Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1f50bb70-b378-3aa0-b898-c52b82c19522.roa
File:                     1f50bb70-b378-3aa0-b898-c52b82c19522.roa (raw, json)
Hash identifier:          8PZb/FeRzzYXQHVbIW+2c6P54zD3ndVEPKQQqV3IU3Q=
Subject key identifier:   F6:1B:77:D6:83:DC:C0:1F:E6:08:93:5E:88:7F:BA:70:90:25:B6:CB
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584DCDC5D6D14B47D62031B08C80
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1f50bb70-b378-3aa0-b898-c52b82c19522.roa
Signing time:             Tue 12 May 2026 01:00:24 +0000
ROA not before:           Tue 12 May 2026 01:00:24 +0000
ROA not after:            Mon 10 Aug 2026 01:00:24 +0000
asID:                     19905
IP address blocks:        2604:2e89:4c00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cd:c5:d6:d1:4b:47:d6:20:31:b0:8c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: May 12 01:00:24 2026 GMT
            Not After : Aug 10 01:00:24 2026 GMT
        Subject: CN=6971f57e-9960-4a2c-972d-c7c088be7ae3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:89:13:42:18:41:5c:d0:d1:52:b9:f5:6e:24:
                    46:26:df:da:d2:70:42:83:ef:74:72:9f:b9:91:ac:
                    65:c1:28:34:7a:c7:f2:f2:b2:cd:60:f2:33:b1:82:
                    31:86:97:f0:22:42:3b:5e:65:3c:9b:5a:ce:51:ee:
                    fa:5f:e3:3b:45:07:45:da:fa:46:4a:31:4d:f9:0f:
                    d2:59:08:0b:02:75:8c:b6:af:9f:bc:ce:ec:8d:9e:
                    8a:29:95:72:1d:a6:a4:02:ed:ad:3e:60:4b:9c:0f:
                    ed:7b:07:4d:e2:79:72:8d:70:5c:6c:5c:68:24:9f:
                    c4:2b:59:1c:8e:86:70:a3:95:98:bf:05:00:4a:2a:
                    21:7e:9b:af:c3:2e:40:07:f5:48:e6:78:60:3b:cd:
                    a5:00:68:6b:5f:05:cb:89:3f:9b:cd:2a:fd:81:bb:
                    cc:64:0a:ad:6c:e1:4d:77:fa:ee:51:7c:ed:d8:93:
                    2b:35:bd:28:fd:aa:3a:f0:f1:40:71:d7:73:0a:4f:
                    8a:0a:58:9c:c8:bc:4b:83:63:e1:09:a4:cc:dd:e3:
                    1e:da:67:84:90:f7:23:aa:79:1a:86:60:de:66:20:
                    39:a5:40:3d:a0:36:eb:62:f2:f7:18:e7:f4:da:3a:
                    cd:b3:96:ae:a8:8c:b5:f6:a0:90:c0:52:35:60:ba:
                    dc:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:1B:77:D6:83:DC:C0:1F:E6:08:93:5E:88:7F:BA:70:90:25:B6:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1f50bb70-b378-3aa0-b898-c52b82c19522.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e89:4c00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:15:bf:0d:ab:e9:76:c1:76:f7:3f:09:b0:29:25:f5:dd:80:
         f3:52:5f:bc:9c:05:58:f6:2f:4a:c7:a1:30:e6:f9:d6:da:58:
         10:06:7f:96:88:47:6b:02:60:67:e2:b3:97:a7:c1:24:37:be:
         fe:cc:28:60:29:de:2b:f2:50:8e:3a:3a:49:6a:17:bc:11:90:
         05:76:1e:4c:3b:e1:ad:74:e1:6e:09:b7:bc:c3:11:48:aa:6e:
         58:44:ee:ee:c2:76:8d:f2:06:c2:26:0a:6b:4b:43:86:01:f2:
         6c:0d:ca:18:8b:15:1f:c7:c1:46:95:63:d0:04:64:67:e3:d8:
         c1:e3:11:4c:a6:f5:67:ef:67:9b:03:0e:9e:c2:f8:68:70:f9:
         7f:11:09:96:a2:9a:e6:09:1a:49:12:e2:db:ae:84:21:7c:f9:
         6f:db:72:96:33:d2:91:47:96:ae:17:29:a6:0e:94:41:9d:e4:
         2c:96:7b:47:06:b3:e7:5b:bf:ab:aa:1c:61:54:25:59:96:60:
         65:41:59:36:80:10:71:da:1e:74:de:36:33:e8:d6:de:3e:88:
         97:46:4a:8c:0a:6c:d6:67:be:78:35:ed:11:db:08:46:1d:83:
         b7:88:4e:f0:4c:18:60:fe:e9:95:ed:92:6c:ca:2f:82:d3:f5:
         1a:4e:a2:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:20:09 2026 by rpki-client