Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/db85abb9-cd34-312f-a6a2-78db24e05c0b.roa
File:                     db85abb9-cd34-312f-a6a2-78db24e05c0b.roa (raw, json)
Hash identifier:          Af3nprThC2eIjBb64KVQQ5qqzRZ6t+ZcTpQpkFs99VU=
Subject key identifier:   8A:84:3F:3C:79:32:80:DA:66:15:9F:76:DA:D3:E6:64:1E:74:BC:23
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584E059C76B6786772ABED326A00
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/db85abb9-cd34-312f-a6a2-78db24e05c0b.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     30036
IP address blocks:        2604:2e8a:8c00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9c:76:b6:78:67:72:ab:ed:32:6a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=702648ee-60ba-4444-9766-d06f70b8b6b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:0d:f3:29:d1:e6:fd:d1:b5:bd:b6:e1:e2:02:
                    d8:c9:a6:79:bb:17:a3:fe:4b:80:74:7a:cc:fd:fb:
                    c5:23:59:da:34:88:c1:61:9f:db:15:34:c5:be:fc:
                    f9:d1:6f:6d:56:05:7d:8d:16:2f:f1:6a:26:0f:81:
                    35:95:80:93:32:0b:62:87:30:81:dc:bc:8a:e1:d3:
                    b5:2d:ab:a9:ac:e6:d8:26:08:88:a1:27:ce:ce:a9:
                    00:fb:be:64:8e:6b:82:4c:5b:a3:65:b4:e9:b2:77:
                    9e:5b:04:22:a0:ea:d1:13:0e:ec:e6:64:48:17:20:
                    8f:2a:d1:e3:d5:d9:0a:5e:47:b3:0d:5b:55:60:1b:
                    9f:14:aa:f4:23:3f:43:87:74:1f:c1:57:92:a7:96:
                    d3:e5:8a:55:21:cf:8e:39:db:45:f2:de:89:3e:ea:
                    61:22:33:e1:cf:c3:cc:4a:ca:09:86:65:8b:36:51:
                    93:77:aa:8f:ed:95:ce:87:8f:f4:45:e8:19:b5:c0:
                    30:63:d3:3a:e0:1c:39:b8:8a:2f:8d:6a:62:bd:51:
                    6a:9a:da:a8:f1:10:d0:2e:22:84:72:f2:17:c8:4d:
                    a0:5e:0f:6a:65:64:08:dd:70:64:2f:fb:4a:3a:57:
                    09:6e:d9:67:d2:28:8d:59:34:5a:54:12:eb:98:8e:
                    e4:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:84:3F:3C:79:32:80:DA:66:15:9F:76:DA:D3:E6:64:1E:74:BC:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/db85abb9-cd34-312f-a6a2-78db24e05c0b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8a:8c00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:1e:b5:01:23:2b:b3:29:89:6f:61:5e:73:fa:9e:bf:f6:59:
         80:d0:f9:23:51:82:91:7f:ba:3d:57:19:1e:3f:a3:3a:a6:51:
         09:7e:72:06:07:24:16:b2:ee:b2:ef:8e:26:ab:e2:ad:38:c2:
         85:7c:6e:16:83:76:c2:ae:3b:9d:7d:77:58:16:33:5d:0d:8d:
         f0:64:00:64:bf:80:99:cd:44:be:27:5a:e2:27:3b:49:02:1e:
         73:b8:8a:71:c5:a8:64:e4:44:76:0c:1b:3e:5a:9e:b7:b5:96:
         5b:a8:06:ff:c0:3e:3e:ca:c0:85:42:5a:1b:5c:f9:7f:c8:ce:
         39:50:d4:ef:d8:b7:ca:47:a0:26:a1:7f:4b:1a:b9:b7:f0:7d:
         93:b2:cb:d6:0c:03:a9:99:47:f7:f0:c5:26:4c:47:ea:14:e4:
         f3:07:e3:44:da:11:15:9a:ca:4f:c1:82:94:7d:1f:44:3a:46:
         66:82:f2:f3:fb:74:3b:0f:ba:9b:f7:01:8b:c8:d1:7a:5a:30:
         7f:2f:9d:44:ba:df:15:a1:ef:9c:91:1d:f6:ab:55:7d:7e:4f:
         62:79:69:aa:28:bf:5e:8d:14:b1:32:23:26:ee:88:3c:11:44:
         71:46:88:a9:0b:44:94:3f:36:94:21:1e:24:82:36:b4:64:31:
         3d:19:53:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:38:44 2026 by rpki-client