Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/adcb7057-bc5b-329c-860e-d339f75db840.roa
File:                     adcb7057-bc5b-329c-860e-d339f75db840.roa (raw, json)
Hash identifier:          bzlInFuYtn3E6gTN/cQMvdhQbTMrzq1Gpnwa8tWt3sk=
Subject key identifier:   4E:05:F2:69:DB:94:7B:A8:C4:EB:5B:48:F3:22:C5:4A:73:13:CC:02
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584D44FA609EB01000E28D369900
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/adcb7057-bc5b-329c-860e-d339f75db840.roa
Signing time:             Tue 24 Mar 2026 01:00:31 +0000
ROA not before:           Tue 24 Mar 2026 01:00:31 +0000
ROA not after:            Mon 22 Jun 2026 01:00:31 +0000
asID:                     30036
IP address blocks:        2604:2e87:1800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:44:fa:60:9e:b0:10:00:e2:8d:36:99:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Mar 24 01:00:31 2026 GMT
            Not After : Jun 22 01:00:31 2026 GMT
        Subject: CN=ddef2b79-c47b-4099-b32c-4b4488460ed7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:c8:6c:1e:7c:10:85:e9:07:4e:16:2e:86:0e:
                    ea:d1:3d:9a:04:b5:41:43:b4:dd:cf:23:57:25:c8:
                    df:f4:23:96:02:e3:72:cb:05:18:d3:0b:d5:f4:14:
                    4a:9e:5c:52:25:78:4c:10:7c:79:44:b4:40:0a:63:
                    94:7c:f9:fd:66:09:c3:d6:10:74:10:7e:d0:cb:02:
                    c2:6a:dd:94:45:4f:43:cf:34:30:f9:d0:b1:25:fb:
                    f8:46:6a:be:fe:a4:70:38:1e:38:35:bb:bc:a7:5e:
                    93:28:35:ca:06:78:38:df:57:20:99:9a:e8:59:8c:
                    23:1d:ff:66:ee:6c:3d:b5:69:da:9f:62:6b:f5:47:
                    d8:ee:3c:35:26:74:72:5b:d3:68:ff:bf:ed:5a:73:
                    08:8a:6d:e7:43:1a:03:2d:67:e5:35:92:3e:1e:11:
                    80:23:44:23:59:14:ea:92:fd:6f:23:24:e5:fd:72:
                    29:f8:fe:88:9f:dc:c6:6f:bf:2c:15:97:3d:f6:20:
                    0b:55:aa:c1:d9:a3:40:46:91:d4:b6:82:66:da:97:
                    82:8f:e3:d3:87:b6:4d:46:ad:83:91:dc:27:df:1c:
                    8b:0b:44:a9:f7:22:f9:e0:66:1d:5d:5f:3b:aa:d4:
                    f5:06:72:21:59:a5:3f:59:31:96:01:b8:d6:48:6d:
                    f0:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:05:F2:69:DB:94:7B:A8:C4:EB:5B:48:F3:22:C5:4A:73:13:CC:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/adcb7057-bc5b-329c-860e-d339f75db840.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e87:1800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:fb:50:5a:a2:90:75:f2:01:39:4a:b2:39:f5:0c:70:d6:3c:
         07:80:70:8c:f9:1b:36:b6:61:b4:21:6a:8e:83:9f:3d:62:49:
         e0:b1:dd:b8:17:6c:aa:b9:8e:e5:a3:ed:b0:4a:c8:39:eb:02:
         79:bc:02:5b:08:7c:44:17:45:44:81:b5:85:43:eb:e6:5c:b7:
         47:73:7b:38:40:8f:ec:95:a4:ef:ef:08:32:a2:5c:72:71:8a:
         bf:0c:6c:cd:a1:8f:c6:ed:46:c4:25:96:8c:79:a6:28:bc:ce:
         0a:c1:55:24:c2:c3:ed:5a:a3:6a:f1:a0:97:14:12:18:89:00:
         2a:04:af:8c:b1:de:5f:3e:93:16:2c:c1:9a:a9:be:16:6c:01:
         51:fc:a7:db:d2:12:e8:88:c2:6c:d1:c8:ba:fa:c7:c5:f9:90:
         60:f7:71:88:d7:12:10:3a:36:9a:0e:a9:ac:6e:6c:88:c2:d8:
         f7:66:21:b8:3c:9e:79:96:42:d8:2b:be:93:3b:e9:a1:f0:51:
         d5:20:a8:84:5f:57:da:2b:53:b2:50:59:40:02:e9:4e:5a:96:
         76:36:06:3e:91:47:fe:d2:69:6d:44:57:dc:3b:30:93:ba:df:
         28:4b:e1:75:e6:9f:3b:a2:59:fc:db:01:f6:0f:6f:55:d6:49:
         1a:21:fd:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:44:29 2026 by rpki-client