Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d1997938-a8c1-33cd-b96f-a63ae6335ddf.roa
File:                     d1997938-a8c1-33cd-b96f-a63ae6335ddf.roa (raw, json)
Hash identifier:          K/yHOqQkQxLtKoZ+S0q/tAGFL2+tVhy070XUKUrQ8xw=
Subject key identifier:   25:4F:00:1F:39:5E:55:87:4E:FD:CB:82:FE:17:CE:B0:26:33:70:38
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584E059C77C35C81E24C751BCA80
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d1997938-a8c1-33cd-b96f-a63ae6335ddf.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     30036
IP address blocks:        2604:2e8e:1800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9c:77:c3:5c:81:e2:4c:75:1b:ca:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=33659b0d-990e-4fdf-90f1-e2cd2cc9d620
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:f9:d2:ed:ff:a6:88:5a:7f:68:55:59:69:9f:
                    b7:33:45:dd:85:a5:c0:b1:1f:4f:dc:47:64:16:41:
                    ff:fe:47:df:61:13:b7:e8:0d:68:8b:e6:42:6b:9d:
                    59:06:ac:f3:b2:98:2e:b8:e7:ce:d6:4c:e7:6d:f5:
                    82:b8:85:a9:f0:19:2a:91:fb:e2:3c:89:12:3f:39:
                    fd:cc:97:5d:95:53:ca:13:72:b7:f7:cc:f2:10:d5:
                    bc:35:1a:1c:11:5a:59:22:d6:ab:22:fd:a1:ee:52:
                    39:d5:0e:a1:9c:cd:69:64:f6:5e:8d:3a:46:5c:ba:
                    77:83:eb:8e:be:7e:42:b0:2e:d9:eb:6d:85:2d:3e:
                    f5:9d:92:a4:d6:1e:b1:a2:bb:7c:ba:5a:d0:08:a3:
                    67:c0:3b:87:5f:2c:d4:1f:c3:6e:23:13:27:67:50:
                    36:bb:7c:75:65:df:4f:a0:8e:4b:26:0d:b9:bc:fb:
                    1b:9e:0c:17:7c:85:ee:53:80:2b:cb:31:69:25:4b:
                    c3:2f:6b:ad:11:37:7b:a9:48:e7:37:2b:36:e5:3c:
                    2a:70:b6:5a:52:5f:d8:c2:f3:57:64:b8:e5:90:17:
                    88:24:07:aa:98:c1:00:48:e6:42:ba:d3:c3:60:cb:
                    3b:62:96:3c:5f:3c:5d:d8:9a:df:5e:fb:13:db:c6:
                    ab:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:4F:00:1F:39:5E:55:87:4E:FD:CB:82:FE:17:CE:B0:26:33:70:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d1997938-a8c1-33cd-b96f-a63ae6335ddf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8e:1800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:fd:1e:69:84:a4:60:b6:a1:a1:4a:55:0c:53:7e:5d:7b:a4:
         0e:df:02:7e:f3:86:73:10:fc:47:a6:ac:2c:59:7d:69:80:45:
         c1:ea:20:6f:68:75:2c:62:0d:a9:d2:f1:c8:c3:88:64:1c:d6:
         f9:bc:aa:1e:98:87:21:7d:5d:67:34:b9:3f:b1:83:cc:02:87:
         4d:39:44:b8:7b:46:cf:f7:1a:34:92:1d:39:84:ce:27:53:af:
         30:e9:d3:37:11:ed:62:db:b0:cc:44:41:2b:5c:79:55:52:35:
         f1:0c:11:79:2e:04:17:fc:8a:5c:30:c4:df:a2:06:df:ea:10:
         52:36:60:c8:ac:d3:5a:4a:91:7c:34:5a:85:28:2c:d2:19:31:
         ef:9f:7c:5b:7d:2d:a7:3f:c3:62:a7:ba:b2:b5:4e:36:fb:fa:
         8d:34:b8:61:28:89:b0:b6:7b:95:0f:88:af:f1:b2:9a:c2:b8:
         57:18:79:55:f8:88:96:cf:ef:45:24:44:49:07:00:51:98:86:
         37:ef:d4:31:92:55:a8:ae:c1:06:9c:62:f5:35:ab:5f:65:05:
         47:fc:cd:dc:8f:83:93:7d:66:8e:94:e0:bc:6a:af:63:a4:5f:
         bb:0d:4f:d9:3f:94:37:95:76:15:31:58:97:d9:3c:db:dc:8b:
         c6:f4:11:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:11:01 2026 by rpki-client