Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/11a586c8-5bff-36fe-842e-e0d88bd14507.roa
File:                     11a586c8-5bff-36fe-842e-e0d88bd14507.roa (raw, json)
Hash identifier:          Lc28rb0TNce+ExFatLEu+WtrYNjiE2zLhiUAqUSo2D0=
Subject key identifier:   3A:70:F8:C8:48:89:4C:22:04:35:0C:E2:5C:ED:6E:2F:8A:E3:91:D9
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584D237A2C1B940357CB63965BC0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/11a586c8-5bff-36fe-842e-e0d88bd14507.roa
Signing time:             Thu 12 Mar 2026 01:00:32 +0000
ROA not before:           Thu 12 Mar 2026 01:00:32 +0000
ROA not after:            Wed 10 Jun 2026 01:00:32 +0000
asID:                     30036
IP address blocks:        2604:2e89:5800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 13 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:23:7a:2c:1b:94:03:57:cb:63:96:5b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Mar 12 01:00:32 2026 GMT
            Not After : Jun 10 01:00:32 2026 GMT
        Subject: CN=95a9660b-5f4e-4518-a9ca-7fd241f9c33d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:49:89:7b:bc:af:9d:e7:96:61:83:d1:4e:b2:
                    d4:22:63:c4:88:18:80:39:ff:2f:f6:8c:ba:1b:64:
                    47:f2:9f:4d:e0:56:32:00:eb:05:5e:22:00:9a:60:
                    18:c3:b7:89:53:c2:31:e3:87:04:ac:5f:a0:fb:f4:
                    ce:e9:2e:51:77:72:79:f8:18:4d:f9:68:e3:dd:4d:
                    cf:07:cc:5d:e5:90:90:49:f1:de:05:21:a0:47:32:
                    c8:8d:fa:93:79:db:bb:ec:3b:2e:6c:2c:31:0c:51:
                    0b:3c:18:9c:82:03:f3:fb:6d:44:7e:5b:12:6a:52:
                    d9:e5:89:95:e6:cf:31:64:30:ee:2a:b4:66:c0:03:
                    e9:09:c4:c2:fa:c0:bc:b1:2c:61:6b:d9:78:af:42:
                    2d:0e:93:b9:e0:55:80:26:6a:28:79:1b:86:15:60:
                    b4:3a:f8:8f:90:fd:ef:13:88:73:aa:7e:3f:70:71:
                    5c:d3:02:67:a8:04:6e:9e:33:57:ab:59:50:d5:b7:
                    eb:96:72:a6:82:5a:04:92:82:0c:09:38:78:62:bc:
                    f9:bd:49:7e:24:37:5b:81:5e:b7:8a:4b:9b:c6:8e:
                    e9:b5:1b:f2:9a:cb:83:1d:60:05:bb:7f:bd:18:3a:
                    c9:0d:44:cc:f4:39:c5:16:4d:a5:df:50:d2:a8:61:
                    a6:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:70:F8:C8:48:89:4C:22:04:35:0C:E2:5C:ED:6E:2F:8A:E3:91:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/11a586c8-5bff-36fe-842e-e0d88bd14507.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e89:5800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:1e:d5:29:dd:4c:e1:23:2f:7c:a8:0e:3b:62:2d:52:4d:dd:
         a7:05:88:39:13:d4:8b:5b:0d:54:bc:82:19:ba:c3:3d:86:42:
         55:59:27:80:82:43:17:0d:d1:6f:bb:2a:95:99:b8:a6:83:af:
         5c:46:3a:d9:8a:48:d4:d5:0b:1f:50:49:51:e6:11:b7:a8:3c:
         6e:d2:d4:11:67:c1:66:cf:49:0d:ca:62:59:88:7a:a9:dc:8d:
         4b:d7:87:c4:dc:dc:12:c5:46:24:de:8f:e5:f7:d3:38:45:ad:
         41:5d:c3:a0:9c:4e:5c:18:06:95:c6:4d:08:36:4d:5f:f3:05:
         99:78:05:ae:9e:98:b7:38:30:62:c6:ed:dd:ea:b8:a9:fb:55:
         99:c8:dc:3a:19:e5:4c:a2:b4:16:7d:e0:7e:3a:27:c3:c3:56:
         73:8d:f6:94:fe:3a:db:27:b4:87:db:37:7a:1f:d4:e1:aa:a4:
         46:a0:3c:d4:2f:0a:0b:3f:37:84:85:27:e9:7e:dd:8b:d8:f5:
         94:87:07:20:3f:cb:a1:7e:42:00:95:7c:d6:06:0c:34:f2:1f:
         6d:e1:9b:a3:68:f3:04:5d:c2:ca:94:24:52:f0:b3:67:06:fa:
         53:72:be:1e:ec:c7:8f:6f:b1:eb:3b:f6:d7:6b:ac:ae:34:7c:
         ae:b8:12:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 06:35:07 2026 by rpki-client