Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b0976086-2e31-3fcf-bda3-0e4d0daa7b0a.roa
File:                     b0976086-2e31-3fcf-bda3-0e4d0daa7b0a.roa (raw, json)
Hash identifier:          bT6Mq0UjgVvIk4cFsg+iAcLDO/lOklvVEVlO8A5PpSI=
Subject key identifier:   C0:59:C0:51:C6:7E:8A:1C:94:5D:6F:B5:1B:2C:24:95:0D:F6:07:3E
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584DBBA04770D5F530CFBB0D8880
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b0976086-2e31-3fcf-bda3-0e4d0daa7b0a.roa
Signing time:             Tue 05 May 2026 13:00:31 +0000
ROA not before:           Tue 05 May 2026 13:00:31 +0000
ROA not after:            Mon 03 Aug 2026 13:00:31 +0000
asID:                     19905
IP address blocks:        2604:2e89:6c00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bb:a0:47:70:d5:f5:30:cf:bb:0d:88:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: May  5 13:00:31 2026 GMT
            Not After : Aug  3 13:00:31 2026 GMT
        Subject: CN=be5d3f97-d980-4e2e-89a1-12300637de94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:1a:af:79:3b:6a:82:8e:66:8d:8b:83:db:08:
                    5d:ce:e3:66:f4:91:54:01:28:1d:58:f1:64:97:8b:
                    08:0e:b2:ac:5a:f4:74:c1:eb:48:67:e9:ab:a8:07:
                    9c:c1:94:5f:17:d0:54:f1:d9:96:ca:53:68:c1:d8:
                    97:3e:60:32:71:1e:fc:ce:8f:e5:35:b7:17:42:1d:
                    7e:be:40:f5:5a:69:da:fb:f9:84:13:26:98:e8:41:
                    67:31:10:9e:36:bd:76:3f:52:c1:fa:a5:d0:d7:cd:
                    ba:c8:6d:ee:63:0d:49:2e:c5:96:34:56:a6:9d:82:
                    5e:c2:98:c4:35:76:2e:5b:cc:dc:c4:df:74:26:1d:
                    d1:52:27:27:3d:a6:3b:56:45:b7:10:0f:34:f9:45:
                    a6:a4:c1:9b:8f:83:59:00:52:82:28:c8:6e:8f:99:
                    91:1d:85:bf:7d:d0:6b:5f:e6:61:56:6e:44:57:68:
                    86:c7:97:e7:24:d2:52:26:b3:bd:28:38:f8:fb:34:
                    e0:83:ef:08:79:79:6f:6c:91:34:30:18:7e:ac:1f:
                    77:60:72:70:11:47:18:00:db:ca:a8:f1:45:23:e3:
                    aa:f8:1d:79:d8:01:b2:8a:3d:8f:f9:40:33:0d:c4:
                    aa:a8:37:7a:6e:67:fb:2f:60:5d:b0:0a:5c:c4:37:
                    90:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:59:C0:51:C6:7E:8A:1C:94:5D:6F:B5:1B:2C:24:95:0D:F6:07:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b0976086-2e31-3fcf-bda3-0e4d0daa7b0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e89:6c00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:44:ab:a7:3d:7e:65:0d:4d:fa:98:95:10:42:24:08:bb:c6:
         2a:f4:b5:e6:50:fa:32:d7:23:10:6b:91:bb:72:62:d3:f3:ed:
         c0:9d:f8:3f:b4:db:64:b7:81:26:8d:50:f0:5c:b6:0c:c7:0f:
         78:5a:2e:a6:d9:0a:0f:dd:67:94:f1:db:f8:f2:b4:98:b9:7e:
         1c:d8:f7:06:f2:fc:4f:c0:c5:4e:4a:5a:71:15:65:29:3f:ed:
         fe:4b:1f:54:f7:1b:87:ce:b9:38:c9:35:4b:69:c9:bc:3f:f5:
         b9:35:89:cf:5a:9d:8b:ee:99:0b:ac:39:0d:20:46:41:ea:5a:
         ff:2c:2f:c6:b2:64:3f:da:a3:1d:ee:0b:f3:af:37:90:7e:e4:
         a8:74:14:f9:5a:d3:17:29:b2:86:4e:9a:b8:14:95:9d:8f:b6:
         8d:cc:e5:17:ad:a8:75:b1:ec:7e:53:6f:6a:0a:ec:57:af:7c:
         9c:3c:fd:54:89:c9:5e:d4:53:7d:84:2e:e1:53:83:4d:95:80:
         30:3c:0e:c9:70:6d:55:96:d6:78:7c:c2:c8:0f:8d:19:72:55:
         8e:3c:2e:0d:b9:72:3b:16:54:5c:47:60:51:30:79:f5:2e:50:
         09:29:8c:6c:9d:cd:ce:8e:22:e5:52:18:9b:04:18:99:84:c3:
         b2:75:b7:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 8 20:26:55 2026 by rpki-client