Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4ae6d243-3ea1-31d7-ab99-a5ff90b8002e.roa
File:                     4ae6d243-3ea1-31d7-ab99-a5ff90b8002e.roa (raw, json)
Hash identifier:          N4pocBaCY39zhlcI3eiJ3JxAApgPNUyFwz3qNTofLTU=
Subject key identifier:   46:1A:0E:83:46:34:EE:A3:DE:09:18:6A:CE:3B:69:33:CF:88:30:6A
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584DA11AAA97E3D372F8E70ED040
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4ae6d243-3ea1-31d7-ab99-a5ff90b8002e.roa
Signing time:             Sun 26 Apr 2026 01:00:25 +0000
ROA not before:           Sun 26 Apr 2026 01:00:25 +0000
ROA not after:            Sat 25 Jul 2026 01:00:25 +0000
asID:                     30036
IP address blocks:        2604:2e8b:7000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a1:1a:aa:97:e3:d3:72:f8:e7:0e:d0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Apr 26 01:00:25 2026 GMT
            Not After : Jul 25 01:00:25 2026 GMT
        Subject: CN=c5c6039d-7cf8-4f2d-a9ab-59a4d2c4fecb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:20:f9:7b:b9:0b:ef:c4:8a:2c:e8:1d:8d:fc:
                    98:48:c9:6b:45:3e:be:de:ac:99:a1:04:b8:e6:e5:
                    91:d4:55:67:ef:03:77:5f:b8:05:c1:46:6f:80:3a:
                    67:1c:0d:ce:a5:4d:e5:30:f5:07:85:57:97:92:bb:
                    61:92:96:b3:1c:56:79:da:8d:c6:87:f6:02:cc:f4:
                    a6:79:79:e5:af:51:75:cc:7b:ed:84:f5:75:cd:07:
                    79:4e:60:15:bd:fe:93:8c:20:21:49:36:9d:41:91:
                    7d:8e:aa:c3:4f:2e:df:60:1d:04:d6:6c:39:67:f4:
                    1e:01:b3:08:3e:ab:14:29:9e:af:4b:b3:17:23:87:
                    5f:7d:fb:c4:ec:6b:fe:c0:f8:48:74:fd:c8:5e:9f:
                    de:f2:b7:95:23:59:df:d2:a5:4f:e2:1f:e6:82:7e:
                    18:6c:95:10:78:ad:7c:4d:a7:6e:08:88:00:f1:2c:
                    b8:87:c9:4f:89:dc:8a:e0:7e:8f:ee:8d:98:97:d3:
                    55:4e:20:de:93:23:b5:a0:a1:bf:cd:e9:93:ca:00:
                    ee:69:5e:af:61:81:15:0e:2f:0e:f5:ff:c9:1f:5e:
                    45:39:97:80:0c:c1:38:80:fb:92:72:ed:7a:bd:c2:
                    21:7b:e2:ef:e5:b3:c2:b2:68:fa:0c:2b:c6:ba:e1:
                    10:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:1A:0E:83:46:34:EE:A3:DE:09:18:6A:CE:3B:69:33:CF:88:30:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4ae6d243-3ea1-31d7-ab99-a5ff90b8002e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8b:7000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:51:79:e0:0e:f5:b8:f3:32:70:ea:30:bb:66:c4:d7:d3:b4:
         93:1f:99:75:0f:54:eb:a5:bf:d1:be:b4:c4:3d:eb:35:29:ab:
         42:da:fd:4a:35:33:e3:18:da:32:68:7e:70:50:f5:0b:f7:38:
         c2:1b:f1:90:e8:7c:88:6e:a1:29:cf:e3:48:ad:93:ac:fe:67:
         14:cd:94:e3:a2:0c:7e:ef:f3:b8:13:26:c9:f5:24:f1:1c:13:
         b5:42:ee:1b:a7:d6:df:08:09:aa:ac:f3:78:bf:9f:d1:30:dd:
         30:11:5d:9f:d5:75:a2:ab:b7:07:8e:be:44:2b:45:6a:88:a5:
         c2:71:09:ae:1b:d5:c8:00:ca:28:ab:ba:ee:0c:27:74:08:a4:
         f9:65:54:53:cd:ed:12:78:46:b4:68:79:7c:a2:94:29:2d:22:
         a3:9b:86:7a:d9:5b:28:5a:19:63:d1:a4:26:fe:94:ed:74:75:
         33:e2:39:e4:b1:7a:93:19:8c:6f:9f:c3:04:2c:d5:46:83:72:
         fc:4c:83:e1:92:60:61:2b:9a:46:56:b4:85:a7:56:1a:a9:8a:
         06:69:40:b2:14:8d:49:5b:6c:3a:11:16:93:61:46:84:b0:1f:
         e2:ce:5e:80:a4:7a:de:89:59:f3:36:a2:a9:62:92:66:41:93:
         1f:5b:3f:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 8 19:33:03 2026 by rpki-client