Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/abeeb3eb-686b-307c-bd44-8183bc717769.roa
File:                     abeeb3eb-686b-307c-bd44-8183bc717769.roa (raw, json)
Hash identifier:          +zlN1iDxLxCDnpIV2Qf0ZV31Gx9cioXm6yKD8yGbWsk=
Subject key identifier:   35:AD:F9:A5:E8:11:04:52:DF:6C:85:42:CD:9F:80:CE:77:EF:72:9B
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584EA79BD44C61C04EDCBAEBB500
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/abeeb3eb-686b-307c-bd44-8183bc717769.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     19905
IP address blocks:        2604:2e8e:7800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9b:d4:4c:61:c0:4e:dc:ba:eb:b5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=e2d1613c-e57b-4dfc-9ad7-f93e1fad9742
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:38:1d:e5:94:fa:66:d9:f7:45:10:7e:ee:7a:
                    d7:ac:e0:fd:6e:41:38:c4:82:50:31:56:aa:dc:4d:
                    1a:4f:84:ad:a1:c7:28:a3:de:84:e7:22:4a:6a:99:
                    c6:47:6e:ee:91:e8:2c:c2:1f:0c:e8:4d:f9:7c:fb:
                    9f:60:9c:90:47:d9:e3:fd:9f:b5:69:36:6f:95:3c:
                    e2:ff:6a:e7:97:41:c8:b7:91:c6:ea:c8:dc:5f:a6:
                    27:40:bd:a1:87:56:2b:ce:4e:f3:b5:91:fe:23:b7:
                    ad:1a:35:72:8c:aa:8f:e8:c2:34:aa:d2:6a:aa:65:
                    63:1f:01:ba:5c:ed:4f:bd:03:dc:98:47:19:6e:92:
                    5d:ab:20:ea:d6:6c:ee:c6:24:d5:7b:70:52:9a:1b:
                    bd:a1:42:8c:6b:5e:35:f5:fc:42:aa:fe:7c:41:bf:
                    eb:4b:f2:27:da:43:29:2e:0f:92:70:32:7f:56:35:
                    e1:8c:a2:99:1e:13:14:99:39:17:a7:81:ab:c4:47:
                    48:d0:76:1e:0d:f3:1e:0e:47:02:d0:b9:ec:03:15:
                    e3:02:7a:b8:8f:1f:9f:97:af:ce:f7:63:b8:e4:00:
                    86:ce:c7:41:d7:10:8d:b4:78:3c:20:3f:e2:f9:56:
                    c5:d4:f7:dd:1d:da:77:cd:85:5d:10:a6:72:11:ed:
                    f4:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:AD:F9:A5:E8:11:04:52:DF:6C:85:42:CD:9F:80:CE:77:EF:72:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/abeeb3eb-686b-307c-bd44-8183bc717769.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8e:7800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:3a:82:7f:ca:11:b6:70:39:6d:4a:c7:fc:53:68:24:76:49:
         67:be:d4:b5:de:7b:1f:8c:4f:1d:bd:eb:ff:ed:74:a9:6b:fb:
         65:a2:4b:ac:37:1a:d0:e3:3e:c7:08:84:6b:e8:66:26:e9:3f:
         f3:23:22:38:01:50:00:62:20:e2:bb:12:45:98:ce:51:fb:35:
         4a:b6:65:b4:a2:27:5f:6e:d0:dc:2c:63:af:cd:56:6f:0c:6a:
         90:81:0d:62:10:d4:57:f2:0d:32:dc:dd:e6:26:2d:54:1a:c2:
         92:6a:28:95:f8:44:5f:88:65:5f:bd:0f:39:97:ed:8c:a1:02:
         83:d4:5b:19:ee:f7:5a:67:e1:f0:31:66:75:35:05:37:98:c1:
         96:a7:6a:29:9f:8c:a4:5f:bd:9b:7a:b1:e1:10:52:e6:4b:0e:
         2d:bf:06:da:c3:67:eb:36:87:93:e9:67:a8:e6:f8:78:79:6c:
         b6:eb:3f:9d:ea:d3:69:7b:d6:0e:e5:8c:9f:3d:c6:b3:fd:57:
         32:67:22:57:55:07:fd:93:e7:51:52:b4:03:6f:99:40:54:f1:
         ad:a4:b3:4d:27:31:5a:f9:ce:d3:2a:a3:d6:ca:5e:dc:06:25:
         0f:bb:48:c3:ad:43:42:51:e4:fb:87:19:01:c3:02:4d:d2:1a:
         7c:ad:85:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 03:09:09 2026 by rpki-client