Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ff9576dd-906c-3b5c-9872-7bd37d17a60b.roa
File:                     ff9576dd-906c-3b5c-9872-7bd37d17a60b.roa (raw, json)
Hash identifier:          wNpaskOoFw/ZsRFIF1OF2c55mQsnbUg3bA1hqw1yZd4=
Subject key identifier:   7D:D5:8F:D3:66:23:C2:54:81:B6:A0:F5:42:89:2A:C4:FC:D5:13:8A
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584D24E12D27712AA45E1A438180
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ff9576dd-906c-3b5c-9872-7bd37d17a60b.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     30036
IP address blocks:        2604:2e8d:6800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e1:2d:27:71:2a:a4:5e:1a:43:81:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=1a977dda-b1dd-4609-b5e1-188d5586953b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:05:b5:00:8d:ff:fb:c2:29:96:5a:26:2e:e2:
                    a6:e1:05:6a:9f:95:36:c6:02:a0:23:e0:e1:d1:f4:
                    59:d0:22:4d:21:38:4d:69:7d:35:61:bc:78:8d:4a:
                    15:da:2a:47:d6:d4:5c:23:b3:ca:9c:b9:c0:85:64:
                    33:63:35:cc:22:fe:68:ce:3a:25:7f:5b:1e:98:4b:
                    7e:76:a1:40:20:38:15:f6:c5:7d:94:42:fe:c9:4b:
                    d9:79:c7:28:7e:3e:af:23:95:1c:28:97:a7:5f:d5:
                    44:5d:c1:43:33:68:f4:1f:89:27:8f:f3:87:12:17:
                    8f:28:70:4c:75:52:a2:ed:5a:42:43:bf:e6:68:9a:
                    c6:14:99:79:45:2f:b4:21:fd:b6:b1:32:fe:dd:dc:
                    cc:94:1b:a3:02:3e:7c:f8:b8:6a:dd:ee:72:dd:1b:
                    dc:ef:80:25:6b:57:68:35:58:2b:91:eb:07:ec:b7:
                    78:dd:b7:bc:95:4d:88:08:b0:d9:34:54:a5:64:12:
                    0a:e1:d9:f9:34:8e:f8:40:e7:af:bd:ce:7c:d9:36:
                    a4:ae:5c:d6:b2:2e:6b:02:20:23:94:b4:26:72:0b:
                    40:dd:d9:25:9f:57:49:0d:61:78:53:f3:bd:c9:87:
                    0d:1c:8e:10:16:ec:7b:27:26:fb:9b:e5:e1:a2:4e:
                    e2:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:D5:8F:D3:66:23:C2:54:81:B6:A0:F5:42:89:2A:C4:FC:D5:13:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ff9576dd-906c-3b5c-9872-7bd37d17a60b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8d:6800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:41:49:3b:a0:09:28:e7:d7:e8:c1:c7:1a:b1:3a:1f:45:61:
         20:7f:ec:25:5f:89:97:1a:69:2d:b9:3c:f9:da:a7:a8:9c:12:
         81:72:f1:1c:91:18:55:ec:67:f6:a8:41:64:17:f9:74:2a:34:
         42:1b:f8:36:3a:ab:7c:a5:b2:07:8e:ff:01:97:8d:25:7d:2b:
         8d:7c:9e:04:e2:e9:ab:a5:3a:af:e6:d5:08:74:37:b4:0f:66:
         c3:0e:af:55:00:47:d3:13:7e:c6:92:19:62:04:03:d5:dc:f7:
         56:48:da:b8:b6:f2:20:3d:85:c4:73:d1:6d:b4:a1:e9:f4:34:
         a8:58:64:7e:43:03:8b:31:d1:30:f8:30:01:15:2f:2a:bf:4b:
         1a:88:c0:e8:b0:3b:53:e0:25:52:08:63:26:10:67:b9:4b:13:
         67:3c:e4:fe:b3:46:e3:0c:fb:6f:89:43:01:db:38:37:fe:fc:
         f0:03:b7:6b:87:be:88:37:15:0a:c9:b9:0f:84:a2:ef:84:e2:
         36:13:6b:a0:0e:15:01:e8:ae:29:77:35:77:ba:dd:f3:08:87:
         6d:74:91:3e:ec:91:63:c1:53:3d:0e:31:54:8b:32:f1:91:8c:
         bd:3f:32:4c:c5:8a:04:1b:47:21:67:6f:d0:79:8b:0c:5d:f1:
         c1:0c:ee:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:20:14 2026 by rpki-client