Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a806a117-6302-390a-a964-5e7d12d399e1.roa
File:                     a806a117-6302-390a-a964-5e7d12d399e1.roa (raw, json)
Hash identifier:          x4BHsUQqKbQ4UxUE6mrjEhECGU54Qw98ovK01KoMYXQ=
Subject key identifier:   C7:41:63:57:8B:67:02:01:7F:52:1B:D8:D2:34:EA:87:CB:DA:33:1C
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584E059B472B078922081E54E100
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a806a117-6302-390a-a964-5e7d12d399e1.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     30036
IP address blocks:        2604:2e8d:9400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9b:47:2b:07:89:22:08:1e:54:e1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=85cec4db-8c30-4d5e-aabf-6339455200a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:18:63:85:9c:74:94:46:d2:6f:74:83:1d:93:
                    a2:81:3a:9c:e2:be:98:7c:ed:96:85:21:4b:3b:9e:
                    0a:d6:f8:6d:22:6a:f0:ab:e4:f9:da:b6:73:9d:a6:
                    a9:a5:32:13:a6:6c:be:5e:22:02:76:8a:05:58:53:
                    09:da:3b:71:f9:a7:db:b9:28:10:d7:5e:9d:8f:7a:
                    69:1e:01:f2:f3:7b:ce:ee:98:6b:e8:65:61:23:78:
                    07:d0:39:4d:ff:39:53:f2:58:52:3b:94:6d:6c:e1:
                    0a:7c:0b:83:c9:ee:cf:5f:15:86:d4:de:71:03:74:
                    43:04:23:5f:58:ef:b3:77:2b:f9:10:f5:4e:b2:f9:
                    95:ce:97:26:f8:dd:61:70:9c:63:a7:79:10:43:e9:
                    15:92:cf:b0:48:b2:ca:7f:28:f8:63:aa:fc:0d:10:
                    f8:24:3c:1f:d0:6a:0e:54:41:fb:4b:2b:03:4b:e1:
                    fa:07:fd:55:a6:5a:a8:6d:09:6c:80:ad:2c:3c:e7:
                    43:29:45:6b:3d:c9:2e:96:73:e2:33:1e:e9:3d:af:
                    35:d4:23:9f:ab:d0:26:b8:9e:e1:b3:2a:3f:0a:31:
                    32:20:d0:e3:7f:8c:06:58:0e:0e:43:a9:f8:dd:d5:
                    4d:40:c2:ca:7d:1f:4a:c5:fa:9b:63:0d:26:ea:50:
                    2d:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:41:63:57:8B:67:02:01:7F:52:1B:D8:D2:34:EA:87:CB:DA:33:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a806a117-6302-390a-a964-5e7d12d399e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8d:9400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:dd:7c:fa:19:48:b6:60:0f:ae:f5:2b:10:62:76:f2:c3:b8:
         49:fa:7c:37:ec:23:cd:67:88:29:df:ea:d1:44:d6:ea:7c:68:
         f9:ac:72:95:e5:27:bc:01:58:47:d7:8b:e0:b9:fc:21:34:0d:
         94:32:fa:bb:20:08:43:a9:b7:1a:73:dd:3b:fb:ec:34:84:61:
         32:61:ec:77:01:f8:e6:22:96:f8:a7:cf:d0:53:df:20:c8:27:
         37:74:13:49:6e:aa:22:63:e3:d2:c9:23:66:a0:e1:c8:0a:45:
         24:1f:d3:99:5c:ac:05:f1:66:53:dd:00:24:67:22:bd:af:7f:
         8d:9e:b2:2d:e4:87:5c:85:d8:6b:c6:91:bc:66:e1:a1:e2:f8:
         6a:63:7b:6f:2e:58:56:be:57:29:eb:63:09:f8:ff:96:92:1e:
         34:8a:9e:6e:a3:1a:b5:da:aa:8c:78:92:a0:10:81:41:7f:dd:
         4f:2c:28:34:58:70:51:e2:d8:f4:9d:38:b9:d8:83:44:50:85:
         5c:b1:02:b7:fc:9b:c4:c5:10:70:da:7f:ca:3a:ed:72:ac:bc:
         b7:8d:46:74:bc:22:24:f9:47:28:4e:f5:54:ff:58:dd:b7:e1:
         cd:be:56:90:bf:2e:98:84:fa:c1:ea:bd:e5:89:80:fc:21:ea:
         04:63:9d:90
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE4Fm0crB4kiCB5U4QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk
ODVjZWM0ZGItOGMzMC00ZDVlLWFhYmYtNjMzOTQ1NTIwMGE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiBhjhZx0lEbSb3SDHZOigTqc4r6YfO2WhSFL
O54K1vhtImrwq+T52rZznaappTITpmy+XiICdooFWFMJ2jtx+afbuSgQ116dj3pp
HgHy83vO7phr6GVhI3gH0DlN/zlT8lhSO5RtbOEKfAuDye7PXxWG1N5xA3RDBCNf
WO+zdyv5EPVOsvmVzpcm+N1hcJxjp3kQQ+kVks+wSLLKfyj4Y6r8DRD4JDwf0GoO
VEH7SysDS+H6B/1VplqobQlsgK0sPOdDKUVrPckulnPiMx7pPa811COfq9AmuJ7h
syo/CjEyINDjf4wGWA4OQ6n43dVNQMLKfR9KxfqbYw0m6lAtWQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFMdBY1eLZwIBf1Ib2NI06ofL2jMcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYTgwNmExMTctNjMwMi0z
OTBhLWE5NjQtNWU3ZDEyZDM5OWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujZQw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAo918+hlItmAPrvUrEGJ28sO4Sfp8N+wjzWeIKd/q0UTW6nxo+axy
leUnvAFYR9eL4Ln8ITQNlDL6uyAIQ6m3GnPdO/vsNIRhMmHsdwH45iKW+KfP0FPf
IMgnN3QTSW6qImPj0skjZqDhyApFJB/TmVysBfFmU90AJGciva9/jZ6yLeSHXIXY
a8aRvGbhoeL4amN7by5YVr5XKetjCfj/lpIeNIqebqMatdqqjHiSoBCBQX/dTywo
NFhwUeLY9J04udiDRFCFXLECt/ybxMUQcNp/yjrtcqy8t41GdLwiJPlHKE71VP9Y
3bfhzb5WkL8umIT6weq95YmA/CHqBGOdkA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 22:49:43 2026 by rpki-client