Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/81a66150-d8c8-33b9-bfd9-eb1cf0761e4e.roa
File:                     81a66150-d8c8-33b9-bfd9-eb1cf0761e4e.roa (raw, json)
Hash identifier:          He/xHR9kPRhpnGeGRLkyxebhZmqZ8x++xZ5M2XgJguc=
Subject key identifier:   8E:C4:C6:4A:07:4C:2A:B2:12:2A:A0:26:AB:36:96:59:2C:6A:1C:80
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584D5E1A805FE5FB156B98A952A0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/81a66150-d8c8-33b9-bfd9-eb1cf0761e4e.roa
Signing time:             Thu 02 Apr 2026 01:00:23 +0000
ROA not before:           Thu 02 Apr 2026 01:00:23 +0000
ROA not after:            Wed 01 Jul 2026 01:00:23 +0000
asID:                     30036
IP address blocks:        2604:2e87:3000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5e:1a:80:5f:e5:fb:15:6b:98:a9:52:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Apr  2 01:00:23 2026 GMT
            Not After : Jul  1 01:00:23 2026 GMT
        Subject: CN=97da99f2-4ea3-4d76-affe-b916ac5fe14f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:df:13:31:66:80:de:a5:fb:c5:38:79:4b:ab:
                    fd:fb:a0:bc:fa:db:c5:87:f8:bb:82:7e:21:10:81:
                    2e:df:81:b7:04:91:54:56:ea:95:31:da:38:27:5a:
                    f8:90:d5:87:6d:cf:31:1d:e2:c7:c6:34:27:0d:1c:
                    d0:81:ae:b0:93:78:32:9a:be:33:8a:68:4e:8c:ce:
                    b6:cd:d2:2d:aa:77:09:b5:3d:67:4d:87:a4:47:23:
                    f4:e2:70:76:cc:ae:82:01:cf:ad:fc:5f:7f:b3:97:
                    c8:39:af:5d:c8:09:43:f8:12:22:97:b5:97:7c:79:
                    ed:91:99:34:8f:ce:b0:33:14:22:e8:83:59:40:d2:
                    9b:24:79:f0:b0:76:b3:7b:ee:6e:da:d8:d7:be:91:
                    b7:29:7f:fc:39:22:91:00:c4:7f:93:5a:b3:39:bd:
                    e3:29:9d:b2:d3:22:24:61:35:53:01:a8:50:50:23:
                    fa:73:63:5c:56:b1:0e:f3:c2:f9:59:a3:e7:2d:73:
                    cf:a3:9e:75:26:25:91:6d:5b:4b:00:cb:13:7a:c4:
                    9c:1c:49:d7:56:84:a1:2c:c6:19:16:78:6d:4f:7b:
                    98:a2:88:e8:ec:0a:c4:36:85:a3:a4:1b:47:90:05:
                    6d:fc:2e:14:db:ea:74:7c:05:94:9f:5b:dd:17:22:
                    c7:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:C4:C6:4A:07:4C:2A:B2:12:2A:A0:26:AB:36:96:59:2C:6A:1C:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/81a66150-d8c8-33b9-bfd9-eb1cf0761e4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e87:3000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:40:3f:8c:ac:0b:f6:46:79:0c:b5:c9:0b:41:4a:19:23:80:
         55:21:63:a7:ca:56:70:a1:54:62:79:9d:2c:cd:99:d6:83:d0:
         43:51:93:6a:54:34:1b:21:0e:46:e2:0d:84:0b:26:5f:35:af:
         55:9d:44:cb:71:ff:b4:80:c7:03:02:9c:6c:eb:ee:0e:be:fe:
         18:b7:0b:41:7e:ed:9b:6c:88:36:f8:e8:57:95:8b:12:fb:cc:
         6e:ec:7f:ae:7f:68:0e:40:b4:bd:42:d1:b9:bc:61:ef:b3:a1:
         52:fa:92:64:90:6a:f8:57:ff:d4:64:d4:ba:82:d9:e6:03:37:
         f8:00:34:dc:1c:b4:f6:df:2f:ca:10:b7:60:15:e1:fe:e7:ca:
         21:1b:b0:95:95:19:e8:c9:1c:20:dd:b7:a5:8d:4b:96:74:39:
         80:e9:9f:0d:c3:97:94:1c:d3:b4:41:7c:47:96:9c:3c:73:39:
         8c:a9:cb:da:7b:34:36:ae:29:90:ab:6d:a0:7c:bb:a7:35:a4:
         c3:23:ef:6a:06:71:a7:7f:79:e5:d3:fb:36:87:e0:df:d0:c7:
         02:79:75:e0:63:f3:12:15:99:d2:87:ad:b8:e2:b3:4d:38:19:
         ff:f2:01:5f:27:eb:b9:ab:8b:7f:fd:6f:5a:81:8a:a1:d7:5e:
         cf:4c:14:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:33:59 2026 by rpki-client