Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bf89dd6a-88cb-3df4-ba01-72fb10210bfd.roa
File:                     bf89dd6a-88cb-3df4-ba01-72fb10210bfd.roa (raw, json)
Hash identifier:          OoZydlfsy49diXJf/UemRb9P/fQxIpobQ6gMtIMZBjE=
Subject key identifier:   E2:3C:62:07:94:A1:8D:6E:B9:00:7F:57:4C:46:08:E4:98:04:86:2F
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584D1707EF36FF23B4EE034D8840
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bf89dd6a-88cb-3df4-ba01-72fb10210bfd.roa
Signing time:             Sat 07 Mar 2026 14:00:41 +0000
ROA not before:           Sat 07 Mar 2026 14:00:41 +0000
ROA not after:            Fri 05 Jun 2026 13:00:41 +0000
asID:                     30036
IP address blocks:        2604:2e88:7000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 13 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:17:07:ef:36:ff:23:b4:ee:03:4d:88:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Mar  7 14:00:41 2026 GMT
            Not After : Jun  5 13:00:41 2026 GMT
        Subject: CN=9a8f03eb-9eef-4389-bb6a-de53a5979944
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e3:82:11:8d:72:3d:1d:df:5e:12:b5:99:18:
                    15:38:19:ee:64:df:7f:df:2b:11:27:e6:b6:50:2f:
                    eb:2a:d0:a8:16:1e:62:9f:28:de:64:1d:1d:cf:a3:
                    04:2a:19:40:45:2c:93:52:bf:dc:cf:c8:be:2e:3b:
                    1b:36:bc:f5:1f:74:2b:63:39:32:fa:c2:84:85:72:
                    b0:d8:5d:78:b1:25:b6:8c:74:62:f4:d5:cd:1b:2c:
                    ca:74:5c:56:74:ab:da:ff:eb:1e:6b:6d:29:29:77:
                    77:b7:24:bf:be:69:58:4d:0f:f9:f8:20:d9:04:52:
                    9a:20:7d:46:32:e1:17:60:bd:95:4b:75:f7:b2:fd:
                    d6:b7:11:ef:c0:83:fd:50:39:78:cf:14:9d:ea:ff:
                    b5:51:76:ac:f2:76:6d:0e:e3:11:1f:52:fc:20:18:
                    70:e5:87:18:24:dd:f1:1b:35:f0:fe:14:72:7f:34:
                    ac:48:1f:a8:51:a9:fc:2f:35:ca:8f:90:b8:d9:74:
                    a5:ff:ff:1c:e7:6d:8a:1c:06:f0:e0:6f:9b:50:02:
                    e4:b5:a1:0a:57:aa:ac:83:ee:57:99:ce:58:eb:1e:
                    7d:86:ca:21:b7:3b:83:43:29:85:cc:02:49:43:d1:
                    96:e1:72:49:91:3b:75:67:a7:2e:c1:7b:1b:d9:0d:
                    b1:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:3C:62:07:94:A1:8D:6E:B9:00:7F:57:4C:46:08:E4:98:04:86:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bf89dd6a-88cb-3df4-ba01-72fb10210bfd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e88:7000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:94:80:c2:4b:32:81:71:26:cf:22:4a:c7:ac:df:54:54:80:
         bc:30:fa:47:79:52:3c:0f:2e:89:15:f0:7d:82:9b:93:f6:c4:
         ac:7d:6b:e8:49:19:05:9d:8b:9c:c0:a3:c9:0b:b2:41:f8:7d:
         ae:6f:c0:4e:a6:64:76:3d:d8:34:b1:ea:e4:af:9e:47:20:e2:
         25:da:5e:ae:8f:bc:0a:29:91:18:b6:47:b7:64:a7:96:8d:cf:
         8e:cd:ac:f7:c1:af:72:c3:98:f3:e1:72:0c:65:e3:f7:e8:f7:
         9d:cc:2e:80:fd:3b:fa:4e:5e:58:01:79:f2:3e:ea:d1:6a:a5:
         4c:9f:90:63:14:31:97:96:e2:e4:d2:61:2a:21:51:67:6e:49:
         8f:b4:6c:ca:13:78:68:19:35:e7:8b:4d:a2:d8:a4:ff:e2:3e:
         c6:83:ae:c0:71:7b:a9:ee:4a:9e:e7:83:0b:3d:d3:42:06:f7:
         45:4e:8e:2c:2f:51:88:41:b2:36:0f:e2:a8:02:c2:5c:59:02:
         b3:d9:c5:c5:1f:ec:27:6b:98:2e:f3:bd:2a:ed:b4:dc:7d:67:
         b0:0d:86:a3:b6:8d:7e:c8:5d:74:f4:f9:b6:27:0e:2d:75:91:
         50:71:ce:40:e0:fe:aa:ed:96:c7:bf:d1:22:53:bf:c6:33:7b:
         fd:fd:b7:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 06:36:42 2026 by rpki-client