Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/6ff9b6b3-a9c0-3de1-abe7-b51486612d83.roa
File:                     6ff9b6b3-a9c0-3de1-abe7-b51486612d83.roa (raw, json)
Hash identifier:          LenryqW5k0rdTmOjcCRNzdaYxXdQucqKWLUv8CgpAY4=
Subject key identifier:   F5:CE:0F:BC:F4:55:7E:88:A4:10:0F:27:C1:99:1C:6F:B3:BC:6B:34
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584DB77025FF5600F9761F9E2CC0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/6ff9b6b3-a9c0-3de1-abe7-b51486612d83.roa
Signing time:             Mon 04 May 2026 01:00:25 +0000
ROA not before:           Mon 04 May 2026 01:00:25 +0000
ROA not after:            Sun 02 Aug 2026 01:00:25 +0000
asID:                     30036
IP address blocks:        2604:2e87:e400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b7:70:25:ff:56:00:f9:76:1f:9e:2c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: May  4 01:00:25 2026 GMT
            Not After : Aug  2 01:00:25 2026 GMT
        Subject: CN=4d067efa-4a69-4c40-a814-00d3d7518153
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:b6:4e:01:be:6e:30:09:2f:93:d2:4e:b6:71:
                    09:ca:68:d7:62:a5:fd:a0:9c:31:fc:74:0e:99:9a:
                    aa:de:86:e0:8e:48:4a:cf:48:23:cf:8a:9a:c5:8f:
                    60:0d:dc:32:99:47:ef:8f:12:7f:f8:dc:b7:0c:47:
                    a9:73:de:3b:d7:26:c4:89:49:56:93:8d:b7:d6:fb:
                    7e:c9:7c:a7:a9:c0:03:d6:fe:33:11:d4:ff:98:bb:
                    96:e9:77:41:b0:24:cc:65:5b:8e:ec:9a:19:81:72:
                    88:33:30:86:0e:1e:3c:dc:08:b6:72:9c:16:3a:46:
                    4c:68:2c:e6:34:36:33:8b:ef:5d:93:d8:c9:e0:96:
                    bb:8a:47:a9:51:cd:ce:ed:56:66:00:c4:ab:9f:cb:
                    9d:e0:7b:45:81:09:8e:2b:b5:e6:db:6c:73:34:25:
                    83:c1:f9:35:d0:6c:ad:e6:9c:f8:3a:a6:3f:95:72:
                    50:2e:6c:f2:42:c7:53:c1:f4:1f:2a:e2:49:e1:ab:
                    5c:72:a9:30:0d:5d:9c:42:d6:c9:8c:94:37:82:63:
                    bf:d4:82:23:7a:00:95:2e:0d:06:05:1b:02:5b:b0:
                    d5:4b:0f:73:25:9d:1c:81:20:74:07:30:f2:e4:32:
                    cd:74:78:ea:78:8c:3d:17:14:b0:5b:84:bc:71:76:
                    88:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:CE:0F:BC:F4:55:7E:88:A4:10:0F:27:C1:99:1C:6F:B3:BC:6B:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/6ff9b6b3-a9c0-3de1-abe7-b51486612d83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e87:e400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:02:5a:49:d1:69:be:31:a4:7a:11:a0:c9:ab:9b:50:0d:c6:
         ee:cd:98:35:a8:b5:8f:fb:1e:e1:8c:0b:e0:80:9b:3a:3c:c9:
         42:0c:23:b3:4d:38:7f:da:05:25:a0:63:eb:2c:65:16:2a:df:
         9d:da:3c:d4:af:83:ea:46:fe:8d:cc:80:27:1b:6d:1d:61:a2:
         0d:1e:02:e1:9c:63:cc:b3:86:42:5f:aa:23:91:ed:d6:5d:21:
         b5:ef:11:3f:8d:95:bb:a1:f1:fd:d4:1e:28:8e:50:f2:86:fc:
         2f:45:12:a1:9b:6e:f9:4f:b1:ef:e8:39:fa:3a:06:0b:b0:5d:
         e7:cb:3f:bc:28:0b:25:09:31:70:0f:f2:18:78:c7:ac:64:db:
         ad:94:52:60:e6:3c:ed:ae:87:47:c0:37:c6:7e:86:be:0a:23:
         2c:88:95:ff:63:1d:04:49:95:c3:f2:ff:2b:1b:9f:9b:97:72:
         6b:c2:ad:b9:0a:89:a0:2c:82:a6:42:5b:f9:42:f8:2b:66:67:
         91:6b:02:69:39:e0:19:7d:0b:a1:38:d3:24:7d:fc:9e:97:d0:
         f0:12:4a:dc:0c:7c:35:4c:07:fb:73:a4:0e:bf:88:e2:04:42:
         ac:3b:2d:71:03:4a:e7:ed:22:66:fe:98:ec:65:3a:d0:da:d2:
         5e:d7:dc:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 8 18:26:25 2026 by rpki-client