Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a35bc94e-c7f0-3dfe-ae86-72890e86f961.roa
File:                     a35bc94e-c7f0-3dfe-ae86-72890e86f961.roa (raw, json)
Hash identifier:          QFD2giae7kA+ytRxWl8apcvUQa6+B+t9ERlIoVZBzuM=
Subject key identifier:   88:51:09:0C:29:D1:B1:88:53:24:37:27:AB:63:AF:56:C1:4F:C1:EB
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584D44FA6318ED99722454BD0B00
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a35bc94e-c7f0-3dfe-ae86-72890e86f961.roa
Signing time:             Tue 24 Mar 2026 01:00:31 +0000
ROA not before:           Tue 24 Mar 2026 01:00:31 +0000
ROA not after:            Mon 22 Jun 2026 01:00:31 +0000
asID:                     19905
IP address blocks:        2604:2e8f:e800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:44:fa:63:18:ed:99:72:24:54:bd:0b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Mar 24 01:00:31 2026 GMT
            Not After : Jun 22 01:00:31 2026 GMT
        Subject: CN=d6ac2f93-48a4-45d7-b2ea-a0f2c2074cb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:0f:51:bf:1b:c2:95:b1:d1:34:42:a8:7a:f1:
                    86:ea:17:1f:12:14:2a:74:86:60:9a:95:ad:88:17:
                    1d:5a:62:99:41:e6:3a:4b:3d:e5:48:3a:e1:d8:c0:
                    36:15:71:4c:d2:3e:6b:bd:a7:8b:25:cd:62:bd:11:
                    49:ff:69:a5:1c:f1:70:ff:a6:42:7a:68:74:f6:9f:
                    12:56:53:2e:93:b8:4c:e4:28:80:b6:70:ae:3e:3f:
                    ca:1f:a6:2b:97:64:3a:71:03:80:80:f9:29:13:36:
                    58:cf:bf:f1:94:c6:3b:9a:69:c8:c9:3b:9c:7b:56:
                    f1:06:46:62:8d:57:0f:2f:19:af:ae:74:90:87:24:
                    c2:94:76:b2:17:33:cb:f4:3d:c0:1d:86:b1:57:61:
                    d8:14:ba:0e:22:ef:74:49:15:71:58:4a:eb:09:2b:
                    8a:1e:da:ad:28:b8:98:f3:04:72:4e:06:82:e5:f7:
                    5f:10:22:f3:77:11:7b:0d:9a:e4:cf:2b:b8:63:7a:
                    ff:dd:81:4d:1a:f8:13:1e:ad:60:e8:9e:3c:44:88:
                    df:45:80:c3:4e:5c:0f:b2:f0:5c:b0:03:45:16:80:
                    d8:23:0a:62:fd:92:51:59:5f:cd:34:50:bd:24:92:
                    37:db:a6:ec:d5:34:29:6b:53:df:2f:87:36:d5:17:
                    59:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:51:09:0C:29:D1:B1:88:53:24:37:27:AB:63:AF:56:C1:4F:C1:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a35bc94e-c7f0-3dfe-ae86-72890e86f961.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8f:e800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:ff:c4:12:89:b0:6a:bb:db:a4:b5:bd:ed:eb:4c:f8:43:65:
         f3:08:84:bb:63:6d:31:52:d7:fa:e2:f6:42:18:2f:dd:9d:42:
         76:de:be:61:75:28:50:3d:29:dd:a4:8d:dd:52:62:3a:c4:2e:
         82:29:33:07:5c:03:18:9e:b4:99:73:8e:aa:f6:7b:1c:27:86:
         58:0d:6d:3b:cb:7e:21:30:db:70:ee:2d:be:5e:5e:10:e9:10:
         94:1a:d6:d9:3b:54:87:64:06:3b:59:93:f4:6e:08:1a:fb:62:
         75:e0:68:ca:33:22:c9:26:4e:6e:36:eb:4b:39:52:65:1d:2e:
         e8:08:21:0f:55:f2:19:ca:cb:1a:e2:0a:d7:66:2d:95:13:1d:
         a4:09:77:da:36:93:d2:70:87:13:c5:e7:3f:d2:0f:44:69:31:
         e8:4f:59:b0:f6:1f:03:2e:08:73:1d:6f:2c:c4:ac:09:c8:43:
         f9:2c:c8:1d:80:b7:a7:e5:8a:27:83:1e:ae:a1:11:8d:22:1c:
         12:85:66:77:30:c6:6d:41:8c:06:09:8c:13:66:e0:a3:c5:aa:
         b4:c2:99:e6:05:ed:71:c5:ec:d4:8d:8b:70:49:6c:3d:1b:60:
         59:4e:e6:34:c0:10:88:48:8c:e7:13:65:8f:63:19:22:07:3a:
         de:83:be:02
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE1E+mMY7ZlyJFS9CwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk
ZDZhYzJmOTMtNDhhNC00NWQ3LWIyZWEtYTBmMmMyMDc0Y2IwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArg9RvxvClbHRNEKoevGG6hcfEhQqdIZgmpWt
iBcdWmKZQeY6Sz3lSDrh2MA2FXFM0j5rvaeLJc1ivRFJ/2mlHPFw/6ZCemh09p8S
VlMuk7hM5CiAtnCuPj/KH6Yrl2Q6cQOAgPkpEzZYz7/xlMY7mmnIyTuce1bxBkZi
jVcPLxmvrnSQhyTClHayFzPL9D3AHYaxV2HYFLoOIu90SRVxWErrCSuKHtqtKLiY
8wRyTgaC5fdfECLzdxF7DZrkzyu4Y3r/3YFNGvgTHq1g6J48RIjfRYDDTlwPsvBc
sANFFoDYIwpi/ZJRWV/NNFC9JJI326bs1TQpa1PfL4c21RdZIQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFIhRCQwp0bGIUyQ3J6tjr1bBT8HrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYTM1YmM5NGUtYzdmMC0z
ZGZlLWFlODYtNzI4OTBlODZmOTYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuj+gw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAM//EEomwarvbpLW97etM+ENl8wiEu2NtMVLX+uL2Qhgv3Z1Cdt6+
YXUoUD0p3aSN3VJiOsQugikzB1wDGJ60mXOOqvZ7HCeGWA1tO8t+ITDbcO4tvl5e
EOkQlBrW2TtUh2QGO1mT9G4IGvtideBoyjMiySZObjbrSzlSZR0u6AghD1XyGcrL
GuIK12YtlRMdpAl32jaT0nCHE8XnP9IPRGkx6E9ZsPYfAy4Icx1vLMSsCchD+SzI
HYC3p+WKJ4MerqERjSIcEoVmdzDGbUGMBgmME2bgo8WqtMKZ5gXtccXs1I2LcEls
PRtgWU7mNMAQiEiM5xNlj2MZIgc63oO+Ag==
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:10:14 2026 by rpki-client