Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d7cebbec-ff11-336f-af75-67555f640fad.roa
File:                     d7cebbec-ff11-336f-af75-67555f640fad.roa (raw, json)
Hash identifier:          uqvF5Z/ynRI9FmEAiwM5IVTjjbXFY9epgkyONpAb5rs=
Subject key identifier:   01:F3:D2:41:97:AD:29:F3:97:35:48:B1:15:35:20:57:09:5F:3E:BC
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584CC7772C8A3D7CE3A6FDBB3480
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d7cebbec-ff11-336f-af75-67555f640fad.roa
Signing time:             Sat 07 Feb 2026 02:00:31 +0000
ROA not before:           Sat 07 Feb 2026 02:00:31 +0000
ROA not after:            Fri 08 May 2026 01:00:31 +0000
asID:                     30036
IP address blocks:        2604:2e8f:dc00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c7:77:2c:8a:3d:7c:e3:a6:fd:bb:34:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Feb  7 02:00:31 2026 GMT
            Not After : May  8 01:00:31 2026 GMT
        Subject: CN=f73965f3-39f9-4694-93e1-7e463c37e6bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:fe:aa:c0:a4:73:03:c2:19:6a:76:4f:18:ff:
                    c0:ce:b5:be:07:07:f1:c5:d7:32:d0:e7:5d:c5:ae:
                    fe:da:5b:9a:f6:24:05:79:c1:46:bc:37:66:0f:9a:
                    7e:60:3d:5a:2e:19:9f:41:04:52:20:fe:de:59:ad:
                    c2:88:3b:23:1c:c0:9b:4b:2e:e9:74:b5:ea:5a:4d:
                    96:38:1f:e8:df:64:3a:5f:2b:65:74:dc:dc:48:ea:
                    fe:51:42:4e:b8:8d:6a:56:74:1a:e2:4d:e0:99:ec:
                    69:d4:24:a3:74:e6:6d:14:51:44:dd:e3:ca:2e:08:
                    19:bc:94:ea:c5:25:2e:24:ff:8e:1b:4d:77:21:e5:
                    f6:04:64:9d:9a:08:6c:b2:eb:1f:bc:17:8d:6f:dd:
                    e8:36:31:26:f5:e9:cd:45:8c:67:26:5a:7b:80:ec:
                    da:9b:ff:23:0a:c2:ce:71:c3:a7:02:5c:8f:72:c0:
                    b0:9e:6d:e6:74:96:93:82:86:a4:aa:82:03:55:29:
                    21:e0:d1:3c:fb:55:3b:e6:26:f1:f6:ca:cf:90:9f:
                    a8:e1:b9:df:7c:b2:e3:dc:a9:d5:90:2a:87:cb:a2:
                    f6:60:f0:77:1f:80:71:ee:74:81:6e:4d:2e:0b:b1:
                    aa:1d:c9:d9:a8:fd:be:16:de:ef:24:82:e6:8e:01:
                    1f:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:F3:D2:41:97:AD:29:F3:97:35:48:B1:15:35:20:57:09:5F:3E:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d7cebbec-ff11-336f-af75-67555f640fad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8f:dc00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:f9:ae:57:65:95:23:62:42:17:c5:1e:cb:ca:ea:0b:5d:b6:
         11:f5:00:fa:fe:3f:40:29:e2:4a:1c:45:30:87:b6:86:a2:50:
         40:2f:51:90:ae:77:9e:a0:34:f5:89:4f:63:fc:3a:62:4e:c7:
         80:9e:a5:fd:cd:0d:62:c9:21:fa:ff:c1:58:90:10:8d:ec:97:
         7c:69:3c:07:79:78:6c:b2:9c:a4:8e:6a:de:2e:e0:1a:83:ad:
         2e:0d:f4:74:02:de:f2:ff:87:d2:11:db:45:ae:dd:ce:eb:ed:
         20:29:3c:9c:39:4b:a1:fd:5f:5c:d6:71:98:76:b0:f7:4c:63:
         b8:b2:ad:c8:d1:b0:a5:4a:c3:0f:d0:4f:0f:b4:6a:bd:55:9f:
         9e:f4:17:b6:24:11:b7:8d:53:02:8d:36:d1:8e:b1:b9:9b:fe:
         a7:d7:8f:a2:e9:16:48:00:3a:c2:4b:14:54:72:b8:e6:fa:76:
         61:14:93:bf:f0:cb:b4:8d:c2:3c:b7:5e:70:44:65:ee:7c:36:
         be:ca:9c:a5:ea:d3:19:87:a9:fe:9e:4f:3f:a7:14:49:82:6e:
         66:52:1e:3c:f4:64:98:b5:4c:1f:54:2a:f6:f0:e5:e7:60:f6:
         3b:73:1c:bc:6c:a0:dd:fb:e9:1a:da:d9:18:27:c1:98:35:06:
         9d:30:b4:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:23:54 2026 by rpki-client