Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c8967e35-666f-309b-87fb-dccf7ebed235.roa
File:                     c8967e35-666f-309b-87fb-dccf7ebed235.roa (raw, json)
Hash identifier:          2axuCI8OICchpKLNu4QGqDpidv9qTxtBjV558cJjrm4=
Subject key identifier:   C6:DC:43:36:88:E8:04:FB:33:6A:34:09:82:21:70:3E:08:B0:58:87
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584E46BF2CB0AD1F417507C81700
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c8967e35-666f-309b-87fb-dccf7ebed235.roa
Signing time:             Wed 24 Jun 2026 09:00:12 +0000
ROA not before:           Wed 24 Jun 2026 09:00:12 +0000
ROA not after:            Tue 22 Sep 2026 09:00:12 +0000
asID:                     30036
IP address blocks:        2604:2e87:8c00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:46:bf:2c:b0:ad:1f:41:75:07:c8:17:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jun 24 09:00:12 2026 GMT
            Not After : Sep 22 09:00:12 2026 GMT
        Subject: CN=69ec64d0-f053-4d1f-bec0-3c796907e65f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:7a:a4:e9:29:e2:c0:ca:1e:a0:f9:f5:14:59:
                    ef:e3:1b:3d:42:f9:0a:49:2f:ab:1a:98:43:51:a3:
                    28:7f:ac:df:fc:ee:c4:96:48:4b:e0:95:4d:3e:94:
                    d6:b3:d8:1e:d7:af:39:a1:cd:54:cf:39:80:3d:99:
                    36:28:46:7f:18:12:76:13:6d:6b:d1:ca:09:db:84:
                    77:47:b4:ac:d0:05:48:6d:88:f3:d8:77:a5:c4:e7:
                    86:33:90:b1:42:c2:f0:e9:73:a2:bd:8b:42:2b:3e:
                    f6:ca:9b:c2:d4:41:55:83:6f:f4:98:8f:b6:24:65:
                    d0:9b:f5:a6:39:e5:02:e4:46:00:33:57:12:72:b5:
                    e8:f2:59:cc:28:a2:f6:3f:56:9a:f1:45:c5:d4:53:
                    e9:ac:0e:f6:2b:d2:c3:44:fb:86:a8:3b:8f:56:c7:
                    06:f5:dc:86:11:d2:57:a4:59:19:be:c7:f0:56:e0:
                    06:e9:d2:88:ad:f6:98:22:86:83:36:4e:83:a8:cb:
                    83:01:0e:e5:51:0e:2f:be:48:d3:78:ac:1c:22:8f:
                    60:94:65:56:96:5d:5c:9e:72:a3:1f:1d:60:ae:0a:
                    2a:51:bd:e2:66:25:24:1a:4f:30:c7:83:1a:1f:ae:
                    b4:06:b5:f8:5a:09:f4:39:16:55:2a:a3:db:f1:2d:
                    67:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:DC:43:36:88:E8:04:FB:33:6A:34:09:82:21:70:3E:08:B0:58:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c8967e35-666f-309b-87fb-dccf7ebed235.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e87:8c00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:be:12:c5:ae:3c:95:cb:cb:44:ed:7a:2a:f8:02:68:58:75:
         d0:a1:1b:37:50:bc:96:b4:8d:f7:fa:e5:26:28:f5:8f:50:97:
         04:a9:1a:32:a7:e1:75:07:9d:55:fa:43:da:ea:48:86:0a:ea:
         c5:26:c2:b8:8d:6d:52:cc:77:03:73:24:b2:74:2a:54:77:c4:
         06:62:31:80:d9:c0:c7:fe:56:b5:16:4d:6f:db:f6:ee:3f:ef:
         13:ef:74:b6:e6:c9:2d:a2:90:7a:d7:48:84:d6:da:15:90:3f:
         e8:24:77:8d:60:8f:21:17:cd:71:df:77:4d:6e:f7:c0:7f:b3:
         61:33:fa:c5:fe:ce:ea:fb:95:57:82:d9:11:e2:6f:6c:5a:f2:
         f3:3d:75:75:c3:86:2f:7c:a4:d2:a6:93:11:97:e0:49:04:22:
         5b:09:32:e5:fc:95:34:d8:c2:3e:51:6c:c4:37:08:75:a4:9c:
         02:8b:b0:02:60:aa:23:00:88:d3:9c:c0:f8:33:90:7a:70:18:
         cf:55:ce:47:d3:7f:2e:5f:1a:f2:32:fe:d6:e2:8f:bf:cb:5b:
         d4:df:af:09:23:7c:6d:a7:aa:61:22:23:3e:c8:05:21:b8:d8:
         3c:c8:be:a4:d6:00:ec:2f:fa:ad:bd:76:da:c4:2b:82:76:f9:
         99:c2:1c:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:11:17 2026 by rpki-client