Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b1704602-b3eb-3814-8a9d-83b52f2dd4d6.roa
File:                     b1704602-b3eb-3814-8a9d-83b52f2dd4d6.roa (raw, json)
Hash identifier:          oZEZKyJZJ2WCbUUJ0D4T2JFlTfkcaAxdEreYoybfSxA=
Subject key identifier:   F7:2C:39:50:79:D7:DF:32:E0:8A:A8:95:0D:00:B6:A0:0A:59:66:E8
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584D40CA3E5F3231DE3826F82F80
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b1704602-b3eb-3814-8a9d-83b52f2dd4d6.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     30036
IP address blocks:        2604:2e80:c05::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:ca:3e:5f:32:31:de:38:26:f8:2f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=bbdaba86-f883-4fd5-89a7-f80862724aa8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:2d:2f:b0:cc:67:78:f7:2b:33:11:c8:10:bf:
                    15:4f:eb:7c:1a:07:46:b6:95:d3:78:f1:2d:02:39:
                    cb:fb:dd:6a:87:1a:37:46:42:d7:10:cb:7f:ff:86:
                    11:8b:8f:3e:e8:40:15:ae:28:46:bd:58:c3:70:56:
                    70:ae:86:d4:c6:9c:87:5b:20:03:26:25:fc:90:1f:
                    0d:a6:16:a2:67:a4:aa:53:c1:11:68:6f:e5:da:1f:
                    df:cf:b4:1f:53:78:98:d9:18:79:e9:d9:5c:16:2f:
                    d3:3f:03:5e:25:ee:0e:d7:47:81:23:53:22:b4:b9:
                    f7:46:84:63:a6:ee:8a:b3:20:10:62:ba:83:ff:86:
                    2d:c8:d4:05:d9:9e:48:ea:23:68:05:2e:36:d9:83:
                    aa:09:93:9a:18:7c:b2:7a:63:31:b6:57:40:71:8f:
                    03:fb:b4:77:53:61:61:4f:84:e0:ab:21:d3:ba:fb:
                    64:7b:39:95:e4:c1:87:5e:fb:f7:71:de:c7:70:7f:
                    c4:b5:a6:26:3f:cb:ed:22:b0:da:8d:3b:a8:79:af:
                    c2:1e:ba:52:05:39:9f:39:ca:71:bc:99:63:c2:18:
                    06:4c:ac:2a:5e:d2:15:a2:ad:a2:c4:f7:b0:54:5b:
                    ff:d8:c4:10:6f:63:8c:51:4c:68:ce:fe:02:b9:98:
                    42:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:2C:39:50:79:D7:DF:32:E0:8A:A8:95:0D:00:B6:A0:0A:59:66:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b1704602-b3eb-3814-8a9d-83b52f2dd4d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e80:c05::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:e1:8e:8b:77:48:21:25:63:92:ea:02:a2:e1:ec:31:af:6b:
         57:15:f3:f3:ef:8b:3b:15:2c:42:65:c1:ec:11:56:5d:ca:01:
         4f:a3:84:e5:d4:ca:b2:58:d0:3a:e7:4f:8e:ae:35:e7:b2:26:
         98:57:21:fa:46:2b:c9:06:ed:d0:d1:95:45:48:ea:7f:f7:48:
         b5:d3:d6:1c:24:e2:35:2b:7f:7d:1b:3d:37:f5:53:ea:1c:54:
         de:26:1a:1f:a0:f9:54:6d:4a:68:65:b1:a5:40:24:70:98:af:
         0f:c2:24:3c:18:46:9c:2d:a7:67:a7:6c:26:bb:1b:21:b1:3d:
         60:27:3f:14:6b:cd:64:80:df:88:c6:90:ff:c9:30:b6:57:4e:
         d7:23:d6:78:b7:80:a4:ed:84:67:fc:88:54:ec:bc:2e:ec:1a:
         8e:35:cf:a7:e9:4c:8e:83:51:29:28:a0:ce:71:08:44:f4:41:
         cc:b8:37:b5:83:66:b6:ef:d5:33:15:7e:ba:29:1b:8a:fe:be:
         d0:37:1c:42:98:9a:9e:60:23:97:ff:03:a1:75:5c:54:61:cb:
         f5:8b:81:11:52:e3:86:57:28:6a:50:db:6b:fb:dc:87:00:7f:
         0a:1f:53:c2:9b:51:2c:27:ba:73:c3:aa:d1:dd:ea:51:01:99:
         fc:25:fa:39
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1Ayj5fMjHeOCb4L4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk
YmJkYWJhODYtZjg4My00ZmQ1LTg5YTctZjgwODYyNzI0YWE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkC0vsMxnePcrMxHIEL8VT+t8GgdGtpXTePEt
AjnL+91qhxo3RkLXEMt//4YRi48+6EAVrihGvVjDcFZwrobUxpyHWyADJiX8kB8N
phaiZ6SqU8ERaG/l2h/fz7QfU3iY2Rh56dlcFi/TPwNeJe4O10eBI1MitLn3RoRj
pu6KsyAQYrqD/4YtyNQF2Z5I6iNoBS422YOqCZOaGHyyemMxtldAcY8D+7R3U2Fh
T4TgqyHTuvtkezmV5MGHXvv3cd7HcH/EtaYmP8vtIrDajTuoea/CHrpSBTmfOcpx
vJljwhgGTKwqXtIVoq2ixPewVFv/2MQQb2OMUUxozv4CuZhCzQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFPcsOVB5198y4IqolQ0AtqAKWWboMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYjE3MDQ2MDItYjNlYi0z
ODE0LThhOWQtODNiNTJmMmRkNGQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgQugAwF
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAKPhjot3SCElY5LqAqLh7DGva1cV8/PvizsVLEJlwewRVl3KAU+j
hOXUyrJY0DrnT46uNeeyJphXIfpGK8kG7dDRlUVI6n/3SLXT1hwk4jUrf30bPTf1
U+ocVN4mGh+g+VRtSmhlsaVAJHCYrw/CJDwYRpwtp2enbCa7GyGxPWAnPxRrzWSA
34jGkP/JMLZXTtcj1ni3gKTthGf8iFTsvC7sGo41z6fpTI6DUSkooM5xCET0Qcy4
N7WDZrbv1TMVfropG4r+vtA3HEKYmp5gI5f/A6F1XFRhy/WLgRFS44ZXKGpQ22v7
3IcAfwofU8KbUSwnunPDqtHd6lEBmfwl+jk=
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:43:25 2026 by rpki-client