Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/247dbccc-7491-3119-b8ca-eee6e4d00f6b.roa
File:                     247dbccc-7491-3119-b8ca-eee6e4d00f6b.roa (raw, json)
Hash identifier:          x56D2No0Yqi4hbP1Ckq14xBNDLikZzGQOLI73vo3C5Q=
Subject key identifier:   CF:C0:D9:8F:F0:65:26:51:C2:E8:05:41:36:99:73:14:C3:47:C9:E1
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584E3B94830611E55AC289464E80
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/247dbccc-7491-3119-b8ca-eee6e4d00f6b.roa
Signing time:             Sat 20 Jun 2026 09:00:13 +0000
ROA not before:           Sat 20 Jun 2026 09:00:13 +0000
ROA not after:            Fri 18 Sep 2026 09:00:13 +0000
asID:                     30036
IP address blocks:        2604:2e8f::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 25 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3b:94:83:06:11:e5:5a:c2:89:46:4e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jun 20 09:00:13 2026 GMT
            Not After : Sep 18 09:00:13 2026 GMT
        Subject: CN=dc812958-1c1c-487a-8c73-58fc80167ee0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:80:e2:1d:a7:2d:42:85:4b:e2:69:70:6c:b5:
                    13:bc:16:7f:c6:4a:92:70:38:0c:98:69:80:71:b7:
                    eb:44:90:1d:55:e4:27:9e:e9:9f:85:18:af:c8:eb:
                    d6:ed:1f:78:e2:cd:6f:a7:ea:d1:66:ad:31:08:2f:
                    7a:8c:b1:d6:b2:7c:3b:49:4d:8b:5e:c9:62:ba:b6:
                    26:e2:4e:24:28:04:7a:a1:c2:b9:b7:0e:73:68:83:
                    c7:7d:05:76:cd:55:bf:ae:18:84:0e:97:5d:ab:48:
                    e8:09:d4:ac:15:33:22:e9:a9:18:bf:5f:2b:6a:38:
                    03:0a:19:9a:7a:24:72:24:58:d7:de:48:31:19:d6:
                    b3:41:87:b5:24:b7:d6:2f:b2:96:c5:a8:a8:00:54:
                    ce:e1:8b:2e:1e:df:a3:2a:c6:9a:a4:70:d2:3c:a6:
                    1c:b2:2a:d6:26:98:90:19:6e:b0:44:ae:2b:91:14:
                    d9:1d:2e:9b:d1:5d:87:bd:57:06:f3:54:77:cb:5d:
                    7e:34:6c:fa:d5:7b:75:59:42:13:b5:70:04:10:3b:
                    63:a8:0b:4b:04:6d:04:9f:9c:fe:91:a8:78:9c:ba:
                    ec:04:9d:67:02:4d:35:3e:61:ff:aa:d8:40:d6:6d:
                    0d:25:15:07:f8:ff:1e:31:58:ad:71:03:e2:0d:93:
                    f0:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:C0:D9:8F:F0:65:26:51:C2:E8:05:41:36:99:73:14:C3:47:C9:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/247dbccc-7491-3119-b8ca-eee6e4d00f6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8f::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:e5:49:cf:d2:54:42:f7:69:0f:aa:24:e2:2f:b0:5f:2a:66:
         4b:51:68:4f:fe:c0:9b:45:c5:c2:dc:6b:dc:74:a5:59:c5:e1:
         ac:07:98:b0:83:59:a1:48:74:d5:2c:95:dc:dd:9b:3c:e2:03:
         d9:be:f1:c6:6f:c4:d1:fa:2f:3c:4d:45:95:da:af:a9:50:65:
         3e:dc:6d:e9:b1:aa:2b:46:c0:c5:a0:e3:f8:2e:aa:c0:05:00:
         82:6d:4e:ba:2a:aa:4f:5a:80:46:fc:31:fe:87:a7:34:7c:7f:
         5f:88:c5:72:26:85:bd:ba:37:16:a5:79:b4:9f:10:75:f1:08:
         a5:1b:d6:c4:ec:df:7d:02:54:bd:74:3d:5e:50:c1:36:e8:92:
         98:94:53:05:2f:0e:72:e0:78:77:8c:d6:2e:bb:21:fd:fe:30:
         b1:48:5d:ac:15:4f:46:a9:af:00:76:87:22:a4:83:cd:9f:1b:
         06:84:24:9b:62:46:e9:e6:fd:1a:f4:a7:4f:5d:b0:71:31:98:
         4a:cb:25:cc:92:1d:b5:7b:04:bc:d5:d0:cb:d4:37:49:70:4d:
         dc:ce:60:39:82:60:6c:09:4d:e0:f6:a7:a5:1b:12:52:f8:12:
         74:d3:76:4c:04:b4:70:42:5c:13:da:21:76:5f:1e:9d:42:95:
         4f:65:89:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 04:28:50 2026 by rpki-client