Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f7d0d4f9-e73c-37b1-9c74-4c0a37ae688e.roa
File:                     f7d0d4f9-e73c-37b1-9c74-4c0a37ae688e.roa (raw, json)
Hash identifier:          sppmdegoRaHZDEzFntWMIqrbcIqzl2kraHJVmFDNMgU=
Subject key identifier:   8A:89:18:9F:63:98:B4:3F:FA:57:CC:EC:BC:8B:91:E4:73:4F:AE:A4
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584DF7A5E71B4C061630A499F200
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f7d0d4f9-e73c-37b1-9c74-4c0a37ae688e.roa
Signing time:             Wed 27 May 2026 01:00:14 +0000
ROA not before:           Wed 27 May 2026 01:00:14 +0000
ROA not after:            Tue 25 Aug 2026 01:00:14 +0000
asID:                     30036
IP address blocks:        2604:2e88:2c00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f7:a5:e7:1b:4c:06:16:30:a4:99:f2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: May 27 01:00:14 2026 GMT
            Not After : Aug 25 01:00:14 2026 GMT
        Subject: CN=34e8e9dc-e8fe-43b9-b0cf-c822b765bbf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:45:b2:53:4b:73:10:e9:8d:c5:e7:e5:14:26:
                    bf:6d:ce:6c:c2:55:7c:7d:fa:bc:2f:61:67:56:2d:
                    79:a4:f1:19:3b:62:54:91:61:ca:54:cb:2d:2f:80:
                    52:ae:5e:b7:d9:da:3f:b0:16:9c:c9:55:ca:fe:7e:
                    e1:90:45:a5:f9:f3:77:5c:22:ac:8f:d8:da:e2:c3:
                    d0:f9:80:1e:5b:07:c5:8c:8b:47:f7:78:fe:24:aa:
                    60:c0:92:08:07:06:36:33:fe:f4:34:e8:93:76:81:
                    a7:1b:f6:cd:de:28:f0:c6:17:e3:e6:cc:70:a8:c4:
                    bc:fd:b9:c0:4b:75:19:e9:55:20:fb:d0:83:36:4e:
                    65:13:08:03:87:9a:04:59:d9:a2:3e:3d:22:92:e5:
                    6b:05:b2:fc:79:ae:e7:4c:3b:1c:e1:d6:f0:f0:3f:
                    ff:09:26:02:fc:04:56:7e:3b:08:92:a3:9b:53:a6:
                    51:4d:36:4d:22:3f:cf:c8:33:9e:b5:89:b4:bc:d2:
                    99:b8:6f:a6:82:57:4c:9f:c2:ca:8f:4d:06:20:ef:
                    6a:7f:69:10:cb:19:c9:36:e5:ac:90:98:09:89:57:
                    e0:2f:77:4b:a3:7e:5e:db:fb:0b:8b:cd:22:dc:f0:
                    42:0f:f8:3d:0d:45:92:b0:55:c6:30:9e:ac:04:4a:
                    8d:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:89:18:9F:63:98:B4:3F:FA:57:CC:EC:BC:8B:91:E4:73:4F:AE:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f7d0d4f9-e73c-37b1-9c74-4c0a37ae688e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e88:2c00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:62:fe:23:58:73:db:b7:0f:a5:95:dd:10:46:cb:0e:d0:2d:
         03:49:e7:68:1d:fa:9e:1b:34:c3:3c:b7:6b:16:22:21:a9:4f:
         35:a8:23:7b:81:f4:bd:e0:e5:5e:40:e9:cb:fc:01:49:2d:8c:
         bb:29:da:4a:d4:f9:4c:cf:2b:bb:61:0b:2f:df:de:84:1b:dd:
         99:9e:1e:8b:33:92:76:8a:16:d1:ff:c6:e9:a5:c1:5f:c5:76:
         45:d5:a7:96:f4:88:6d:bd:7b:c1:11:7d:6d:9d:7d:a7:76:95:
         7f:e7:94:fc:ae:b6:e3:95:94:eb:39:c7:ec:11:67:c9:ef:a6:
         49:31:14:57:c2:e8:70:10:0f:ed:d0:ce:05:6a:f6:32:e3:b3:
         35:d2:05:4b:0b:95:9d:33:87:7f:b7:00:c4:17:23:b2:26:2e:
         3f:06:ed:d3:ef:fc:ca:36:5c:2d:53:4d:78:d2:95:64:fe:a6:
         1a:05:ed:37:59:23:c6:6d:3c:95:84:a7:d9:d3:fd:5e:be:0c:
         f6:d5:0d:eb:eb:79:87:12:be:34:7d:8d:ec:6d:ee:c3:be:f3:
         46:c5:b3:ef:eb:64:1a:8f:60:62:5f:dc:5d:b7:df:b9:fe:e3:
         c5:ab:13:72:05:2e:06:df:91:76:11:22:ec:ee:79:42:56:fb:
         06:5f:f9:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:26:10 2026 by rpki-client