Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/e49fa3d1-af37-313a-a929-f6fc07cde917.roa
File:                     e49fa3d1-af37-313a-a929-f6fc07cde917.roa (raw, json)
Hash identifier:          j7XJEWEyUm8ZnBE9WCb9ADd83y00GyUkT4keScnrIzI=
Subject key identifier:   58:E4:21:A2:47:98:28:E7:41:2C:BE:70:60:E3:66:F3:27:4A:50:10
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584DBBA06B1ADAC9CCFB8F75DAE8
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/e49fa3d1-af37-313a-a929-f6fc07cde917.roa
Signing time:             Tue 05 May 2026 13:00:31 +0000
ROA not before:           Tue 05 May 2026 13:00:31 +0000
ROA not after:            Mon 03 Aug 2026 13:00:31 +0000
asID:                     30036
IP address blocks:        2604:2e89:6c00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bb:a0:6b:1a:da:c9:cc:fb:8f:75:da:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: May  5 13:00:31 2026 GMT
            Not After : Aug  3 13:00:31 2026 GMT
        Subject: CN=a9fac81a-ae1b-42f1-8e53-ed9b68547b65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:06:48:82:d0:55:e5:35:33:11:14:0f:ba:55:
                    56:ee:a2:70:a3:16:97:8d:0b:57:b4:de:b9:b7:a9:
                    e0:21:ee:6d:53:06:06:b1:58:31:91:a6:bc:50:b9:
                    9e:a3:7c:8e:ab:24:9e:a6:d0:8d:2b:0b:56:24:44:
                    0e:73:cf:36:79:2b:c3:3a:fe:09:06:c8:eb:35:20:
                    ed:03:ba:e5:3c:13:d1:66:42:d8:93:d4:a9:bd:24:
                    7a:12:33:32:f6:36:e6:28:c2:97:91:05:ee:da:78:
                    65:b2:9d:97:d4:76:27:c4:1e:4f:58:d3:36:ce:1e:
                    ec:8a:b7:ab:b8:12:fe:49:c5:02:a1:0f:3d:e3:1c:
                    c0:77:64:bb:0a:8c:ad:f7:96:e4:1e:26:89:3b:ce:
                    cb:51:14:de:cc:13:8d:77:b1:0a:ef:12:29:de:76:
                    33:1c:13:d3:17:89:98:6c:7a:58:20:50:68:b6:21:
                    79:a4:52:62:4d:d0:7a:ad:aa:1b:06:d1:ba:4f:74:
                    5c:70:39:cd:a2:4b:a9:53:b5:12:5f:77:ad:ea:7d:
                    6b:9f:c8:3d:1d:a3:ec:35:24:97:d9:58:d1:13:66:
                    35:42:4b:aa:16:fa:d6:6d:86:48:57:0c:21:85:46:
                    5f:87:14:12:93:b4:ec:a5:91:2f:55:bf:ef:20:f3:
                    28:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:E4:21:A2:47:98:28:E7:41:2C:BE:70:60:E3:66:F3:27:4A:50:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/e49fa3d1-af37-313a-a929-f6fc07cde917.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e89:6c00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:02:0b:18:f2:75:af:c7:47:38:43:2b:38:42:25:af:1c:eb:
         a9:6d:ec:3c:6d:d9:99:03:22:94:c8:cd:ed:8e:98:09:ee:49:
         b5:7c:26:9e:a9:3a:6f:a7:e1:92:92:57:4c:4b:16:8e:c0:be:
         69:af:65:26:d1:48:a3:78:f7:dc:be:70:d0:8a:26:b9:57:71:
         b3:7b:0f:41:92:44:4d:ee:19:43:d8:d3:fa:21:4e:55:18:b9:
         bc:0c:28:47:ff:db:9e:7f:3f:ac:d5:16:dd:2a:ad:cc:9d:14:
         9a:07:95:8f:7d:ba:12:94:70:0a:c1:3b:b2:d4:5d:1d:9b:e3:
         b2:12:37:e4:c2:9d:0a:d7:f9:19:3e:52:11:11:75:b7:5c:bd:
         54:41:e4:a9:06:2a:7a:35:c8:6e:e4:98:05:ea:bf:75:d1:23:
         9f:8d:61:15:89:a8:70:b0:48:03:5a:36:4d:e8:62:54:f1:7d:
         a8:4c:8c:7f:67:34:e6:f5:ad:0b:be:27:c2:d8:38:9a:84:e3:
         0c:35:94:9a:48:85:c0:e8:dc:ca:fc:2c:fd:f2:a9:ed:52:74:
         5c:5e:ed:d3:1d:68:1d:75:e8:f7:b0:92:be:96:16:fb:15:0f:
         74:1a:24:20:fe:9d:1b:1a:05:c4:b1:ae:46:4f:d0:1a:d7:38:
         fe:7c:90:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 8 19:35:21 2026 by rpki-client