Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f7d0d4f9-e73c-37b1-9c74-4c0a37ae688e.roa
File:                     f7d0d4f9-e73c-37b1-9c74-4c0a37ae688e.roa (raw, json)
Hash identifier:          G0Ee59LEpzg/BZpNr4gzHPhwaX2Pus/Wj/Ze1pBJCzU=
Subject key identifier:   9A:4E:34:E9:50:6E:F1:56:B2:6F:87:FE:0B:CB:AA:31:9C:AF:90:60
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584D1707EB4F60BE92AD62253000
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f7d0d4f9-e73c-37b1-9c74-4c0a37ae688e.roa
Signing time:             Sat 07 Mar 2026 14:00:41 +0000
ROA not before:           Sat 07 Mar 2026 14:00:41 +0000
ROA not after:            Fri 05 Jun 2026 13:00:41 +0000
asID:                     30036
IP address blocks:        2604:2e88:2c00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 13 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:17:07:eb:4f:60:be:92:ad:62:25:30:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Mar  7 14:00:41 2026 GMT
            Not After : Jun  5 13:00:41 2026 GMT
        Subject: CN=6ce39225-0349-4636-b69d-9f8d9ce38cfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b4:a3:33:c4:30:35:07:ee:a3:ed:39:63:f7:
                    f1:98:92:44:f9:28:2e:9d:c3:61:a7:46:c9:9c:7b:
                    86:98:48:af:b8:1d:9a:fa:e2:35:ff:01:21:be:24:
                    f9:a3:c5:ba:d0:f5:0f:83:56:e6:16:91:3e:6c:17:
                    f1:a4:50:2f:84:3a:c4:fc:45:bd:0f:43:ce:8a:58:
                    fb:e4:a8:7d:de:45:d1:8a:d6:e5:a9:74:c0:19:89:
                    3e:fc:13:50:82:a3:2a:e8:47:39:62:75:23:ac:66:
                    a8:8e:4d:22:db:2b:27:8c:1e:ac:dd:79:b0:af:86:
                    70:32:68:f7:be:c8:f5:c9:75:a0:2f:3c:ca:2f:da:
                    c3:94:6b:10:12:81:b7:ee:49:0d:7c:4f:18:b7:05:
                    17:84:12:1a:1d:cc:fc:67:4b:88:e7:85:84:8b:52:
                    84:d8:14:55:73:13:3e:73:b2:c9:4b:3a:0b:f0:98:
                    3e:96:4c:2d:79:28:74:77:7c:2d:46:13:19:87:83:
                    91:f6:31:01:05:19:99:16:dd:c0:45:79:7d:a3:41:
                    05:f2:91:55:51:5f:a8:e8:e2:78:79:d2:52:42:c2:
                    08:8a:c5:d6:25:a5:c8:97:a4:fc:0d:f6:d2:d5:e6:
                    42:93:32:00:09:bb:4c:60:63:4f:eb:06:4b:36:c2:
                    65:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:4E:34:E9:50:6E:F1:56:B2:6F:87:FE:0B:CB:AA:31:9C:AF:90:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f7d0d4f9-e73c-37b1-9c74-4c0a37ae688e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e88:2c00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:eb:ef:bc:43:e8:b6:36:5d:50:5d:14:66:1f:f5:d5:f1:4c:
         9c:02:a2:9d:c7:03:6a:8d:40:a6:ab:59:41:93:34:b1:46:18:
         71:02:b4:83:b6:88:1c:d5:9b:9f:e3:a0:c7:ca:82:c6:15:7c:
         1a:ea:ec:62:5f:d5:2d:0d:0d:4a:61:38:cd:94:b1:dd:d5:15:
         24:d1:70:2d:6d:4b:ef:7a:ff:fa:4b:b8:2e:8b:82:b5:68:8c:
         4d:ae:02:2a:93:27:75:f6:8e:dc:17:4a:22:f5:6d:0d:bf:13:
         56:da:fe:4e:3a:6d:84:c6:dd:d5:83:42:7f:62:0e:89:68:2b:
         f7:29:9e:44:f0:70:9e:1f:03:fc:98:85:45:41:44:3d:c4:47:
         37:a1:23:e9:ee:2f:bb:3b:e5:2b:c5:17:3c:c9:a9:12:e1:44:
         af:2c:a7:7b:ca:df:55:45:ac:76:47:13:46:cd:1c:be:a9:8a:
         78:18:cd:0c:78:99:30:59:fe:2f:73:96:45:e3:56:c2:be:fa:
         bf:20:3e:48:52:e2:61:de:3b:05:ed:c1:65:78:f3:30:52:8e:
         02:29:20:f5:4a:40:be:c0:4b:89:a4:7e:77:99:73:c4:b4:f6:
         4f:88:a1:f4:8c:94:4f:d6:47:2f:27:4f:da:ba:1d:c1:c3:2a:
         bd:af:c6:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 06:35:05 2026 by rpki-client