Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d03c064b-93ba-3f92-a0b0-8328edb0e6e0.roa
File:                     d03c064b-93ba-3f92-a0b0-8328edb0e6e0.roa (raw, json)
Hash identifier:          bGIFppto+s4Mz+YpzljNmy3dkpH/ba9ne6uo1q0SsI8=
Subject key identifier:   4B:E3:90:AA:C0:E3:80:3F:DB:5F:B7:17:BC:60:C2:A8:17:9F:99:63
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584D24DF72381EFB5C6674E4CA10
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d03c064b-93ba-3f92-a0b0-8328edb0e6e0.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     30036
IP address blocks:        2604:2e88:a400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:df:72:38:1e:fb:5c:66:74:e4:ca:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=594b0aea-32f3-4731-8b2b-62abc9861df7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:d5:09:01:29:c0:d7:12:c4:a5:9d:e1:99:65:
                    90:ba:93:b3:ef:52:63:1c:62:b4:08:65:38:b3:28:
                    b1:6a:a2:76:f5:5f:99:7b:35:dd:c2:92:8e:de:f4:
                    a6:c7:ca:11:6f:1b:bb:c7:58:25:3d:46:32:f5:bd:
                    25:74:75:38:44:db:40:e2:c8:a7:4c:52:87:03:c0:
                    49:ab:1f:f0:4b:4c:6c:d6:e9:4d:63:7f:52:1b:0d:
                    e4:73:25:73:e8:12:7a:6a:3a:00:16:1a:e1:84:d3:
                    ef:3a:25:f1:b4:03:3a:94:97:7c:a3:80:a9:17:36:
                    0b:2a:93:42:65:a1:6f:1d:74:fb:79:ed:5b:7c:12:
                    ac:05:64:ff:0f:0b:f8:09:80:2f:24:53:40:d1:1a:
                    8f:b9:40:10:c1:74:36:52:e7:5e:c7:4a:77:1f:7f:
                    f0:75:b6:02:a9:9b:97:de:f3:05:25:2d:30:7d:81:
                    6d:60:96:d2:04:d5:f5:86:ce:45:2c:82:f6:aa:73:
                    d6:37:34:d5:7b:36:5a:75:f1:4a:3c:db:c0:55:5a:
                    39:dd:59:2d:99:e7:49:6b:d6:5e:1e:93:35:59:a0:
                    9b:84:02:87:32:52:f9:74:ac:9f:b0:d5:48:4d:c4:
                    f5:28:57:55:6a:40:75:80:84:fa:bd:35:38:17:f9:
                    d7:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:E3:90:AA:C0:E3:80:3F:DB:5F:B7:17:BC:60:C2:A8:17:9F:99:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d03c064b-93ba-3f92-a0b0-8328edb0e6e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e88:a400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:f6:84:ce:08:6e:a7:90:67:55:90:10:00:28:db:49:3a:6d:
         f9:a7:6d:71:be:28:89:4b:69:85:d6:3a:cb:4d:a5:b3:10:b8:
         6d:70:c4:e6:39:da:4f:01:43:46:7a:75:78:d2:4f:8b:75:43:
         2d:a3:32:8c:ba:6e:7d:6d:c1:75:fb:6b:78:33:0c:c1:85:ec:
         f0:cc:6f:d4:0d:59:3f:af:06:ec:8d:83:e7:11:ab:89:b5:68:
         b6:cd:f0:8b:d5:39:b1:9b:5b:f7:17:af:14:e2:fb:dd:c9:80:
         a8:1b:de:c9:e1:ba:08:e0:eb:23:b6:0a:9e:b4:82:b1:88:1e:
         13:11:50:ac:16:1e:4f:1b:f4:61:3e:bf:ef:a2:95:28:40:09:
         d9:11:e8:5f:9a:4f:12:23:bc:49:97:0d:9f:2b:79:ca:33:08:
         b0:4d:7f:f0:69:93:f0:50:c7:84:9d:96:12:76:e0:86:40:17:
         90:a5:46:ef:21:39:83:e1:fe:3f:44:3b:fd:31:2e:df:87:0b:
         0c:61:6b:de:1d:78:12:e9:a8:78:dc:d2:ec:e8:05:d1:47:5a:
         2d:f0:c5:9a:78:16:9a:4f:e1:e3:20:2a:ae:f1:87:dc:4d:88:
         77:da:22:1d:59:98:70:6a:b5:16:0a:6c:4a:0f:df:60:67:5d:
         9f:81:04:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:42:49 2026 by rpki-client