Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2641a9c0-393b-35c4-a0f1-68a8c4497d97.roa
File:                     2641a9c0-393b-35c4-a0f1-68a8c4497d97.roa (raw, json)
Hash identifier:          DYV/t0ULI3YdqZpcVZiH0deqT4sH3jLCBdv4lAekvJY=
Subject key identifier:   0F:CD:7C:0C:E3:66:B8:B0:FA:F9:20:03:D4:76:B7:10:5D:4C:78:AB
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584CE57E78BCE71CF1AD73486300
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2641a9c0-393b-35c4-a0f1-68a8c4497d97.roa
Signing time:             Tue 17 Feb 2026 20:09:34 +0000
ROA not before:           Tue 17 Feb 2026 20:09:34 +0000
ROA not after:            Mon 18 May 2026 19:09:34 +0000
asID:                     19905
IP address blocks:        2604:2e8a:4400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e5:7e:78:bc:e7:1c:f1:ad:73:48:63:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Feb 17 20:09:34 2026 GMT
            Not After : May 18 19:09:34 2026 GMT
        Subject: CN=b7e131aa-6991-41d4-a92f-b8becbc13abd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:11:a2:2f:53:9f:f2:61:10:39:07:4c:da:57:
                    a8:a6:d1:7a:68:65:5e:23:35:f9:6e:3e:cb:81:1a:
                    1e:98:c6:fd:5e:ad:ec:b1:84:15:0a:3b:10:8d:1f:
                    95:67:a4:8c:48:6a:12:69:f8:59:63:80:e3:a2:0c:
                    4f:ee:de:52:84:77:d7:91:64:a7:d9:c7:b2:e4:06:
                    a4:f0:0a:b8:cf:bf:01:07:a1:fc:3f:47:8c:0e:f1:
                    64:e9:01:6b:9f:99:ab:0d:28:a8:01:61:87:f1:44:
                    68:7f:30:0f:da:a7:9a:7d:a6:4b:d5:35:bf:e0:63:
                    ba:d4:0f:c0:d2:15:2d:cd:f1:42:49:57:a2:80:a3:
                    21:67:91:f3:24:8f:bf:51:75:0a:a3:9a:ef:4c:7f:
                    7c:61:96:bc:fc:0b:4f:dc:ba:f3:d5:ab:68:35:74:
                    d0:bd:27:c5:e2:24:57:ca:24:60:0a:24:81:ee:f2:
                    3d:0d:20:fe:38:d6:18:25:bd:87:6e:8b:a9:5a:3e:
                    43:a3:72:ee:b9:d3:8d:df:77:e6:e4:9b:34:e1:21:
                    7f:7a:9e:98:6d:a7:ae:87:d9:42:72:28:83:a8:73:
                    71:b7:7e:3d:5d:36:90:19:f3:20:1a:1f:78:0d:fa:
                    06:a8:2f:f9:a5:32:7b:da:cb:92:20:65:eb:b6:46:
                    33:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:CD:7C:0C:E3:66:B8:B0:FA:F9:20:03:D4:76:B7:10:5D:4C:78:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2641a9c0-393b-35c4-a0f1-68a8c4497d97.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8a:4400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:18:88:58:13:d7:ee:62:f6:a5:b9:ab:67:2e:6a:44:39:52:
         74:45:76:17:84:12:00:65:eb:41:8c:d2:76:51:b2:ee:8d:df:
         a7:38:ac:dd:f6:d1:87:85:89:7c:fc:85:87:26:9a:15:23:56:
         6f:90:f6:af:2d:f4:ab:c8:f8:0e:03:47:d6:b5:3e:ce:27:99:
         49:a7:59:3a:03:ba:10:5d:8d:48:a1:c4:b2:ae:b8:4e:52:e8:
         a9:40:3a:a4:33:4b:38:e1:b1:7d:34:de:60:1c:86:fa:5e:7b:
         66:14:8c:6c:92:b6:02:9d:e0:e4:3a:62:86:a7:f6:53:eb:64:
         a6:d2:d7:60:bc:f8:fd:9d:0a:ea:e7:da:54:8d:c2:82:db:ce:
         81:bd:e3:d7:1f:9f:6c:3c:1d:fb:5e:bc:29:f3:86:76:68:a1:
         92:ec:13:70:9c:d9:69:37:38:62:c1:5c:d1:1a:e7:0a:88:47:
         f8:07:8e:46:d7:a7:83:e2:f1:90:49:43:1d:16:e1:c1:f4:86:
         9a:95:df:c3:d3:b5:53:97:da:b8:40:fd:a0:06:0b:31:c3:63:
         bd:58:55:7d:df:08:a3:23:cc:54:22:ef:6c:7e:89:0c:93:25:
         1d:1f:0c:96:0e:2b:5a:72:98:c7:e8:23:86:f0:82:d1:0d:41:
         ce:8b:e6:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:44:54 2026 by rpki-client