Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/97517270-d78e-37f5-a3d6-80e6fd30c3e2.roa
File:                     97517270-d78e-37f5-a3d6-80e6fd30c3e2.roa (raw, json)
Hash identifier:          XAnOV9AwFj25DJely2Zspumt6cSLOhq0PeZ8yv2Ngkg=
Subject key identifier:   06:AA:A3:14:4D:AA:F4:CA:8F:ED:F8:1A:BA:F6:5D:EE:3E:03:75:F6
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584D237A008D163A378159C63CB0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/97517270-d78e-37f5-a3d6-80e6fd30c3e2.roa
Signing time:             Thu 12 Mar 2026 01:00:32 +0000
ROA not before:           Thu 12 Mar 2026 01:00:32 +0000
ROA not after:            Wed 10 Jun 2026 01:00:32 +0000
asID:                     30036
IP address blocks:        2604:2e8b:8000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 13 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:23:7a:00:8d:16:3a:37:81:59:c6:3c:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Mar 12 01:00:32 2026 GMT
            Not After : Jun 10 01:00:32 2026 GMT
        Subject: CN=9435a343-f69a-49b2-b088-c9e3ff3c5506
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:fe:15:02:ff:0d:f1:46:a7:df:30:c0:99:58:
                    97:6f:a8:21:d3:12:a1:49:37:31:91:5f:ee:a2:bd:
                    dd:bd:bf:f8:8a:f1:b0:74:6d:6c:99:42:91:99:d6:
                    2e:0a:50:16:27:fd:30:d6:66:59:f3:c9:c5:4d:18:
                    84:cd:49:be:ee:b0:97:58:39:8e:9d:cc:4e:73:71:
                    18:3f:a1:d3:2c:4e:bc:d1:a0:80:5f:7b:a5:cd:79:
                    ab:71:e4:36:10:10:66:9e:0c:80:73:0d:8a:61:bc:
                    6c:76:a5:70:b3:e3:a3:5b:1f:3b:61:00:e9:22:78:
                    ba:61:3f:55:7d:70:52:28:6a:44:ee:e7:5a:bd:5c:
                    2d:42:f3:48:63:46:b5:58:27:1f:6e:cb:3d:ed:71:
                    e5:61:31:23:7f:af:c8:7f:4e:6f:c9:f6:cc:4e:8c:
                    6b:04:ec:84:06:e1:8e:f5:08:0f:a6:ed:b0:d4:28:
                    1d:59:6a:03:ed:de:28:16:99:33:6d:56:2f:19:d3:
                    46:99:4d:27:35:6c:70:06:4a:5d:9b:3c:cc:f9:9b:
                    49:b7:d9:a6:d2:6c:be:c5:b1:2d:a5:a8:42:66:14:
                    aa:cb:72:31:af:40:82:64:3f:b3:8a:bb:f1:a0:1f:
                    a4:34:61:70:b4:88:78:cf:c6:4a:d5:22:fa:ae:aa:
                    9c:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:AA:A3:14:4D:AA:F4:CA:8F:ED:F8:1A:BA:F6:5D:EE:3E:03:75:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/97517270-d78e-37f5-a3d6-80e6fd30c3e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8b:8000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:dd:82:e6:e1:7c:4c:b2:8e:25:2a:0e:62:1d:16:05:f1:b9:
         b7:5f:ce:ad:67:91:44:e0:ce:39:15:d0:9a:be:4c:6f:91:4d:
         c4:72:39:dd:cb:5a:d1:d3:3d:90:5b:0e:fb:d6:41:8d:ff:0b:
         5b:4f:a6:70:76:be:8f:7e:7d:61:91:23:98:e6:22:08:be:a5:
         54:64:e6:cd:98:b8:79:63:1b:6d:a5:e0:37:8d:48:8f:19:71:
         18:31:5e:ae:09:18:13:90:73:93:8f:8a:f8:2e:a4:32:0c:1b:
         2e:de:13:60:0f:63:2c:e6:46:94:36:17:76:f5:31:e7:96:64:
         a6:77:da:3b:bb:5c:d5:12:49:4c:64:70:73:01:bc:36:00:a0:
         f5:e1:4b:4c:7d:24:4d:5a:f1:bf:d5:c2:d9:fb:46:1f:a2:a0:
         35:93:0b:1d:50:fc:9a:0f:d2:7c:7d:c9:5d:5c:83:db:60:b9:
         64:ad:b0:43:bf:d7:0e:7b:b3:ab:e4:75:a0:88:b6:db:48:ce:
         b6:30:e8:ba:1a:20:45:f5:bd:a5:04:53:92:f2:10:33:be:ce:
         98:40:f2:dd:33:2e:bc:e5:62:31:5c:29:ce:0e:b7:42:b9:54:
         46:ba:2e:bc:6b:47:85:d6:13:c8:c7:2e:03:08:56:d6:0c:bc:
         36:e4:77:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 06:36:40 2026 by rpki-client