Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/90a7a1f1-84fb-3671-8955-9a900b8be911.roa
File:                     90a7a1f1-84fb-3671-8955-9a900b8be911.roa (raw, json)
Hash identifier:          Jsr6sR6QfSm+DBMGf70iCJgbdXXdMlFBFp97ocYq8PM=
Subject key identifier:   AF:52:D1:47:72:CB:5F:EB:1D:00:C3:A1:05:E4:F0:50:4A:73:06:C6
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584E6DD4CF2CE29A9189BF788A80
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/90a7a1f1-84fb-3671-8955-9a900b8be911.roa
Signing time:             Wed 08 Jul 2026 09:00:12 +0000
ROA not before:           Wed 08 Jul 2026 09:00:12 +0000
ROA not after:            Tue 06 Oct 2026 09:00:12 +0000
asID:                     30036
IP address blocks:        2604:2e87:b000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6d:d4:cf:2c:e2:9a:91:89:bf:78:8a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jul  8 09:00:12 2026 GMT
            Not After : Oct  6 09:00:12 2026 GMT
        Subject: CN=6d680593-bdf3-4b79-8aed-78cb861c6f5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:e2:39:02:50:5d:f0:bf:93:05:f2:80:77:3a:
                    28:fb:61:00:af:52:ea:ef:0e:1f:e5:d6:22:af:e7:
                    17:a8:fb:b0:d2:21:6b:ed:62:c5:14:ba:bd:b2:78:
                    2c:64:72:63:d3:19:5a:8c:3e:9c:c6:68:e4:8c:1d:
                    57:ed:5c:44:0a:6c:12:e3:1b:b9:bd:08:b9:1f:01:
                    1d:74:ae:a7:6e:e1:d6:ab:05:fc:3f:42:ba:29:1e:
                    86:a5:4b:cc:5e:2f:f7:95:98:ac:7b:7e:62:b7:4b:
                    5f:06:2b:30:5d:7f:6e:2f:31:55:7c:d7:65:ff:ff:
                    3b:47:ad:44:25:18:81:04:a8:0c:a0:89:34:65:ff:
                    c5:59:20:76:12:48:35:17:4c:f2:97:83:09:7d:d1:
                    0b:6c:10:09:ec:94:68:0d:6e:cc:81:cc:9c:a2:80:
                    d8:fc:32:e9:d3:ad:cb:7d:26:ec:14:85:10:6a:94:
                    aa:e2:7a:d3:e8:9c:49:5c:9c:f8:de:e1:09:59:5b:
                    bc:dc:78:a2:0d:18:0b:4f:cc:fa:6d:f4:ab:56:1c:
                    1a:68:88:62:7c:41:91:d4:63:cc:23:b9:b9:eb:22:
                    bc:b3:0b:98:fd:e9:15:57:ed:da:4e:ab:5a:b0:73:
                    92:04:ae:39:db:16:85:09:b0:26:35:1d:a3:2b:bf:
                    2f:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:52:D1:47:72:CB:5F:EB:1D:00:C3:A1:05:E4:F0:50:4A:73:06:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/90a7a1f1-84fb-3671-8955-9a900b8be911.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e87:b000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:65:86:62:43:94:a1:4d:9b:33:19:2e:26:b8:22:17:2a:b8:
         bd:05:5f:20:46:83:ce:21:87:fb:0d:b9:2e:ec:7e:45:3d:39:
         8d:24:8e:64:70:a3:22:47:d0:4e:8d:f4:5b:66:79:76:85:12:
         4e:4c:db:2e:ea:b8:59:7f:27:8e:de:ed:1e:3d:08:2e:87:12:
         aa:a1:5c:04:9b:2c:12:79:16:44:9b:51:94:ad:5d:97:08:28:
         9e:94:7d:48:15:4a:8e:ed:25:24:79:8d:78:87:96:3a:ed:38:
         de:93:bf:61:09:a6:31:87:8a:68:e6:0a:97:60:bf:4c:71:41:
         43:d5:c1:d9:9b:99:9b:86:0b:12:aa:f7:87:9d:7c:09:14:99:
         2a:77:6b:dc:22:ef:2c:f0:e1:1e:d3:77:0c:94:3d:e5:2a:2e:
         24:ad:ae:0a:71:be:32:d9:da:fe:07:29:27:e6:2a:e3:28:73:
         7f:5c:10:9c:15:04:f4:0d:b4:be:09:6d:cf:03:7c:f4:16:01:
         7f:18:78:fc:c2:1c:bd:1a:39:94:6d:62:c4:1a:9b:9e:24:f9:
         39:4d:d2:c2:dc:dc:06:0f:43:46:4b:b8:9a:62:0e:de:cb:be:
         64:bb:30:e2:31:b8:1c:37:ef:0b:8e:e7:fa:32:92:90:ea:de:
         a1:95:7d:f3
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE5t1M8s4pqRib94ioAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI2MDcwODA5MDAxMloXDTI2MTAwNjA5MDAxMlowLzEtMCsGA1UEAxMk
NmQ2ODA1OTMtYmRmMy00Yjc5LThhZWQtNzhjYjg2MWM2ZjVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgeI5AlBd8L+TBfKAdzoo+2EAr1Lq7w4f5dYi
r+cXqPuw0iFr7WLFFLq9sngsZHJj0xlajD6cxmjkjB1X7VxECmwS4xu5vQi5HwEd
dK6nbuHWqwX8P0K6KR6GpUvMXi/3lZise35it0tfBiswXX9uLzFVfNdl//87R61E
JRiBBKgMoIk0Zf/FWSB2Ekg1F0zyl4MJfdELbBAJ7JRoDW7MgcycooDY/DLp063L
fSbsFIUQapSq4nrT6JxJXJz43uEJWVu83HiiDRgLT8z6bfSrVhwaaIhifEGR1GPM
I7m56yK8swuY/ekVV+3aTqtasHOSBK452xaFCbAmNR2jK78v7QIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFK9S0Udyy1/rHQDDoQXk8FBKcwbGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvOTBhN2ExZjEtODRmYi0z
NjcxLTg5NTUtOWE5MDBiOGJlOTExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuh7Aw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAH2WGYkOUoU2bMxkuJrgiFyq4vQVfIEaDziGH+w25Lux+RT05jSSO
ZHCjIkfQTo30W2Z5doUSTkzbLuq4WX8njt7tHj0ILocSqqFcBJssEnkWRJtRlK1d
lwgonpR9SBVKju0lJHmNeIeWOu043pO/YQmmMYeKaOYKl2C/THFBQ9XB2ZuZm4YL
Eqr3h518CRSZKndr3CLvLPDhHtN3DJQ95SouJK2uCnG+Mtna/gcpJ+Yq4yhzf1wQ
nBUE9A20vgltzwN89BYBfxh4/MIcvRo5lG1ixBqbniT5OU3SwtzcBg9DRku4mmIO
3su+ZLsw4jG4HDfvC47n+jKSkOreoZV98w==
-----END CERTIFICATE-----
Generated at Fri Jul 24 13:14:49 2026 by rpki-client