Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2f5a9c3f-ea79-354d-8bb2-a9498cf689f0.roa
File:                     2f5a9c3f-ea79-354d-8bb2-a9498cf689f0.roa (raw, json)
Hash identifier:          seRLF0m4yNcIgh7R3hLjum3AQbV5o0LTiAUNWffLcsE=
Subject key identifier:   BC:90:88:E6:C2:98:2D:7C:D0:E0:9E:86:5E:26:EF:FA:9A:FA:26:F4
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584CB551C9A15A72E3B276858600
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2f5a9c3f-ea79-354d-8bb2-a9498cf689f0.roa
Signing time:             Sat 31 Jan 2026 14:00:39 +0000
ROA not before:           Sat 31 Jan 2026 14:00:39 +0000
ROA not after:            Fri 01 May 2026 13:00:39 +0000
asID:                     19905
IP address blocks:        2604:2e87:4400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b5:51:c9:a1:5a:72:e3:b2:76:85:86:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jan 31 14:00:39 2026 GMT
            Not After : May  1 13:00:39 2026 GMT
        Subject: CN=74701def-4c9c-4b37-b3c8-ffb01f36bdbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:eb:93:ac:e5:db:39:9d:8f:e4:9a:94:18:7b:
                    ad:82:39:14:5a:58:be:10:78:10:39:8c:02:10:15:
                    72:5b:c1:89:8f:eb:ad:27:74:4d:4d:a8:55:64:fd:
                    f9:77:2d:91:d0:0d:ae:a6:1a:84:27:c3:82:b3:7b:
                    1d:b4:aa:b1:4c:47:9c:fb:1e:88:f3:4c:87:6e:06:
                    56:b1:40:61:e8:3c:24:e5:d6:88:12:73:4d:a4:fa:
                    ae:0f:ba:77:ba:4a:31:89:de:aa:0d:ef:95:d4:8e:
                    9a:37:76:e0:af:e7:2d:35:56:12:b3:45:54:bf:95:
                    7d:9e:9a:1c:c0:f6:14:10:7d:5b:ef:ad:b1:43:cc:
                    c0:ac:b6:ef:bd:56:6a:52:00:0e:be:d2:9e:8e:57:
                    82:66:86:4c:de:a5:87:fd:5a:29:58:de:6d:d0:f8:
                    a6:d2:2b:fe:71:bb:b6:1d:62:4c:5c:60:4b:a3:c1:
                    97:17:bb:44:0f:52:47:34:8f:a0:b2:77:db:ea:f0:
                    3a:c7:44:4c:01:39:b2:a6:23:d1:2c:38:74:10:34:
                    fb:04:ff:8f:cf:2a:e4:ea:28:86:33:27:35:c1:28:
                    4b:44:a3:37:02:56:2a:08:d8:53:89:81:ff:15:b6:
                    69:ff:05:c0:b6:f3:54:a7:f3:c6:a9:be:e5:5c:50:
                    1d:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:90:88:E6:C2:98:2D:7C:D0:E0:9E:86:5E:26:EF:FA:9A:FA:26:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2f5a9c3f-ea79-354d-8bb2-a9498cf689f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e87:4400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:24:df:a8:4b:24:24:e7:78:cf:d5:91:86:f1:05:7d:d8:7f:
         01:2b:e4:3c:50:5c:c7:40:34:b7:b6:50:86:db:bd:1d:79:8a:
         c4:c7:10:29:9f:8b:72:8d:d5:df:dc:76:30:b4:7a:8c:88:94:
         e4:c6:80:fa:15:af:41:b6:2f:b6:c2:f2:8a:00:91:07:53:fa:
         77:a2:5f:28:2f:c5:69:0b:92:2c:46:3c:6f:83:28:55:f7:8f:
         b9:7f:07:3f:81:1a:c4:8e:13:c1:03:8c:cc:a3:1d:90:a5:b4:
         84:4c:66:90:46:15:ea:a5:cb:01:80:bb:ae:ae:95:e9:a4:89:
         31:cd:21:83:2f:45:ca:15:58:ae:22:bc:1b:81:d9:0b:0f:59:
         bd:95:7c:83:a5:58:7b:b7:e1:25:f5:b1:fc:15:ae:b9:ca:f4:
         80:39:e9:c2:38:5b:fa:26:3a:d5:98:7a:e7:95:bc:81:a4:01:
         41:ea:89:0a:4c:c6:8f:58:dc:e6:e6:98:6c:e7:10:97:89:21:
         0c:16:8f:26:e6:cf:d4:5e:17:a8:78:22:ca:58:5d:df:77:7d:
         7a:53:a7:73:67:2c:62:f9:91:d2:48:b6:6b:9e:0b:41:73:b7:
         ce:ae:4d:9b:69:c5:e4:80:4c:bc:1b:7d:94:47:07:46:98:a1:
         f1:69:a2:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:59:54 2026 by rpki-client