Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bb938519-78f9-3ad0-a1b5-bcee5ec36b8a.roa
File:                     bb938519-78f9-3ad0-a1b5-bcee5ec36b8a.roa (raw, json)
Hash identifier:          aJwYKxW1XVr45RbCTslu1jxX1xjZweUWsT/LacWbDdI=
Subject key identifier:   FC:3D:D5:0A:1E:AA:DB:23:D9:46:B3:82:83:BC:6A:7E:CF:6A:42:B9
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584DCDC5D72CE0C3D46D38E01A80
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bb938519-78f9-3ad0-a1b5-bcee5ec36b8a.roa
Signing time:             Tue 12 May 2026 01:00:24 +0000
ROA not before:           Tue 12 May 2026 01:00:24 +0000
ROA not after:            Mon 10 Aug 2026 01:00:24 +0000
asID:                     19905
IP address blocks:        2604:2e8d::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cd:c5:d7:2c:e0:c3:d4:6d:38:e0:1a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: May 12 01:00:24 2026 GMT
            Not After : Aug 10 01:00:24 2026 GMT
        Subject: CN=2fd4faac-130a-401a-8a97-7fc07dc8aeb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:4a:ef:04:60:7c:d1:ff:4d:26:e6:36:d2:cb:
                    d2:04:e6:46:07:cc:78:71:2e:7d:23:53:b9:e7:db:
                    e4:e0:90:82:c7:4e:c5:f4:ed:3f:ff:be:3a:49:e4:
                    11:0d:4d:f3:c7:6f:3c:87:9f:54:d5:ba:b0:c4:94:
                    a5:82:a5:6c:20:72:c3:ba:69:4e:6a:33:b5:41:40:
                    2b:34:d8:b7:b2:d8:7d:27:f4:9c:fd:5e:69:7b:ec:
                    ce:95:df:d8:8a:bb:77:c5:ed:87:59:76:02:33:e3:
                    a4:85:36:59:b7:3f:02:fc:dd:ca:93:73:c5:50:51:
                    82:03:9d:05:61:f6:fd:89:59:42:d9:0f:53:93:2f:
                    fc:08:d1:cc:4d:71:b2:01:07:db:f7:3f:98:b0:5b:
                    ed:28:85:24:13:9b:0c:bd:d9:a1:75:93:c7:87:e8:
                    62:e8:cc:ab:d2:df:65:7b:a5:90:f4:d4:18:fa:6d:
                    db:a5:d8:c2:99:e8:9c:2f:dc:d6:a7:ce:44:a7:9f:
                    d0:88:b2:26:91:ac:67:a9:ed:3d:44:62:c7:d8:d1:
                    3b:eb:a4:0a:8b:eb:ef:3d:0e:f4:01:5b:a2:12:0e:
                    0e:3f:4f:64:f9:72:9f:0c:ed:bc:34:d3:6b:13:21:
                    f7:81:cc:2e:8d:54:a2:59:7d:3d:ff:99:e2:e0:ab:
                    84:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:3D:D5:0A:1E:AA:DB:23:D9:46:B3:82:83:BC:6A:7E:CF:6A:42:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bb938519-78f9-3ad0-a1b5-bcee5ec36b8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8d::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:3b:93:31:48:9b:3e:c0:63:5f:5e:e7:76:d3:ba:db:4c:51:
         04:69:67:20:05:f8:c5:41:8b:6c:6d:9a:41:90:1c:99:65:27:
         49:5a:e0:d1:b1:f2:64:36:5f:a6:c8:e0:db:39:a9:25:e8:0a:
         45:43:10:cf:57:86:b7:f9:b3:1c:6d:cd:09:f0:cc:1b:74:f9:
         0a:60:e1:37:b4:95:89:75:fa:9f:b9:14:20:52:2a:db:04:b3:
         7a:13:f0:5a:b3:5d:61:19:43:52:00:4b:af:3c:2f:87:37:d4:
         b1:a2:c6:ff:ee:36:76:08:0a:ff:a2:fa:05:34:73:32:80:72:
         8d:04:26:4c:3f:ce:3b:96:b6:1f:f2:26:7d:39:45:1a:9f:ca:
         1f:1e:6f:65:08:b0:cd:0e:ce:af:42:f3:b1:d4:4d:10:e0:c9:
         bd:d5:43:14:0d:97:9a:fd:3d:46:f2:24:fd:1d:5c:e0:99:48:
         bc:61:25:e6:ef:ca:ce:8b:dd:96:e2:41:c9:c4:3d:76:2d:aa:
         1b:93:79:df:92:d3:cf:ef:26:de:fc:07:0c:c2:86:8d:fc:f5:
         4c:0f:b3:2a:a8:97:0a:05:88:e1:53:8f:58:66:5f:6e:f5:a3:
         38:dd:10:d4:dd:dd:6b:f3:79:62:87:07:6e:76:06:c7:49:a6:
         72:71:77:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:22:01 2026 by rpki-client