Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b9c89d9d-147f-3f3c-96b5-543fa82511d0.roa
File:                     b9c89d9d-147f-3f3c-96b5-543fa82511d0.roa (raw, json)
Hash identifier:          yGw1iRCo0gCf4i2L0kt4ygAapaD7Gsiy+BqwI97l8LI=
Subject key identifier:   F4:B5:27:B7:EA:A8:35:51:52:97:12:42:ED:FA:5E:35:F6:FE:76:59
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584DFBD6242F34E9485360F662C0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b9c89d9d-147f-3f3c-96b5-543fa82511d0.roa
Signing time:             Thu 28 May 2026 13:00:12 +0000
ROA not before:           Thu 28 May 2026 13:00:12 +0000
ROA not after:            Wed 26 Aug 2026 13:00:12 +0000
asID:                     19905
IP address blocks:        2604:2e88:c800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fb:d6:24:2f:34:e9:48:53:60:f6:62:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: May 28 13:00:12 2026 GMT
            Not After : Aug 26 13:00:12 2026 GMT
        Subject: CN=1c8e96c0-354c-4181-9278-0f362c00d0d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ad:87:8d:2e:fc:b4:28:e3:ce:34:6f:cd:db:
                    dc:62:3c:f4:16:9a:fa:ea:ac:ee:20:b7:59:ef:8d:
                    2e:97:79:13:df:87:da:58:90:89:a3:6f:d2:7a:d1:
                    40:ac:06:b7:05:9c:f6:8b:f0:99:44:b6:23:91:45:
                    c0:c2:d5:2b:55:01:43:05:d8:8b:77:04:07:4a:11:
                    c2:28:44:f3:c8:d1:53:c8:9c:7c:4c:11:70:40:32:
                    da:75:40:de:65:f2:de:9b:ae:07:78:40:3c:10:47:
                    59:9c:9e:63:df:61:ef:96:61:fb:d0:c3:8f:e7:25:
                    f4:0b:88:0c:17:b8:bc:e7:f3:93:8a:90:fb:c8:06:
                    1f:91:3c:8c:66:2f:05:37:aa:0c:ed:70:1d:ac:1c:
                    66:1a:0d:63:dc:b3:4a:fb:e4:9b:ec:8b:ef:3d:d5:
                    73:da:51:85:88:ec:f5:87:7a:c8:80:e9:09:8b:4c:
                    7a:15:01:92:10:39:6d:5d:42:28:73:6f:12:a4:f7:
                    06:22:a0:4c:d7:52:94:64:41:89:fa:e6:74:69:1d:
                    ef:7d:04:69:92:fe:ef:7f:ea:95:88:d6:d2:a3:d8:
                    a7:51:21:ae:4f:29:cc:83:c4:24:e7:c9:ac:d7:63:
                    0a:04:bc:79:25:46:40:35:b2:d4:e6:9f:4f:60:51:
                    9c:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:B5:27:B7:EA:A8:35:51:52:97:12:42:ED:FA:5E:35:F6:FE:76:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b9c89d9d-147f-3f3c-96b5-543fa82511d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e88:c800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:d4:a8:28:cb:c9:d7:c4:90:f0:9e:70:cd:be:dc:95:ae:4c:
         24:54:5b:e1:10:b6:36:24:01:44:12:65:85:c9:8b:d8:d5:36:
         17:ff:03:6a:29:ea:05:27:35:a4:d0:59:75:75:ea:b2:b2:c5:
         44:f2:e3:a2:82:d8:e4:fc:97:c0:4b:65:cf:ce:30:6c:fa:38:
         c4:3c:5c:de:0b:6f:4b:7e:5f:01:9a:2e:6a:42:35:f9:85:7b:
         53:c0:c4:19:3e:17:b8:75:f9:b5:cd:09:eb:05:0b:7e:77:1c:
         df:5e:b5:9a:4a:64:b4:af:f1:a8:b5:e7:0d:38:90:f5:25:32:
         3a:97:69:ef:99:a1:e7:d6:80:5c:97:e5:c2:53:81:85:24:4e:
         f8:91:a7:69:9a:e4:b3:ec:06:4e:69:89:bd:48:65:c2:74:dd:
         df:a8:97:97:dc:ac:d0:82:2d:a7:fe:1d:56:34:4d:f0:b8:39:
         56:d0:1f:9d:41:4f:6b:77:d6:4a:28:48:29:64:7b:24:ee:67:
         24:2a:4c:83:e1:8c:eb:ee:fe:d5:56:81:5e:c1:6c:75:d2:40:
         46:6b:6f:80:d4:74:47:89:86:d4:ac:7c:25:64:ba:e3:50:87:
         2f:c7:db:63:98:78:b0:8a:54:c9:3d:f3:83:08:f8:5a:d6:8f:
         f6:88:11:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:05:04 2026 by rpki-client