Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/6863fdb7-5250-36dc-a09e-0f5cec46e38b.roa
File:                     6863fdb7-5250-36dc-a09e-0f5cec46e38b.roa (raw, json)
Hash identifier:          L/avdzt5j4heKWf/Z7bLpcoqWPh0ReBEr8Hvw5CDCfo=
Subject key identifier:   05:BE:99:AC:21:F9:E8:AF:86:6B:75:3A:97:1E:86:80:C8:0F:C8:25
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584E6574AB71DC918BDD3A2658A0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/6863fdb7-5250-36dc-a09e-0f5cec46e38b.roa
Signing time:             Sun 05 Jul 2026 09:00:13 +0000
ROA not before:           Sun 05 Jul 2026 09:00:13 +0000
ROA not after:            Sat 03 Oct 2026 09:00:13 +0000
asID:                     19905
IP address blocks:        2604:2e8f:6800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:65:74:ab:71:dc:91:8b:dd:3a:26:58:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jul  5 09:00:13 2026 GMT
            Not After : Oct  3 09:00:13 2026 GMT
        Subject: CN=017a8a78-f86a-4c9d-ae60-e37d2cf21fbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:31:62:3c:a8:3a:dc:04:c9:cb:ed:00:67:3c:
                    be:e9:0c:04:64:5e:46:28:3b:14:79:7d:c4:7e:ca:
                    e9:11:f8:3a:ba:88:4e:03:67:48:ee:3b:d9:03:e5:
                    a5:a7:fd:5f:8e:1c:75:df:89:98:da:92:86:33:28:
                    85:1e:12:59:92:77:1e:e6:d6:25:be:57:53:a2:55:
                    2e:e4:4e:e6:a2:3f:04:31:41:1d:09:d5:75:ec:c9:
                    96:98:51:2d:f1:24:69:a9:d2:2e:3a:da:9b:31:de:
                    bc:d4:9c:82:b2:8c:ca:5a:19:18:21:57:4a:1a:3a:
                    6d:da:83:63:87:c8:05:6a:27:2d:b8:a9:ea:f3:ca:
                    c9:0b:bd:3c:e0:ff:35:fe:e2:72:51:a2:9e:6d:68:
                    68:08:89:78:2b:c1:36:16:3e:02:ab:ee:c4:18:02:
                    6c:1f:ec:c2:a4:97:58:e0:50:93:b4:c5:a0:99:18:
                    e7:fb:08:28:a2:70:32:e6:68:d2:be:b6:4d:b2:ef:
                    1d:bf:46:03:4a:c2:23:dd:a9:82:f7:de:5e:96:d9:
                    ac:99:8b:19:8c:88:4c:d8:10:14:d7:bc:e9:f8:ea:
                    df:ef:65:81:81:8b:1d:2f:fd:4e:31:81:13:e6:5d:
                    fb:fd:4a:c4:95:90:87:2f:9e:4a:c0:c2:58:51:54:
                    ee:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:BE:99:AC:21:F9:E8:AF:86:6B:75:3A:97:1E:86:80:C8:0F:C8:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/6863fdb7-5250-36dc-a09e-0f5cec46e38b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8f:6800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:59:7f:fd:c2:20:7e:b3:13:eb:d2:a8:b7:9c:ec:0b:9b:67:
         e3:f4:63:b7:9c:09:f4:6f:33:70:ff:51:37:41:f4:05:14:41:
         cb:08:93:6a:d6:41:2d:7e:fd:31:0e:d8:a6:26:22:a9:e9:17:
         66:2b:32:94:1e:3e:a8:d7:cd:d5:64:40:d4:56:7c:fb:25:3f:
         3e:af:c1:78:f5:a9:08:92:6f:c5:94:c7:10:41:dd:71:7f:7b:
         9c:0f:2d:77:17:d8:5f:8a:2f:b4:e6:d7:09:92:7a:02:56:f8:
         ec:fc:1c:1f:d9:8e:5a:54:05:ba:5b:9b:b9:05:6a:51:f2:d1:
         f0:d1:47:9e:92:11:77:f9:fc:20:58:63:4c:b3:6a:00:56:01:
         37:67:95:51:4b:67:6f:46:3e:81:bb:a5:d1:3b:18:59:80:11:
         dc:92:d7:b8:14:3a:55:39:b7:cb:b7:4c:6c:25:a2:84:00:11:
         9c:b2:b9:81:db:5e:4c:de:45:ab:16:2f:09:d7:2d:d2:26:78:
         68:f0:1b:72:7e:c5:6c:49:7b:3b:2d:60:33:1d:a1:1f:33:a0:
         4d:33:4e:ec:09:4e:81:fe:c8:c5:03:f4:94:54:1c:43:23:3b:
         da:03:39:22:fd:16:55:f3:7c:0f:21:7a:61:84:44:16:36:2d:
         06:53:93:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 19:33:05 2026 by rpki-client