Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/373bc2d1-29e2-31a5-bbbc-077d7849242d.roa
File:                     373bc2d1-29e2-31a5-bbbc-077d7849242d.roa (raw, json)
Hash identifier:          RH0IAtU/5Czd8+mc5IWKVy+FipF5Bk+83PACixv3h4c=
Subject key identifier:   FA:F7:BC:58:64:1E:F7:C0:87:31:C6:A6:5B:45:82:8C:07:1A:DC:72
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584CC34736F7754E41EA91B024C0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/373bc2d1-29e2-31a5-bbbc-077d7849242d.roa
Signing time:             Thu 05 Feb 2026 14:00:40 +0000
ROA not before:           Thu 05 Feb 2026 14:00:40 +0000
ROA not after:            Wed 06 May 2026 13:00:40 +0000
asID:                     19905
IP address blocks:        2604:2e89:7400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c3:47:36:f7:75:4e:41:ea:91:b0:24:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Feb  5 14:00:40 2026 GMT
            Not After : May  6 13:00:40 2026 GMT
        Subject: CN=05211d48-b40e-469c-bf06-5ac40bdb31ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:2b:66:08:60:92:94:79:72:f5:7e:0a:3e:cb:
                    eb:11:f6:be:a5:e8:6f:0f:d1:64:1b:36:df:bb:3c:
                    de:40:45:f6:e2:2d:da:54:96:a5:79:3b:11:e7:28:
                    8a:37:e2:e6:3b:06:6b:80:a8:fe:4c:af:df:af:74:
                    68:76:d9:6f:fa:21:ff:3e:07:bf:89:5d:f0:98:ac:
                    a3:df:87:34:59:12:55:31:50:ce:00:58:c7:df:fd:
                    a9:6f:c1:57:c3:37:e8:fd:6f:eb:c7:5c:45:5a:9e:
                    b6:38:fe:a2:04:d3:9f:7a:5a:d2:08:b8:22:e3:3d:
                    dc:63:5d:f7:95:cb:ab:37:ca:af:78:da:4e:79:b5:
                    b5:4c:78:bc:31:b3:b4:4e:e2:0e:48:79:61:23:0f:
                    a4:90:60:e8:f1:29:bf:22:68:4b:ea:b7:64:24:f5:
                    8b:7d:48:9d:af:ac:b3:a0:45:f3:43:24:ae:ff:0e:
                    17:12:b8:23:ac:4b:9a:2e:35:e2:6c:17:36:08:17:
                    f1:ec:30:19:f5:0a:3c:29:e4:5f:0e:86:e7:55:2b:
                    6f:52:ac:6c:98:a4:76:a1:ed:65:65:d7:57:83:f8:
                    e4:68:3b:5d:71:e7:ea:bd:19:db:05:e8:82:18:f9:
                    df:ba:84:26:b8:f0:ce:b1:b7:59:c9:2c:68:c4:a9:
                    d7:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:F7:BC:58:64:1E:F7:C0:87:31:C6:A6:5B:45:82:8C:07:1A:DC:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/373bc2d1-29e2-31a5-bbbc-077d7849242d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e89:7400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:58:53:5c:32:53:04:94:53:ce:77:a0:3a:c5:e5:e2:51:42:
         77:56:97:f1:90:f5:4e:97:0f:6f:f8:78:13:0c:90:a4:ee:ea:
         2b:ff:a4:54:1c:51:76:4d:21:6c:d4:5e:8b:13:05:c9:79:a8:
         68:22:ba:a4:fc:fb:16:ef:5a:15:35:ff:59:14:65:4e:68:9f:
         7d:df:35:41:6f:d0:12:7d:52:19:2d:09:6a:4c:e0:8c:e3:07:
         af:10:c2:55:12:ae:92:55:44:45:80:54:4e:4e:9f:60:55:41:
         56:3b:4f:ac:20:3a:83:db:b6:52:c0:09:62:25:cf:18:5e:96:
         53:a6:8c:de:ea:11:79:f8:48:3d:d4:e6:51:15:3a:d8:41:f0:
         31:4f:88:8b:97:b6:99:dd:2a:8d:f4:79:e0:e9:5d:33:f9:87:
         ed:26:98:76:2f:53:38:31:4a:07:57:75:46:b8:c0:47:95:d4:
         5f:81:07:74:3e:5a:38:4d:33:68:9c:a6:cb:c5:e3:46:40:dd:
         43:17:d8:cc:a3:e4:8e:6d:e0:37:70:63:41:c0:b2:75:05:25:
         79:b3:ec:c7:0e:f4:97:74:82:7a:a5:24:5c:38:7f:8a:bb:75:
         78:dc:82:22:c2:0e:59:75:5d:77:aa:5a:63:23:c8:be:07:bd:
         5a:c2:21:f1
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEzDRzb3dU5B6pGwJMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI2MDIwNTE0MDA0MFoXDTI2MDUwNjEzMDA0MFowLzEtMCsGA1UEAxMk
MDUyMTFkNDgtYjQwZS00NjljLWJmMDYtNWFjNDBiZGIzMWFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlytmCGCSlHly9X4KPsvrEfa+pehvD9FkGzbf
uzzeQEX24i3aVJaleTsR5yiKN+LmOwZrgKj+TK/fr3Rodtlv+iH/Pge/iV3wmKyj
34c0WRJVMVDOAFjH3/2pb8FXwzfo/W/rx1xFWp62OP6iBNOfelrSCLgi4z3cY133
lcurN8qveNpOebW1THi8MbO0TuIOSHlhIw+kkGDo8Sm/ImhL6rdkJPWLfUidr6yz
oEXzQySu/w4XErgjrEuaLjXibBc2CBfx7DAZ9Qo8KeRfDobnVStvUqxsmKR2oe1l
ZddXg/jkaDtdcefqvRnbBeiCGPnfuoQmuPDOsbdZySxoxKnXTwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFPr3vFhkHvfAhzHGpltFgowHGtxyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMzczYmMyZDEtMjllMi0z
MWE1LWJiYmMtMDc3ZDc4NDkyNDJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiXQw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAllhTXDJTBJRTznegOsXl4lFCd1aX8ZD1TpcPb/h4EwyQpO7qK/+k
VBxRdk0hbNReixMFyXmoaCK6pPz7Fu9aFTX/WRRlTmiffd81QW/QEn1SGS0Jakzg
jOMHrxDCVRKuklVERYBUTk6fYFVBVjtPrCA6g9u2UsAJYiXPGF6WU6aM3uoRefhI
PdTmURU62EHwMU+Ii5e2md0qjfR54OldM/mH7SaYdi9TODFKB1d1RrjAR5XUX4EH
dD5aOE0zaJymy8XjRkDdQxfYzKPkjm3gN3BjQcCydQUlebPsxw70l3SCeqUkXDh/
irt1eNyCIsIOWXVdd6paYyPIvge9WsIh8Q==
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:53:44 2026 by rpki-client