Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/428b33ba-641e-3526-a67a-212e310bee09.roa
File:                     428b33ba-641e-3526-a67a-212e310bee09.roa (raw, json)
Hash identifier:          cUgxBSIAc6kZBA94VJVyRuHuMHN4KZ+czozM1KeEbVE=
Subject key identifier:   3C:69:5C:6B:42:C4:E2:11:45:69:B9:7C:E0:C9:D8:A8:BC:05:F5:EB
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584E5619F35E31E961988541B900
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/428b33ba-641e-3526-a67a-212e310bee09.roa
Signing time:             Mon 29 Jun 2026 21:00:12 +0000
ROA not before:           Mon 29 Jun 2026 21:00:12 +0000
ROA not after:            Sun 27 Sep 2026 21:00:12 +0000
asID:                     30036
IP address blocks:        2604:2e8e:9400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:56:19:f3:5e:31:e9:61:98:85:41:b9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jun 29 21:00:12 2026 GMT
            Not After : Sep 27 21:00:12 2026 GMT
        Subject: CN=471f7221-46db-4550-82fb-90db74e963c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a8:ee:3b:e2:d2:94:2b:52:17:66:d8:0f:36:
                    15:db:b3:b0:20:9f:d1:84:5f:f2:a9:0a:7a:cf:de:
                    a7:f6:0d:40:36:09:0d:f9:1b:fc:8a:60:78:c4:db:
                    55:83:83:ef:fe:db:5c:e1:59:b5:37:7c:2e:34:7d:
                    e6:7d:0c:b4:ae:2b:a2:da:a1:25:18:62:aa:08:13:
                    55:5b:fe:f4:f9:9c:01:3a:c5:cf:8d:a4:76:aa:7a:
                    ce:89:25:14:f4:6c:25:df:39:b8:72:ba:fb:5b:50:
                    fe:c2:9f:f4:67:7b:0d:62:8a:8c:35:85:fc:80:9f:
                    d9:95:71:a9:e2:0e:00:a5:8f:71:4f:86:b0:57:4f:
                    8a:64:9e:2e:43:fd:ad:66:bc:a8:a4:fd:50:a2:a2:
                    c2:d9:50:f2:0f:24:82:0a:2d:9c:e6:f7:4c:74:41:
                    3d:93:fb:fb:02:60:18:52:c0:fc:8b:3b:71:bf:a6:
                    d3:eb:d3:ba:7c:7e:f0:32:ee:99:ed:a4:a9:71:f9:
                    ec:53:fd:e2:1e:87:93:0f:7d:f9:e1:80:4b:6c:7d:
                    18:46:0c:5f:bf:a0:aa:bf:7a:4f:18:20:5e:0c:84:
                    a1:d3:c7:b6:f3:f4:f6:aa:16:a3:61:f5:d4:13:71:
                    cb:17:96:eb:b8:d9:61:9a:f3:32:9c:7c:dd:d9:5c:
                    42:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:69:5C:6B:42:C4:E2:11:45:69:B9:7C:E0:C9:D8:A8:BC:05:F5:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/428b33ba-641e-3526-a67a-212e310bee09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8e:9400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:89:7a:c3:01:71:2f:b4:76:c2:34:0e:87:87:d5:03:bd:c3:
         06:d7:53:55:d4:d3:d8:8b:8c:37:8d:fa:c6:04:2f:5c:1c:7a:
         0b:a2:cc:e2:3d:7a:5f:67:ba:36:57:9b:07:fe:8f:af:03:5d:
         ba:33:16:91:bc:e3:09:fd:3a:f8:65:56:e9:28:02:9d:ba:8c:
         28:d7:7b:ed:7f:c1:18:9f:3a:bf:2e:4a:84:32:98:7e:b0:bb:
         c9:37:00:bb:ab:1b:e7:80:88:10:82:61:81:7f:51:9e:f1:19:
         18:61:bc:e9:e9:47:bc:50:85:6c:67:c8:a2:fc:67:1f:8a:1d:
         6c:e4:29:77:db:d5:de:44:da:00:73:8e:63:7b:e7:e4:25:a7:
         87:f0:3d:0d:77:92:ae:8e:62:22:1f:b9:59:fc:94:46:0f:f1:
         30:c2:ea:0a:06:21:0a:15:8d:85:97:6e:1a:49:64:f5:9a:3e:
         08:79:36:d1:28:32:9c:36:45:a1:65:a1:96:19:17:6d:9b:8e:
         04:1f:13:e0:b7:29:27:ae:72:97:0a:81:40:da:79:b5:e9:ff:
         1b:05:13:41:23:e3:6d:2d:ec:42:d8:74:73:a6:76:36:54:d8:
         ab:8d:73:52:f6:c3:2d:aa:ae:5f:12:0c:e2:a1:63:4f:73:39:
         43:fe:37:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:27:33 2026 by rpki-client