Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cd82ae28-7873-3cfe-87b3-a4c211faac56.roa
File:                     cd82ae28-7873-3cfe-87b3-a4c211faac56.roa (raw, json)
Hash identifier:          dhcyJWj+gwXOauwDsM5qcZa75DOoZD1dgzIB75G8lJI=
Subject key identifier:   27:52:3A:54:04:1D:11:EB:82:26:B8:06:AE:98:95:87:92:8B:9F:4F
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584E5D14A148BCCEB12968357D40
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cd82ae28-7873-3cfe-87b3-a4c211faac56.roa
Signing time:             Thu 02 Jul 2026 09:00:12 +0000
ROA not before:           Thu 02 Jul 2026 09:00:12 +0000
ROA not after:            Wed 30 Sep 2026 09:00:12 +0000
asID:                     19905
IP address blocks:        2604:2e8f:1000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5d:14:a1:48:bc:ce:b1:29:68:35:7d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jul  2 09:00:12 2026 GMT
            Not After : Sep 30 09:00:12 2026 GMT
        Subject: CN=81359d1e-ecaa-4f04-b177-d2a96c3fc6b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:14:26:50:f3:46:6c:8f:8c:cc:ff:c5:be:b4:
                    69:81:ff:7b:41:3f:dd:11:fa:7a:fe:38:6a:f2:c1:
                    03:5d:f0:62:b3:69:ca:96:4c:cb:bd:a2:67:bf:55:
                    c9:f7:c1:34:24:7f:5b:1f:f3:3f:87:25:f7:34:c4:
                    82:09:ab:f9:ba:f4:77:01:6b:4f:15:1b:32:92:ef:
                    74:99:c2:ae:87:8e:e4:07:3b:f9:1b:65:8b:49:46:
                    a9:d1:63:af:15:24:d7:52:82:6b:f5:b1:7e:5c:34:
                    27:b1:46:1f:3f:d8:db:d8:9c:c9:06:12:f8:49:e6:
                    66:f9:38:f7:65:52:35:1d:c1:1a:0b:77:e9:33:34:
                    ed:cf:33:e5:09:7a:1b:fb:61:a8:3a:a6:1a:93:60:
                    12:1c:ca:17:47:30:a7:1c:54:a2:0d:d1:c6:fb:3d:
                    86:fb:9e:c6:fc:c8:be:b7:a5:76:55:88:1d:ba:ac:
                    c9:80:0f:66:c7:1d:81:2f:8f:9e:ae:bd:3c:ef:86:
                    f1:dc:5f:75:43:12:76:76:b6:24:16:7a:72:d0:d6:
                    9d:e5:16:0a:5c:e8:05:93:f2:8b:3d:f3:88:f8:ef:
                    80:61:52:e0:bf:b4:2d:7c:c1:7b:57:b0:d3:de:eb:
                    03:90:ef:50:74:ca:e1:1c:18:05:4e:c2:44:96:b4:
                    6f:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:52:3A:54:04:1D:11:EB:82:26:B8:06:AE:98:95:87:92:8B:9F:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cd82ae28-7873-3cfe-87b3-a4c211faac56.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8f:1000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:80:a4:33:89:65:a2:31:d4:6a:5e:eb:77:b3:28:7f:b5:df:
         93:2b:da:67:fc:8e:4e:6d:ce:78:eb:4d:9d:81:77:e1:60:65:
         a4:84:8f:3d:61:56:82:b9:d4:81:2a:77:78:ed:44:f3:1a:ec:
         ec:d9:8f:3b:e0:11:1b:d9:07:5f:b1:df:fb:1a:19:e1:89:95:
         6f:f8:e6:b3:02:25:6f:f7:f7:41:df:80:c0:bf:ac:23:8a:97:
         1c:75:e3:2a:c9:26:0d:c1:25:d4:12:da:76:d1:3c:2d:fe:14:
         05:9e:45:68:bb:89:f3:cd:ab:43:6a:57:7c:72:30:9b:0a:c5:
         8e:32:dc:2e:12:05:48:62:6e:09:d8:20:05:b2:d0:c1:ec:ec:
         06:56:79:86:6c:2c:79:95:be:2e:ab:57:a9:9a:71:fb:e7:1c:
         4d:c8:5b:49:19:b5:6a:5f:95:bc:d4:4f:bd:8a:77:9e:a4:9c:
         3a:80:b2:3d:9e:2c:40:fc:c1:8a:72:c3:2e:9f:f7:8f:09:c3:
         ed:b0:3d:92:e7:ee:2e:f4:63:7f:e5:3d:09:31:cd:c8:eb:93:
         15:00:81:1a:92:68:16:41:fe:5d:7c:9d:de:49:a0:41:c1:24:
         7f:2b:d1:3c:6e:e8:ed:36:de:35:a3:5f:22:80:13:77:56:85:
         3d:61:85:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:26:03 2026 by rpki-client