Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/e99ba18e-246a-361f-8455-85489ed95006.roa
File:                     e99ba18e-246a-361f-8455-85489ed95006.roa (raw, json)
Hash identifier:          DMyOzmpuVEl1USSV0w8Mkof05j1mGx2rzPJXH4Ye8lk=
Subject key identifier:   AD:89:61:00:E5:AB:E1:B8:C8:9A:8D:67:DC:06:73:B0:60:36:19:5B
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584D24DF9D7066C55D57A1BDD100
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/e99ba18e-246a-361f-8455-85489ed95006.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     30036
IP address blocks:        2604:2e8a:b000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:df:9d:70:66:c5:5d:57:a1:bd:d1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=b6457595-a519-461f-ad7a-29feb4ffe9e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f8:bf:b6:5d:b1:87:50:03:40:b9:64:1c:4d:
                    25:fa:68:98:63:52:cf:62:b9:7e:a6:3b:dc:4a:ed:
                    45:19:48:6b:ef:ac:31:37:32:84:a9:90:7b:33:77:
                    98:d9:34:5b:7f:53:14:15:12:89:c5:b0:69:35:eb:
                    0d:39:fe:2b:18:a6:16:3e:a8:e4:68:73:a5:69:2d:
                    5d:6e:79:a5:7f:33:f0:41:f8:9a:71:64:bf:75:ec:
                    1f:19:0e:d1:95:24:92:1d:39:bf:18:41:dd:12:9c:
                    d0:b9:c9:b9:83:df:11:42:70:fc:97:35:66:d7:73:
                    a5:23:65:38:6c:36:ca:9d:3b:8c:3c:9b:23:2e:16:
                    49:4f:34:27:f8:d8:f1:2b:d3:2c:30:8d:21:e5:45:
                    36:97:50:cf:3e:45:a9:c8:88:12:fc:85:bf:b6:08:
                    79:33:a7:cd:ca:ba:7c:25:be:01:58:60:b1:37:d0:
                    f4:21:5b:4c:14:b8:28:6b:ee:7e:97:68:e0:5f:76:
                    18:cb:72:b6:37:f9:df:a6:7d:c3:0b:0d:8f:41:c2:
                    c9:b0:2e:e0:40:2c:b9:60:98:ae:91:60:d4:ea:97:
                    13:3b:2a:6a:7a:77:25:2b:28:90:9f:c9:3e:85:6d:
                    8f:b6:a7:c5:e5:9f:8d:09:9a:98:5b:3a:7d:7a:c5:
                    df:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:89:61:00:E5:AB:E1:B8:C8:9A:8D:67:DC:06:73:B0:60:36:19:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/e99ba18e-246a-361f-8455-85489ed95006.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8a:b000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:3d:e5:09:1e:17:cb:45:52:af:e5:31:1f:52:03:ed:66:94:
         49:aa:b4:7f:43:e8:48:52:4e:a1:1c:f8:33:f2:48:b4:70:e6:
         66:5f:a6:b9:ed:df:9c:a1:d6:66:bd:c3:b0:95:b5:a5:bc:31:
         30:a0:15:19:fd:59:43:bd:b2:bb:5f:e3:13:19:ad:92:20:cf:
         87:fa:d9:58:db:64:c3:18:92:fb:54:df:35:b0:fb:bc:e9:fb:
         7b:c7:22:ad:bc:9a:c2:08:e1:1f:d8:46:c0:04:56:a8:8b:a7:
         88:b9:a9:72:4a:57:f8:ce:99:67:27:67:7a:43:5d:1e:ae:e9:
         4e:a1:dd:bc:41:79:aa:55:9c:1a:b7:1d:2c:70:20:13:88:b7:
         7d:ed:32:cf:9b:65:ee:0e:8b:36:c1:78:3a:a9:ed:a5:9c:3e:
         92:a0:23:70:35:80:d5:dd:40:fa:64:dc:79:34:02:cb:72:c4:
         be:68:5d:42:bf:0e:d5:db:6d:c6:0d:ac:44:7b:51:f8:d5:b7:
         4c:b9:3b:0a:40:dd:81:d0:f4:95:90:70:78:51:23:4b:55:dc:
         e5:ae:b2:ec:0d:19:5e:dd:4b:20:8a:b9:79:45:f2:e1:35:71:
         af:5c:f7:1c:cb:96:47:47:b6:08:f8:e7:4a:1f:08:33:27:5f:
         c8:45:ff:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:26:26 2026 by rpki-client