Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5f174a83-f855-3fb1-877a-d38cdec4e0ab.roa
File:                     5f174a83-f855-3fb1-877a-d38cdec4e0ab.roa (raw, json)
Hash identifier:          8kg287Rp66nYQT8FyYI0MgtdGV0ZPY5RhplvJ4kS5pw=
Subject key identifier:   A7:EF:A5:19:A4:BE:7D:AA:42:B3:9C:CE:D8:13:65:9C:1B:98:86:2F
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584E4DB9DAAD27D3CE029D2B8800
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5f174a83-f855-3fb1-877a-d38cdec4e0ab.roa
Signing time:             Fri 26 Jun 2026 21:00:11 +0000
ROA not before:           Fri 26 Jun 2026 21:00:11 +0000
ROA not after:            Thu 24 Sep 2026 21:00:11 +0000
asID:                     30036
IP address blocks:        2604:2e8f:9c00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4d:b9:da:ad:27:d3:ce:02:9d:2b:88:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jun 26 21:00:11 2026 GMT
            Not After : Sep 24 21:00:11 2026 GMT
        Subject: CN=ffde82c1-dbc6-4934-932b-587cb637d322
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f5:e9:50:23:12:57:46:0c:4d:e4:59:6a:c0:
                    5d:0c:02:86:ed:6b:62:7c:b1:ac:19:0c:87:42:30:
                    ab:5e:0f:c5:f0:84:d6:01:5e:09:04:1d:6a:e9:f4:
                    44:29:b6:85:64:fc:28:bf:42:67:79:21:9f:18:c3:
                    22:96:ff:d2:e9:61:11:99:c8:f3:d4:05:28:87:d6:
                    01:12:9b:98:e9:81:96:a4:91:ef:53:bd:da:c4:07:
                    68:04:80:73:e5:be:03:9a:a6:8f:9a:ba:f1:94:7f:
                    7b:78:c3:08:42:05:37:c8:45:a4:c0:38:3b:04:48:
                    1f:c5:2f:42:6d:ca:60:03:9d:63:b0:96:16:5c:91:
                    fe:59:c9:25:7c:0b:9d:04:eb:37:67:25:a9:7e:01:
                    b5:dc:ed:63:5b:69:a1:90:15:8f:00:15:a9:a8:7e:
                    ea:2f:cf:9f:82:bf:2a:d3:9b:15:22:7c:23:1d:4e:
                    71:fe:be:52:57:19:83:fe:80:bc:25:7d:49:33:da:
                    77:15:81:c0:82:42:04:73:77:58:56:b7:16:db:63:
                    d3:6a:82:34:6c:72:51:07:d7:c3:ef:87:fa:75:1a:
                    23:bd:22:06:bf:38:45:65:e4:1a:da:dd:3e:10:f6:
                    65:a2:30:69:db:6e:f2:ac:23:06:82:70:2a:ef:55:
                    43:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:EF:A5:19:A4:BE:7D:AA:42:B3:9C:CE:D8:13:65:9C:1B:98:86:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5f174a83-f855-3fb1-877a-d38cdec4e0ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8f:9c00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:90:0d:00:f7:54:93:c6:55:93:54:19:91:c1:51:16:d1:29:
         d9:0d:54:f4:27:5a:1f:b6:43:d6:df:ff:73:f5:fc:0c:7b:33:
         c2:2a:00:c7:ab:07:76:27:0e:e4:e6:d7:95:ed:ec:c0:8e:29:
         bd:27:f2:d1:f3:da:98:2b:31:76:f8:97:f1:ef:94:53:03:01:
         1c:52:9c:04:17:dc:25:b5:3b:a3:4f:5c:b4:ce:55:74:4f:72:
         7e:79:b8:1b:0a:99:88:af:65:2d:7a:a5:8c:f4:e6:f1:4f:5b:
         5a:64:12:98:cc:47:a9:7d:f2:16:77:46:ae:a1:ec:1a:96:3f:
         a3:1e:29:7f:2d:eb:56:f8:d2:4c:4b:fc:a5:6d:e6:62:33:41:
         9f:bc:a4:79:b9:a4:25:49:29:d9:00:be:7e:50:94:e0:3e:b2:
         78:6d:1d:70:52:d8:7f:57:34:39:c3:31:4a:98:52:6a:ef:7f:
         d3:bd:ad:b4:31:08:90:0f:56:f4:93:14:8a:b2:c8:f6:eb:7f:
         ec:fc:6d:06:0a:bf:e8:4a:a6:fc:bb:44:64:67:14:ff:c2:e2:
         87:73:09:25:d2:79:64:1d:14:06:41:95:57:66:91:9a:18:d4:
         b5:2f:8a:ee:93:a3:19:ae:23:9d:31:98:bc:8e:d6:b5:f6:ab:
         9c:af:50:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:48:36 2026 by rpki-client