Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/391adbf2-ced6-3842-96cd-ca2331b3c9c8.roa
File:                     391adbf2-ced6-3842-96cd-ca2331b3c9c8.roa (raw, json)
Hash identifier:          O8pP6+xs2tUbceis7EVX2yxKSkBvz7p53NbI1rsdQe4=
Subject key identifier:   81:5A:B5:90:8D:02:BB:F7:53:C0:49:96:35:11:4F:EF:BD:AB:FA:1D
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584CEBC221545A3C19F4EFF5EA80
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/391adbf2-ced6-3842-96cd-ca2331b3c9c8.roa
Signing time:             Fri 20 Feb 2026 02:00:32 +0000
ROA not before:           Fri 20 Feb 2026 02:00:32 +0000
ROA not after:            Thu 21 May 2026 01:00:32 +0000
asID:                     30036
IP address blocks:        2604:2e89:7000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:eb:c2:21:54:5a:3c:19:f4:ef:f5:ea:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Feb 20 02:00:32 2026 GMT
            Not After : May 21 01:00:32 2026 GMT
        Subject: CN=5ee7433b-a4db-431f-8793-c998932318c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:3d:af:10:f9:09:d4:c3:72:a1:60:3f:38:f2:
                    ce:32:b1:ab:ef:1b:db:c1:62:e6:d0:34:d0:bd:86:
                    4c:d0:28:51:4b:84:01:8c:61:74:4c:1b:a2:99:be:
                    9c:b4:6f:94:57:97:90:46:f9:3f:10:97:d5:83:89:
                    05:ba:30:8f:38:ac:91:5b:cd:fb:4f:5f:2f:1d:6c:
                    06:97:c8:83:f3:3f:fc:1d:4f:be:88:74:7d:a3:13:
                    b4:b7:f9:b2:95:19:66:33:d2:5a:d5:25:9e:2c:fb:
                    c6:8c:c2:c0:34:7c:8f:da:4d:c9:40:18:bb:38:e6:
                    08:d8:a7:51:24:c8:8a:15:48:1c:77:2f:f0:01:9b:
                    d5:9d:65:c9:cf:9a:ce:40:6f:c3:70:ac:4d:c8:c2:
                    24:1f:3d:be:55:7a:42:29:02:f5:c9:24:96:e3:9e:
                    2b:00:59:62:a8:c8:6c:77:09:15:08:d0:26:2b:14:
                    c9:59:df:21:82:49:f1:0a:a6:8f:9e:c0:47:d0:eb:
                    6e:a3:94:ab:d1:20:f9:4d:bf:2e:3f:f5:b1:b8:48:
                    6e:fb:ec:55:4b:fa:2f:e5:86:0d:65:18:b9:b0:10:
                    18:b0:96:e1:0b:65:90:17:4d:26:b6:a5:81:7a:07:
                    37:27:7a:31:ea:c8:5d:91:e0:6f:43:bc:90:06:50:
                    09:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:5A:B5:90:8D:02:BB:F7:53:C0:49:96:35:11:4F:EF:BD:AB:FA:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/391adbf2-ced6-3842-96cd-ca2331b3c9c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e89:7000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:8e:08:89:5e:3e:5f:c8:1f:30:10:61:22:11:21:50:f1:db:
         d7:43:81:81:93:7b:0b:a0:6b:8b:a1:40:e9:91:c6:13:f2:89:
         ee:fd:d2:5f:b0:3e:80:52:61:9b:10:e8:bc:6c:ff:55:16:70:
         32:c3:b7:5a:96:9d:ae:7c:26:77:a0:d9:ca:0c:6b:a8:58:dd:
         98:e6:a2:45:95:31:a0:4a:5b:28:11:27:4c:f0:46:a9:47:ea:
         dd:42:64:0b:3a:7e:a3:33:65:25:96:d1:45:5a:f4:3d:d2:2f:
         ae:ed:c4:fa:b9:8e:ef:92:38:dd:dc:da:65:10:df:00:59:c1:
         2c:b3:e7:01:d6:be:70:31:36:53:b7:1d:89:72:1f:79:37:81:
         93:c9:67:4d:58:a9:17:30:b0:42:6c:68:79:75:d5:82:f1:bf:
         67:de:c2:76:ed:31:87:eb:96:89:12:27:51:46:9a:5d:1f:db:
         2c:76:37:f7:ff:52:c9:8b:96:54:b1:f1:ca:39:ee:c3:17:0d:
         8d:32:52:02:f0:a9:01:79:a0:dd:ee:dc:33:29:37:72:27:e0:
         cd:0e:9d:02:3b:6c:d4:b3:54:f8:7a:bb:a1:84:f2:04:d9:86:
         5b:02:85:04:4e:ed:67:b7:11:f9:f4:f1:92:b6:57:9b:bb:19:
         91:f9:bf:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:38:24 2026 by rpki-client