Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b0f68ff6-485d-3591-8112-a04e524f31a1.roa
File:                     b0f68ff6-485d-3591-8112-a04e524f31a1.roa (raw, json)
Hash identifier:          iHTpLzBxwefwag2HQEVDSxnhIuAM95eIw0xt6Tz4iS8=
Subject key identifier:   0E:0E:AE:BA:FF:97:5E:BC:08:E7:B3:80:40:AB:33:54:27:83:45:C9
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584E1A14368AF4A465D6BE864B00
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b0f68ff6-485d-3591-8112-a04e524f31a1.roa
Signing time:             Mon 08 Jun 2026 09:00:12 +0000
ROA not before:           Mon 08 Jun 2026 09:00:12 +0000
ROA not after:            Sun 06 Sep 2026 09:00:12 +0000
asID:                     19905
IP address blocks:        2604:2e88:7400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1a:14:36:8a:f4:a4:65:d6:be:86:4b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jun  8 09:00:12 2026 GMT
            Not After : Sep  6 09:00:12 2026 GMT
        Subject: CN=b2096fe0-4e12-4eee-a438-9d5d4dc1597b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:0b:26:5c:e2:7b:99:0f:d8:33:4d:d3:71:c2:
                    b6:fd:87:6a:09:e0:ca:88:d3:68:24:08:88:8f:6a:
                    27:18:5b:6c:e7:8c:e7:2c:dc:ee:49:9b:ea:8e:40:
                    12:78:ed:50:7a:11:33:72:cc:c3:44:fb:44:7e:33:
                    fc:11:09:30:31:5f:67:02:c8:50:33:a5:e7:29:1a:
                    51:cd:14:47:43:97:3b:47:a1:6f:25:c2:5a:d2:9b:
                    60:4a:59:7b:cb:51:14:85:a7:03:43:50:d2:4f:f7:
                    be:6c:49:22:de:f8:49:30:7b:b6:af:d9:fa:7d:ad:
                    00:89:4d:26:30:a8:a6:bd:63:26:31:08:70:25:5f:
                    75:f4:d1:f3:70:d4:b7:a9:b2:f2:28:7a:98:54:c2:
                    8f:ac:6e:8f:c3:e8:d4:56:e5:34:0d:dd:9c:ef:33:
                    af:d3:ee:f8:3d:32:66:78:1f:0d:94:2d:7e:41:74:
                    f0:4b:10:28:43:cc:ca:5f:e7:80:1f:60:c8:b3:97:
                    0f:c8:b1:bd:d1:bb:90:74:dc:48:0d:30:5d:3d:4c:
                    9a:f7:19:4f:51:0e:3f:18:22:04:0a:13:c8:6d:c1:
                    0d:7f:62:11:73:2b:5b:1e:4c:98:3a:2f:01:a8:4e:
                    a5:9e:8d:ba:ed:7e:ac:2e:ce:66:1c:7e:23:23:aa:
                    d9:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:0E:AE:BA:FF:97:5E:BC:08:E7:B3:80:40:AB:33:54:27:83:45:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b0f68ff6-485d-3591-8112-a04e524f31a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e88:7400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:b3:b7:a7:0b:1d:88:0a:dc:fa:c0:58:48:b0:e2:fd:af:33:
         ee:07:01:37:b7:01:94:be:a2:9e:ba:58:b3:f5:14:2d:5f:0e:
         3c:df:0d:d9:61:c1:8e:18:26:7e:16:8c:a8:b1:9e:65:8b:1c:
         55:e9:03:2b:71:b6:9c:18:0e:02:b6:81:3e:15:f9:d5:83:fe:
         4d:6a:34:07:ee:8c:28:02:56:33:ca:1f:0f:04:be:1a:ba:73:
         27:15:3a:05:e7:48:95:52:fe:1b:18:78:03:b5:5b:85:51:c9:
         d6:fb:b2:dc:19:19:28:46:94:f1:43:07:a4:fe:4c:3b:ff:8f:
         39:20:27:cc:7e:d6:99:0b:7b:43:97:77:95:67:f7:ea:c2:e6:
         25:c9:99:a8:ac:f4:6f:98:f9:92:36:32:26:ac:67:7a:1c:90:
         d9:e6:e4:ae:b1:7a:e9:60:7c:d7:5a:6c:b6:fc:21:13:79:43:
         15:a2:d8:54:d5:ab:6d:e2:42:da:3b:be:aa:cd:6e:74:7b:d6:
         75:bf:9b:3b:10:8c:aa:7f:f8:0c:79:4c:a5:42:d6:ba:ad:cd:
         c9:83:44:e9:91:83:6c:ed:35:34:f6:7c:fc:33:c3:0c:74:bb:
         5a:ed:a6:89:19:f8:1e:c5:e9:cc:78:01:73:f7:f8:ba:21:06:
         95:0e:54:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:59:16 2026 by rpki-client