Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/17672c78-bb13-3d97-8016-852de331190c.roa
File:                     17672c78-bb13-3d97-8016-852de331190c.roa (raw, json)
Hash identifier:          Q6TVCXbcjYpXhg804+FPZi2+0Ba/f07pWsqPkuBVdqw=
Subject key identifier:   13:46:10:31:D1:8E:F1:03:38:46:F9:2A:07:97:9C:F3:E6:D7:06:90
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584CC34737E1A86BC3B778105800
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/17672c78-bb13-3d97-8016-852de331190c.roa
Signing time:             Thu 05 Feb 2026 14:00:40 +0000
ROA not before:           Thu 05 Feb 2026 14:00:40 +0000
ROA not after:            Wed 06 May 2026 13:00:40 +0000
asID:                     19905
IP address blocks:        2604:2e8b:6800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c3:47:37:e1:a8:6b:c3:b7:78:10:58:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Feb  5 14:00:40 2026 GMT
            Not After : May  6 13:00:40 2026 GMT
        Subject: CN=24a45170-8231-495c-afcb-1b813f0ba08c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:17:b6:02:b1:fc:a6:4f:fb:d7:e1:d0:37:75:
                    27:d0:6a:d4:bc:6f:2c:42:1d:0f:bc:fb:d5:db:7c:
                    82:94:86:58:3b:98:36:3a:5e:c2:e6:63:d2:bd:dc:
                    6e:ca:1d:e1:c9:14:b0:6e:45:74:ba:95:37:18:2f:
                    4e:51:b0:29:3e:e8:3d:34:73:e6:7c:ca:c7:23:78:
                    ca:54:8b:eb:6d:9c:73:86:5f:60:20:77:98:e4:23:
                    62:9c:7e:78:69:0b:71:03:62:8e:0a:6b:e7:c6:38:
                    46:94:4d:07:4c:44:9d:5c:83:e4:df:37:1e:c0:38:
                    91:7d:f5:9d:66:e8:52:fd:da:95:e4:c1:41:0c:5a:
                    e2:92:cb:e8:cd:0d:53:a8:0a:df:86:02:a5:53:dc:
                    91:75:5d:61:c4:14:a8:f8:7f:0d:fd:a6:d9:d9:81:
                    71:e2:26:1b:e1:4b:4a:66:57:76:6c:37:6e:59:b1:
                    d2:93:ea:fd:c4:e0:cc:23:1c:d5:2e:69:e7:a4:27:
                    3a:87:40:ea:98:f5:bd:dd:9b:76:3e:db:0e:2a:3d:
                    bf:04:ba:d5:45:5c:bb:3f:53:b5:fc:49:42:0d:cd:
                    b1:4f:85:b3:5f:75:8c:64:3f:86:bb:c9:73:96:7f:
                    77:bb:28:ec:cf:fd:70:3a:57:50:7b:ca:40:6f:93:
                    6a:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:46:10:31:D1:8E:F1:03:38:46:F9:2A:07:97:9C:F3:E6:D7:06:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/17672c78-bb13-3d97-8016-852de331190c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8b:6800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:71:05:59:34:54:5d:df:e8:ff:67:f1:ee:6a:20:cc:72:59:
         78:d2:fb:2c:8d:dc:0c:e2:da:7e:5f:55:bf:1a:bd:68:8f:5e:
         ef:e7:c0:8e:c0:5c:9a:bf:d5:9a:b5:99:1f:05:0d:9f:fe:00:
         c0:9a:95:b3:a5:ec:59:ff:da:e3:11:12:f4:46:43:8b:13:92:
         12:c8:33:a5:e6:df:6e:bf:6e:03:9d:77:fb:9e:5e:34:42:99:
         64:ad:44:e5:30:5b:ab:21:40:0a:09:2d:5d:4f:87:96:93:33:
         17:45:87:d2:5f:2a:db:30:8e:04:23:c9:73:93:83:71:d8:1d:
         a4:0f:59:34:ba:14:fd:b8:41:4a:21:f8:87:33:cd:58:30:8e:
         0a:fc:83:e8:bf:da:b8:b3:94:da:37:7e:fe:0b:24:c9:71:39:
         80:85:a0:1a:88:41:3e:72:b8:0d:79:8f:69:58:40:74:1f:49:
         d7:b0:53:66:45:2d:6d:f2:79:0f:9a:ed:d3:70:fd:76:80:3b:
         30:6e:f7:9b:df:48:a7:4e:fa:21:d4:c8:8b:58:52:8a:50:3d:
         b2:9f:67:c8:8b:d8:1e:9e:2f:55:39:93:b5:a0:29:5b:33:ca:
         84:50:ef:8f:eb:60:9c:34:3d:f9:dd:f3:19:ae:61:99:10:0e:
         ed:b0:6b:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:48:00 2026 by rpki-client