Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2b09540b-f295-348b-86b7-42a32bfc97fd.roa
File:                     2b09540b-f295-348b-86b7-42a32bfc97fd.roa (raw, json)
Hash identifier:          ZyIqzSKvX6q8p3tVDD+/UHGWL8arwyqfXlBHU6KEqR0=
Subject key identifier:   A1:FE:65:B6:11:87:27:4A:FD:74:C8:F5:B5:65:F8:CB:FC:3D:F5:3C
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584D27AABEF183587B14F37CD480
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2b09540b-f295-348b-86b7-42a32bfc97fd.roa
Signing time:             Fri 13 Mar 2026 13:00:40 +0000
ROA not before:           Fri 13 Mar 2026 13:00:40 +0000
ROA not after:            Thu 11 Jun 2026 13:00:40 +0000
asID:                     30036
IP address blocks:        2604:2e89:9000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:27:aa:be:f1:83:58:7b:14:f3:7c:d4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Mar 13 13:00:40 2026 GMT
            Not After : Jun 11 13:00:40 2026 GMT
        Subject: CN=843c666f-2766-4088-a53a-fcf697c5d6fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:a2:ec:25:76:2a:2c:55:59:41:2a:3d:a1:f8:
                    0c:2f:d6:85:29:f9:09:e6:bc:c0:9a:8b:76:4f:be:
                    2f:14:06:90:de:d2:83:01:d6:d7:17:0e:26:c2:fa:
                    f1:72:2b:a2:8f:da:27:a8:b5:cc:62:81:a7:b8:ad:
                    09:a6:46:40:38:35:d2:7e:68:d1:97:8c:64:2c:5e:
                    6b:bb:ff:bc:f2:31:30:ee:7c:91:2a:79:1d:a7:2e:
                    6c:ed:d7:57:8b:df:95:d3:a7:60:79:14:17:d7:98:
                    72:d1:b0:0b:83:df:75:1e:43:c6:02:91:4b:99:44:
                    cc:d8:be:c3:28:ef:b9:35:32:9e:f8:3a:e9:36:a2:
                    ff:c6:02:cc:ad:92:36:f6:17:87:65:7b:7c:f1:cd:
                    ee:c0:22:00:86:3f:e9:f8:3a:47:4e:d8:8a:8b:d2:
                    6b:3b:89:02:01:17:c4:25:fe:97:6b:e4:c2:52:9a:
                    ec:97:29:c8:b8:a6:d5:e0:0b:7a:c6:ea:06:01:2d:
                    56:08:be:17:29:20:92:75:a1:af:06:28:e5:5c:95:
                    0e:dc:7a:b1:05:08:48:54:0a:77:9a:53:6b:95:98:
                    48:8d:32:f7:ab:c9:27:5d:06:ee:e9:58:8c:34:30:
                    29:5a:88:51:1b:94:ea:ce:86:e6:b7:3e:15:40:8f:
                    82:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:FE:65:B6:11:87:27:4A:FD:74:C8:F5:B5:65:F8:CB:FC:3D:F5:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2b09540b-f295-348b-86b7-42a32bfc97fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e89:9000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:ea:7c:32:28:ce:53:13:b6:04:10:9f:33:5c:73:57:b5:ac:
         e7:b1:ec:4f:8d:c9:e0:de:c1:30:44:e7:c9:e1:96:91:a5:a6:
         fd:19:6f:29:b3:94:aa:b9:ca:39:56:85:2f:30:81:95:43:1b:
         74:a1:33:d6:0d:92:54:6a:89:7f:e9:5a:49:22:2d:a2:0b:ec:
         45:57:96:48:fb:62:df:8d:c9:b2:a8:7a:6c:2d:5b:4e:52:42:
         fb:c8:2c:f4:37:d4:9d:f4:5c:73:ed:02:b8:97:74:d6:2b:bb:
         a3:65:b1:13:0d:24:e0:5d:07:95:f9:45:14:f5:35:0c:1b:ef:
         fa:82:1b:a5:8b:09:17:27:d1:49:64:00:a2:83:b5:b6:ad:1d:
         88:0b:2a:ca:4e:3d:14:ac:55:15:43:26:77:73:13:2c:7b:1a:
         6f:fb:b6:6d:e8:a2:c0:f8:5f:24:85:e3:e4:a0:e3:cf:0d:64:
         5b:10:a7:b4:58:8f:d0:dd:f4:66:58:a1:4a:49:08:6c:9a:93:
         81:34:a5:3f:ab:58:dd:4d:0c:cb:df:66:b8:d1:44:39:5f:d7:
         36:d1:b4:eb:84:c7:8b:45:83:fa:f9:32:e8:05:2c:df:43:63:
         d6:2f:47:5c:29:fe:c6:86:59:41:b4:31:5e:93:58:0a:68:88:
         bc:81:78:37
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE0nqr7xg1h7FPN81IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk
ODQzYzY2NmYtMjc2Ni00MDg4LWE1M2EtZmNmNjk3YzVkNmZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6LsJXYqLFVZQSo9ofgML9aFKfkJ5rzAmot2
T74vFAaQ3tKDAdbXFw4mwvrxciuij9onqLXMYoGnuK0JpkZAODXSfmjRl4xkLF5r
u/+88jEw7nyRKnkdpy5s7ddXi9+V06dgeRQX15hy0bALg991HkPGApFLmUTM2L7D
KO+5NTKe+DrpNqL/xgLMrZI29heHZXt88c3uwCIAhj/p+DpHTtiKi9JrO4kCARfE
Jf6Xa+TCUprslynIuKbV4At6xuoGAS1WCL4XKSCSdaGvBijlXJUO3HqxBQhIVAp3
mlNrlZhIjTL3q8knXQbu6ViMNDApWohRG5Tqzobmtz4VQI+COQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFKH+ZbYRhydK/XTI9bVl+Mv8PfU8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMmIwOTU0MGItZjI5NS0z
NDhiLTg2YjctNDJhMzJiZmM5N2ZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiZAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAnup8MijOUxO2BBCfM1xzV7Ws57HsT43J4N7BMETnyeGWkaWm/Rlv
KbOUqrnKOVaFLzCBlUMbdKEz1g2SVGqJf+laSSItogvsRVeWSPti343Jsqh6bC1b
TlJC+8gs9DfUnfRcc+0CuJd01iu7o2WxEw0k4F0HlflFFPU1DBvv+oIbpYsJFyfR
SWQAooO1tq0diAsqyk49FKxVFUMmd3MTLHsab/u2beiiwPhfJIXj5KDjzw1kWxCn
tFiP0N30ZlihSkkIbJqTgTSlP6tY3U0My99muNFEOV/XNtG064THi0WD+vky6AUs
30Nj1i9HXCn+xoZZQbQxXpNYCmiIvIF4Nw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:25:30 2026 by rpki-client