Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d5d5e260-c995-3494-873b-02e55be73533.roa
File:                     d5d5e260-c995-3494-873b-02e55be73533.roa (raw, json)
Hash identifier:          jauvVz1gZAhzcWCAcqbSfmnFiK+hXfCnrmpAsENn5bA=
Subject key identifier:   B2:7D:4B:0F:9D:B9:5C:D5:C3:67:76:FD:18:06:21:C5:1A:03:A7:F2
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584D20AF4E49B84CBB21C4ADF300
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d5d5e260-c995-3494-873b-02e55be73533.roa
Signing time:             Wed 11 Mar 2026 01:00:32 +0000
ROA not before:           Wed 11 Mar 2026 01:00:32 +0000
ROA not after:            Tue 09 Jun 2026 01:00:32 +0000
asID:                     19905
IP address blocks:        2604:2e8d:e000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 13 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:20:af:4e:49:b8:4c:bb:21:c4:ad:f3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Mar 11 01:00:32 2026 GMT
            Not After : Jun  9 01:00:32 2026 GMT
        Subject: CN=df5c3e52-8250-42f7-9743-b89c0933119d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:48:e6:b4:52:da:75:aa:0a:d7:3d:c5:93:8c:
                    78:76:cc:2b:35:f1:27:e0:fe:9a:8b:2b:db:ca:19:
                    42:3b:0b:c2:3c:8c:7b:f0:26:d6:07:26:22:db:95:
                    dd:e1:4c:a5:69:b5:4a:17:1b:34:b1:ad:ba:34:ef:
                    64:49:6a:79:52:fc:c2:51:61:9a:27:7d:54:b1:45:
                    9d:db:42:91:78:bb:cc:be:7f:07:19:cc:e7:8d:e4:
                    90:4e:29:e8:e2:b2:28:ae:bd:c6:2f:b5:f8:ce:61:
                    4c:10:60:c8:fa:87:9e:db:fe:a0:dd:3e:dc:92:61:
                    9a:72:fa:16:ec:ff:49:48:6e:a2:35:df:d4:d0:b2:
                    ff:45:3a:7f:1d:dd:92:1c:d0:3e:7b:07:32:a6:17:
                    cd:1f:d0:c2:09:32:62:a7:8b:6d:d6:2e:8c:fc:d5:
                    95:45:a7:a8:1f:2f:61:41:78:7a:77:48:2d:4d:be:
                    1c:4f:3e:99:52:a5:8e:28:78:b1:17:f4:88:21:1e:
                    e3:a5:d3:53:4c:63:6b:e3:4b:0b:46:b7:14:55:84:
                    61:ed:08:47:3a:21:b9:4c:82:68:57:80:92:06:38:
                    d6:8d:f7:1c:78:f2:71:63:82:ea:17:c0:d2:52:66:
                    0e:a6:eb:bd:b6:13:0e:b7:c4:82:fd:5d:79:ee:2a:
                    3d:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:7D:4B:0F:9D:B9:5C:D5:C3:67:76:FD:18:06:21:C5:1A:03:A7:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d5d5e260-c995-3494-873b-02e55be73533.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8d:e000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:3a:51:72:ba:af:12:bb:1c:fd:8c:e0:08:8f:c5:be:2d:1b:
         26:4d:fb:e0:2e:06:5a:81:b4:aa:0a:9c:61:23:f3:29:89:ef:
         a6:fc:3f:0e:7e:5d:23:56:24:e0:a3:9d:e2:55:2b:0f:0a:03:
         fc:0d:91:fc:e0:69:68:e9:43:d6:89:05:e4:e8:a3:4f:67:6d:
         b9:88:62:64:62:05:9c:b6:a4:10:b8:14:dc:19:69:47:70:91:
         56:85:11:c0:97:f4:36:5d:05:a7:62:99:a7:ea:60:c1:01:87:
         40:d0:62:03:30:bb:ed:ee:85:eb:4a:5d:51:84:95:84:15:93:
         19:b7:a0:cc:82:a6:c8:d8:51:93:df:ef:e2:ed:a9:65:c1:0d:
         1d:2c:f1:e7:04:0e:90:c2:f9:8f:70:e4:54:40:7b:cf:e1:55:
         e1:8f:00:e8:43:ac:33:36:9d:77:ff:29:86:fc:b9:57:f0:75:
         6a:c9:81:e1:b7:bb:ab:f4:db:76:29:d8:95:78:6c:12:e9:a0:
         07:3f:88:3b:81:c6:7a:f8:e4:ad:fb:11:30:fa:6e:02:0e:96:
         08:b9:0f:9f:02:10:d2:9c:ca:5d:e0:ab:02:85:8f:99:ce:fb:
         06:6d:41:bb:90:32:57:43:cd:42:39:28:19:b2:0e:8b:d7:38:
         be:88:1f:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 09:32:22 2026 by rpki-client