Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c380490a-815f-3f5a-b752-75d764510f9c.roa
File:                     c380490a-815f-3f5a-b752-75d764510f9c.roa (raw, json)
Hash identifier:          YPLBariY3GWK+CtnA6vpppaKRKLHP1ZlYQOfxcELN3A=
Subject key identifier:   97:C5:F9:9F:D4:CE:C0:47:AB:47:5C:39:05:F2:77:AF:28:09:C4:71
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584D75D5205F86CBEC63E8B5B380
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c380490a-815f-3f5a-b752-75d764510f9c.roa
Signing time:             Fri 10 Apr 2026 13:00:31 +0000
ROA not before:           Fri 10 Apr 2026 13:00:31 +0000
ROA not after:            Thu 09 Jul 2026 13:00:31 +0000
asID:                     30036
IP address blocks:        2604:2e8c:c00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:75:d5:20:5f:86:cb:ec:63:e8:b5:b3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Apr 10 13:00:31 2026 GMT
            Not After : Jul  9 13:00:31 2026 GMT
        Subject: CN=85e76ca7-3d50-41e9-8582-4f8c73643763
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:54:2c:2c:2a:8c:0e:87:08:5b:e9:42:a5:d3:
                    d9:4a:a3:c4:ed:83:ca:45:f9:53:e6:88:0f:27:a0:
                    69:96:ad:47:33:e1:33:88:be:f2:76:0f:4e:7e:5e:
                    81:da:c0:ce:ef:1f:47:ee:62:c8:61:34:85:d4:d8:
                    c4:41:af:18:99:ec:fe:53:1a:c3:07:b9:0a:e9:54:
                    bf:7e:fd:2a:58:eb:83:82:c6:00:5f:e2:6e:f6:69:
                    c4:c4:81:05:49:47:13:d0:33:32:36:d3:df:04:d4:
                    2f:27:06:bc:94:a6:8d:bb:58:5b:5e:e4:32:7b:ec:
                    5f:5e:ce:9a:d1:13:9b:61:4e:57:bb:a9:12:4d:55:
                    d9:bc:39:65:26:aa:6e:6f:78:31:05:12:db:b4:c5:
                    e0:1c:b5:24:3f:b7:9a:23:ff:68:ec:e8:0d:bc:c4:
                    36:07:99:51:df:e7:4d:c1:32:0f:6a:bf:45:be:c1:
                    ec:88:72:70:48:4e:3c:33:33:df:ee:55:dc:3d:e8:
                    16:64:3a:9c:2d:a4:91:45:ea:11:e2:d4:4d:f6:aa:
                    9d:73:3d:31:19:71:84:d3:2e:bd:f2:b1:1b:82:37:
                    1a:bc:79:3c:79:cd:d0:a0:19:b4:d1:73:4e:70:1f:
                    aa:e7:54:5f:b6:5c:5b:fa:28:91:d3:29:c8:f4:8d:
                    2f:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:C5:F9:9F:D4:CE:C0:47:AB:47:5C:39:05:F2:77:AF:28:09:C4:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c380490a-815f-3f5a-b752-75d764510f9c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8c:c00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:89:bb:93:0c:ff:aa:14:59:85:8d:4e:72:d9:4f:2a:66:25:
         92:2c:cc:36:8f:99:fa:39:eb:69:13:bf:c0:0d:72:c5:ad:fc:
         78:dd:be:d1:28:01:f6:59:d2:87:bc:6b:fa:2c:42:e1:ac:f3:
         10:c3:26:61:8f:24:8c:8e:7a:be:d7:a8:18:3f:99:16:20:a6:
         7f:05:27:80:5a:6c:5b:f8:98:07:2f:61:2e:e4:58:6c:56:19:
         63:cf:7b:aa:27:a8:87:65:41:a8:55:8b:29:57:85:e3:99:3d:
         33:b0:1a:b7:13:4e:6a:68:6b:1e:ae:ba:1e:8d:89:24:3d:d4:
         f9:6f:a9:36:f8:dc:ee:07:d8:39:a3:83:53:b1:c4:ba:61:41:
         53:fa:a9:fd:05:ae:ff:fd:12:33:fd:11:97:fc:79:5c:c8:b9:
         aa:3d:0c:7e:20:2b:e5:e6:28:32:f7:06:1b:b5:29:bf:99:76:
         fd:f6:65:c5:a9:ba:eb:52:5d:75:0f:a9:a3:a5:08:e5:4a:eb:
         be:e8:87:86:11:1f:d5:51:46:87:32:16:c3:0c:11:c8:02:c4:
         63:76:b3:27:bf:da:7b:2a:e1:ae:f2:b1:18:9d:57:1d:8d:87:
         0b:8b:bf:6d:07:62:88:1f:e6:50:7a:e1:53:ab:cd:b1:e7:3d:
         cb:7e:f7:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:50:26 2026 by rpki-client