Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cc4ac44a-2d8c-3d40-884e-7009af004650.roa
File:                     cc4ac44a-2d8c-3d40-884e-7009af004650.roa (raw, json)
Hash identifier:          dv+CU49rY3zNOagilQZKHxDromCwuVlPDtvy1db336U=
Subject key identifier:   AB:07:52:F3:EC:15:1C:F5:36:B6:F9:EA:C8:AE:19:20:9D:C3:8A:BF
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584E059C76ABA636671C29AC1B80
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cc4ac44a-2d8c-3d40-884e-7009af004650.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     30036
IP address blocks:        2604:2e8a:d800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9c:76:ab:a6:36:67:1c:29:ac:1b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=3b8952dc-a7cb-4f68-8972-af905d12adf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a4:a8:25:7e:76:d1:ec:bb:b7:c4:c0:52:e7:
                    d3:6d:1f:b3:20:0d:2b:eb:38:db:21:f9:a8:40:54:
                    1d:0a:83:7f:a9:fc:62:22:f7:7c:7b:1d:e9:b6:9a:
                    e4:4b:67:2b:b5:df:b8:3e:02:56:56:4f:14:ad:4b:
                    0a:44:e1:32:93:76:a7:a5:69:19:d9:c2:6d:84:5e:
                    81:aa:5b:59:01:53:68:78:7b:33:7f:b1:29:f2:31:
                    48:a2:ab:d7:dc:aa:c6:84:33:78:3c:77:4a:d0:7f:
                    fa:56:a7:0f:92:91:7e:c5:52:f1:bc:cd:6c:5e:f9:
                    d0:a8:8a:91:2c:87:78:ae:83:00:18:88:28:bf:b4:
                    76:38:e4:a4:cd:a3:17:00:70:c2:40:9f:8f:98:43:
                    0a:5b:c3:c1:ed:17:03:97:4d:d5:27:9a:ef:b9:04:
                    13:9e:36:39:3a:ae:96:59:a9:67:00:b8:5f:a4:cc:
                    b6:19:7a:3f:c6:06:9c:95:ca:69:ba:aa:61:1f:0d:
                    9e:e3:a3:75:31:94:33:72:26:d6:a6:e9:50:61:0b:
                    e9:40:36:9f:53:39:76:4b:0c:dc:84:bb:43:03:06:
                    ea:70:53:74:7c:92:bb:1f:fb:3f:78:81:e8:8f:3a:
                    cb:c2:ad:96:19:51:9c:2f:d1:77:91:8d:b1:26:d3:
                    94:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:07:52:F3:EC:15:1C:F5:36:B6:F9:EA:C8:AE:19:20:9D:C3:8A:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cc4ac44a-2d8c-3d40-884e-7009af004650.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8a:d800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:d1:0f:25:1d:cc:d9:b9:3f:1d:c1:ae:dd:3a:14:48:fe:55:
         bd:7b:d4:a9:2a:72:a6:65:5e:98:e2:74:ba:2c:4f:51:42:40:
         f7:9f:05:75:da:9d:ea:e5:8b:bb:e4:7e:ae:dd:2d:5c:ef:c9:
         20:ac:43:85:a0:53:97:f6:21:00:9e:9d:02:cb:98:30:23:39:
         2b:51:c7:19:2d:e2:e1:b5:ad:5a:c6:f3:ad:ef:82:b0:19:84:
         e1:53:2b:af:8c:0a:37:48:d7:0e:11:7a:90:96:94:0a:3b:1f:
         61:c6:14:9b:2e:d4:96:3e:f2:f8:f1:27:89:b9:71:19:83:63:
         27:d4:3a:9e:a2:05:ae:d4:5d:b7:10:0c:a3:da:4e:c1:8a:3e:
         ff:f4:61:ea:53:da:8a:25:f5:52:74:1a:35:fe:61:7f:1c:35:
         a7:86:eb:b7:d3:d4:54:f8:a8:10:ff:85:23:4a:e6:0c:43:03:
         16:7b:6e:2b:9a:93:98:0a:1f:dd:35:f4:4d:d5:a4:4f:04:2b:
         e8:f7:fb:48:4e:6a:51:86:38:73:43:f0:63:6d:49:c6:0a:42:
         85:73:25:c9:86:8a:7c:a1:94:83:27:22:5c:56:86:22:90:e2:
         c9:9d:60:5f:34:25:f9:4a:17:b6:92:0d:9c:eb:8b:b8:9f:8a:
         8e:d1:3e:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:39:59 2026 by rpki-client