hash identifier:          2eDp6gV9BlF5pZ2wekO9KQtVEV2UuMDXwp6kCrWhJpw=
Subject key identifier:   9E:5B:9B:39:FB:04:6B:B0:7A:A4:C7:1D:3D:EE:5B:96:2C:9B:D9:97
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584E0435DC048A9E1750CE80A200
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/7dc6a19a-23ec-3346-84ac-69ed24443f55.roa
Signing time:             Sun 31 May 2026 13:00:10 +0000
ROA not before:           Sun 31 May 2026 13:00:10 +0000
ROA not after:            Sat 29 Aug 2026 13:00:10 +0000
asID:                     30036
IP address blocks:        2604:2e88:e000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:04:35:dc:04:8a:9e:17:50:ce:80:a2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: May 31 13:00:10 2026 GMT
            Not After : Aug 29 13:00:10 2026 GMT
        Subject: CN=bb65050c-25b2-4520-b4c2-f2ae761b8321
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:01:26:43:a0:58:21:b6:0e:62:41:7b:1e:bf:
                    cc:99:d8:25:25:dc:ae:46:83:e0:17:d8:7f:00:c2:
                    b3:c4:ed:a6:8d:7c:de:61:21:60:1b:6b:75:50:db:
                    85:1c:db:9d:16:4f:43:9a:f2:0e:f4:3b:e7:02:40:
                    a3:94:12:d9:b2:ea:04:1b:3a:e6:82:94:87:89:12:
                    d6:93:70:10:f8:b3:d6:4b:46:06:8c:74:0d:9f:43:
                    b0:33:88:b6:72:1d:56:7c:14:62:f8:3b:4f:52:f5:
                    3b:f1:68:78:0e:94:98:3c:7e:40:d9:2b:77:f7:f3:
                    e1:eb:0c:d7:c9:1b:2e:f6:ed:b3:01:02:ad:d3:3c:
                    70:08:6b:28:5e:89:4f:00:e7:f2:bb:d3:5a:f6:5a:
                    f2:a2:5f:00:1f:b2:ce:cb:87:2b:c4:99:43:42:8b:
                    8b:bc:3e:d6:06:eb:74:9e:6e:a1:5c:4c:c7:da:12:
                    91:71:42:1e:0d:6f:de:44:49:8e:a4:dc:5b:4d:c1:
                    b1:a2:b2:a1:df:7a:1a:9a:52:b4:36:1b:06:a1:c4:
                    3c:47:4d:cb:f9:d2:1e:7c:5a:17:0e:7f:e9:a0:cd:
                    99:43:06:74:96:50:e0:f3:9d:e6:31:b8:d2:bd:a5:
                    05:83:a0:34:19:46:98:84:e6:a0:e8:ff:35:00:06:
                    fd:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:5B:9B:39:FB:04:6B:B0:7A:A4:C7:1D:3D:EE:5B:96:2C:9B:D9:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/7dc6a19a-23ec-3346-84ac-69ed24443f55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e88:e000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:3e:f1:1d:4c:35:37:e0:be:9f:8b:6f:81:67:d2:d0:dd:11:
         7c:ac:58:5b:37:55:d4:84:60:db:1f:84:a4:9f:26:e4:37:21:
         99:90:7c:55:40:6c:6f:d0:8b:29:58:73:ae:90:ee:f1:45:2d:
         38:23:4c:b4:a3:cd:e0:a0:d1:d7:fe:ea:f2:57:55:9c:29:a6:
         ed:ed:2d:98:e4:6d:dc:25:e8:46:b3:3a:9b:3d:48:5e:2a:2f:
         36:15:8d:50:0c:c2:0b:f5:9d:63:62:10:80:8f:e5:68:6a:1e:
         42:f5:c0:12:5b:75:09:cd:4e:c3:5b:fb:41:24:7e:ea:a9:1a:
         e0:c0:96:ff:b3:f7:a9:f1:bd:16:ba:b4:fa:e0:9e:bf:4f:71:
         36:2f:69:41:04:b7:83:5f:7a:de:88:30:28:50:f9:91:fa:b8:
         70:fa:8b:b0:47:4b:a3:c9:80:fc:af:38:dd:5b:83:dc:fe:bf:
         f3:86:23:56:6f:56:1c:c4:20:c0:29:5f:04:83:29:68:1e:24:
         73:46:9b:39:4b:39:20:61:e4:c0:95:f9:e7:76:74:04:2b:d1:
         2d:d9:26:19:5c:2b:be:1f:17:af:b7:fb:82:5f:07:60:e5:53:
         fb:81:d0:54:a4:ea:8a:d7:cf:21:8c:19:81:a9:69:99:6c:31:
         4e:80:47:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:45:45 2026 by rpki-client