Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/24d94350-8c13-3306-9c5c-b377f6c417f9.roa
File:                     24d94350-8c13-3306-9c5c-b377f6c417f9.roa (raw, json)
Hash identifier:          RSYDSZ0ogz+p+LDDA3kzTJ9cSrg6/LPckKDZvYDUxAI=
Subject key identifier:   0F:48:88:04:DE:7A:A3:57:DA:F2:66:63:40:79:1F:CC:2C:76:34:94
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584DADAAEE05B83883601715E680
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/24d94350-8c13-3306-9c5c-b377f6c417f9.roa
Signing time:             Thu 30 Apr 2026 13:00:31 +0000
ROA not before:           Thu 30 Apr 2026 13:00:31 +0000
ROA not after:            Wed 29 Jul 2026 13:00:31 +0000
asID:                     30036
IP address blocks:        2604:2e8b:5000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ad:aa:ee:05:b8:38:83:60:17:15:e6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Apr 30 13:00:31 2026 GMT
            Not After : Jul 29 13:00:31 2026 GMT
        Subject: CN=a482f56a-381a-47ed-bdc7-fb21f456d3c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:26:bc:81:97:95:c8:68:7c:99:91:19:c1:98:
                    11:f6:22:38:05:b8:15:25:4c:51:5d:60:ed:b9:00:
                    be:c0:76:fd:dd:a0:d7:2c:4e:f5:be:89:20:52:5d:
                    ab:4b:47:2b:92:28:9b:b6:c6:ba:1b:19:33:d7:f8:
                    28:24:b5:65:f3:98:1f:d9:76:32:8f:de:b6:1a:70:
                    e3:57:96:42:b4:17:55:d9:31:f1:2e:39:fd:b1:bd:
                    72:ad:a8:ff:ca:a9:41:f1:b5:3a:60:b3:8e:ff:32:
                    9d:91:b5:07:9c:dd:08:a6:08:2e:19:96:16:b7:c2:
                    92:43:bd:c3:f2:4a:58:de:e8:80:34:ef:55:ba:0d:
                    9f:bf:a2:f3:7e:04:0f:17:48:c7:2e:68:c8:b9:c4:
                    4c:02:a6:84:56:ff:75:3b:68:f8:af:55:67:95:5e:
                    74:2e:7c:06:3a:bc:4a:00:d7:e1:92:fc:f0:9d:bf:
                    4b:e8:68:90:6c:e3:96:88:d6:04:ac:53:ed:55:d0:
                    77:10:38:ce:55:48:a7:2c:e2:ec:5a:6d:f4:c5:4b:
                    cd:b4:4e:04:0e:ff:d8:0b:80:e9:72:b3:9f:26:5c:
                    1b:f4:29:11:37:60:47:fa:58:fc:f9:a2:ae:b8:91:
                    e4:95:b8:6a:9f:f5:ad:08:5c:02:16:77:03:56:14:
                    8d:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:48:88:04:DE:7A:A3:57:DA:F2:66:63:40:79:1F:CC:2C:76:34:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/24d94350-8c13-3306-9c5c-b377f6c417f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8b:5000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:db:9b:c9:ff:09:a5:05:13:5f:16:fe:63:24:10:7e:ac:d3:
         74:23:5f:3d:b1:5b:78:6b:f3:48:e9:c7:0c:93:29:9f:87:85:
         bf:ba:83:44:b9:91:9b:2f:18:d7:bb:f1:1c:d5:be:5e:f7:68:
         04:b2:3f:ed:71:44:41:6b:e3:9a:96:6d:26:a3:5e:24:36:32:
         7f:ac:95:d6:3f:d5:d7:3e:d9:94:60:5d:50:72:84:53:c3:20:
         2a:fe:a2:38:83:4c:07:34:c6:bb:bd:f1:e8:dc:a6:67:6d:c2:
         d0:f9:ad:3b:0d:55:f9:04:66:e9:de:4a:f5:3b:08:72:23:de:
         dd:fe:67:c7:69:2c:01:ce:ab:be:f5:93:b5:4a:1a:7f:58:cd:
         71:3b:e5:32:34:6b:b3:dc:61:51:cf:d4:5e:12:30:13:dd:47:
         e1:b7:f3:3c:83:49:2c:d9:b3:d6:09:95:1c:6c:74:b7:8d:4f:
         14:29:98:b7:c6:d7:ee:c0:9e:1e:92:56:f3:35:b2:2e:06:7c:
         a5:de:45:fc:db:91:ae:31:9e:78:8a:90:41:ab:48:63:e4:80:
         2f:48:47:9f:0c:da:88:7f:6d:2e:f5:6f:19:b8:25:23:76:2b:
         1b:85:c0:b4:b1:e1:21:85:ff:fa:8e:24:ec:c6:4e:30:43:12:
         1b:a0:98:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 8 19:36:03 2026 by rpki-client