Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/55ea9a63-5559-3118-9745-b3b330831051.roa
File:                     55ea9a63-5559-3118-9745-b3b330831051.roa (raw, json)
Hash identifier:          XefJfvHgso/HNs7bjbkZlro3nK0JcRtIQP/kzjsHftk=
Subject key identifier:   B0:C6:B4:EF:74:9C:C4:B7:5A:B6:AD:0F:7A:D5:49:3B:B6:B6:C5:4E
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584D27AAC0B13EFD680D215FDF80
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/55ea9a63-5559-3118-9745-b3b330831051.roa
Signing time:             Fri 13 Mar 2026 13:00:40 +0000
ROA not before:           Fri 13 Mar 2026 13:00:40 +0000
ROA not after:            Thu 11 Jun 2026 13:00:40 +0000
asID:                     30036
IP address blocks:        2604:2e8d:400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:27:aa:c0:b1:3e:fd:68:0d:21:5f:df:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Mar 13 13:00:40 2026 GMT
            Not After : Jun 11 13:00:40 2026 GMT
        Subject: CN=6a8c193f-7f55-4562-849c-130d4f655e53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:a2:71:7b:20:da:89:fa:94:e0:db:da:d0:ff:
                    dd:ec:7b:67:7a:de:64:7e:7c:d2:a6:64:ac:26:4d:
                    88:42:ad:04:c6:ee:41:a0:40:f6:c2:c5:b0:2e:74:
                    fb:58:c9:14:74:7d:0a:81:95:c3:a8:44:9e:90:49:
                    b6:ad:21:22:3e:a1:63:f1:9a:b4:eb:bc:2e:b7:a5:
                    b8:91:3a:07:6b:1b:0a:50:30:a9:05:b1:39:08:24:
                    6e:09:f9:aa:8d:c3:3c:ac:f2:e4:fa:80:b8:e4:41:
                    9b:b2:72:d5:af:90:1a:8d:25:2a:11:80:8c:9b:bb:
                    d3:f5:5d:4f:8b:e3:6f:a6:87:80:bc:15:44:ec:fb:
                    34:c2:b0:bf:03:a8:8f:25:b6:90:dd:8b:ca:36:fd:
                    17:bf:6b:51:ff:4f:2c:99:da:dc:d7:17:84:61:26:
                    e4:c3:29:05:48:6c:ea:d0:8c:fe:19:a9:ce:86:a8:
                    e2:96:ef:fe:c1:39:5f:17:7a:fa:8e:9a:e4:a3:f6:
                    5d:70:8d:50:52:1b:03:32:f6:0d:2d:af:d9:2c:11:
                    04:68:8b:b4:2d:e1:b0:14:3a:85:58:15:d0:49:a8:
                    73:40:c7:f1:02:57:c2:16:00:4c:8d:f7:c1:ed:27:
                    a5:55:ab:0c:a1:d7:2b:d8:c4:20:34:0e:41:0e:40:
                    4d:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:C6:B4:EF:74:9C:C4:B7:5A:B6:AD:0F:7A:D5:49:3B:B6:B6:C5:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/55ea9a63-5559-3118-9745-b3b330831051.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8d:400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:3d:fa:5e:6b:d8:a8:aa:1d:17:19:b8:5c:24:08:01:7b:2a:
         b8:17:c6:27:45:33:50:f6:fb:16:2e:20:a6:1a:b0:17:84:fa:
         f8:3c:c8:72:e0:6d:bf:7e:3b:20:eb:0c:26:7f:04:0d:d9:24:
         14:fd:c6:92:cb:80:ea:2e:7a:29:e8:db:1b:00:af:2a:a8:f6:
         d2:dd:15:01:cd:95:8a:fd:0a:b9:a7:99:a3:9d:d7:55:b5:d8:
         64:03:66:37:9d:69:37:d1:01:03:d6:ef:ab:49:3c:50:bb:f7:
         26:5c:5f:61:68:c8:86:11:1b:2e:f3:dc:dc:72:b7:2a:ae:7d:
         30:2f:a8:91:34:cb:db:5e:e3:90:fa:af:02:60:0a:22:72:74:
         d2:8a:7e:91:93:24:8e:06:6c:e1:80:cf:30:f1:0b:34:56:02:
         dd:3c:e9:df:8d:e9:4d:6f:be:bf:6c:70:5c:9a:dc:17:81:e5:
         9c:92:92:66:ae:d4:1e:cd:78:58:4e:98:ce:2d:69:d7:0b:14:
         e8:ef:ce:4a:1f:d5:0e:b3:3f:32:fb:dc:ad:65:44:56:ca:48:
         a4:37:3f:7e:82:a8:57:07:69:62:25:56:ec:98:1c:c6:8b:d0:
         4f:0e:99:72:87:72:57:f0:f3:9b:dd:ff:55:2f:29:e8:8e:eb:
         0e:32:83:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:12:43 2026 by rpki-client