Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4484ca63-7340-3077-bde1-9a43fb24073a.roa
File:                     4484ca63-7340-3077-bde1-9a43fb24073a.roa (raw, json)
Hash identifier:          jxHRdhZASpNLRXRwS9XfPr9fmmzujuNsF/3NQl+WlJs=
Subject key identifier:   6A:0E:77:40:72:6E:93:68:F3:9C:F1:66:D4:AB:38:07:8D:87:A6:80
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584CEDCFFECA0E7C9C1325C54D40
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4484ca63-7340-3077-bde1-9a43fb24073a.roa
Signing time:             Fri 20 Feb 2026 19:40:18 +0000
ROA not before:           Fri 20 Feb 2026 19:40:18 +0000
ROA not after:            Thu 21 May 2026 18:40:18 +0000
asID:                     19905
IP address blocks:        2604:2e8f:8180::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ed:cf:fe:ca:0e:7c:9c:13:25:c5:4d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Feb 20 19:40:18 2026 GMT
            Not After : May 21 18:40:18 2026 GMT
        Subject: CN=a5a9beb6-186e-4547-b098-38aef7533021
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:61:5b:e3:55:7f:dd:29:a4:31:ec:c3:f5:46:
                    3f:28:e3:f7:71:b6:eb:23:df:77:cb:c6:b5:31:03:
                    01:94:11:47:6b:43:a7:8a:80:1a:c4:23:12:31:e0:
                    31:d5:89:04:78:91:0c:a4:26:0c:6c:06:72:8a:e1:
                    38:fc:26:5f:bc:da:ec:2e:87:35:54:39:4c:2e:4a:
                    51:47:c5:63:09:93:72:29:7c:02:f4:ab:f7:69:b0:
                    7e:f5:03:e0:f7:2c:3c:fe:1d:d1:a9:a0:3f:af:15:
                    ad:15:6f:5e:0a:3c:42:ca:bc:02:cd:81:14:51:8e:
                    b3:7f:67:85:52:cc:4e:94:7c:a8:57:a7:53:a4:8e:
                    b4:86:5f:aa:a3:8c:48:3b:02:5c:f6:a7:93:47:d8:
                    b0:61:77:e8:ee:84:87:e8:b1:1b:81:1f:96:93:50:
                    ab:f5:71:83:72:25:e2:24:7c:98:b9:f2:1e:f3:c1:
                    87:7a:eb:ff:2a:74:19:a1:b2:7d:8c:bf:47:cd:56:
                    32:9e:8b:af:c6:b6:10:e8:f1:48:e4:95:0b:8d:52:
                    03:ee:ad:f3:e4:f8:86:b7:4d:4c:1c:42:be:21:3e:
                    1a:49:2d:1f:e9:f9:c5:38:34:79:f7:e9:84:9a:25:
                    b8:4c:c2:6f:24:a4:6b:e6:dc:b8:7b:17:dc:5a:da:
                    3d:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:0E:77:40:72:6E:93:68:F3:9C:F1:66:D4:AB:38:07:8D:87:A6:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4484ca63-7340-3077-bde1-9a43fb24073a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8f:8180::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:48:d5:8b:c9:2f:b8:8b:d2:df:79:0f:3f:1e:8d:68:d1:ca:
         04:45:8e:46:5e:59:55:7d:46:9c:7b:d4:e0:74:19:5b:32:50:
         85:0f:1b:57:12:30:30:4f:33:0f:b1:74:93:d1:5a:95:02:7f:
         48:a9:e7:a0:10:37:d0:d5:5c:57:72:ba:ff:f4:25:2c:5d:aa:
         25:47:4a:13:e7:fc:ce:61:c4:37:1b:b1:71:cd:58:07:1f:14:
         20:32:e5:f4:21:bf:3f:9b:48:c0:70:bf:b2:d3:42:cf:85:a9:
         7d:c7:45:33:ee:ad:0e:94:77:59:be:25:41:b1:08:b0:e7:d5:
         3d:db:64:15:ec:58:bd:6d:3c:d8:55:d2:cd:e7:35:dd:b4:8b:
         ce:2c:93:30:79:01:59:f0:9e:fa:d0:1c:cd:d5:94:47:00:cf:
         57:4a:92:73:da:29:c7:7a:49:42:c8:c0:9e:3f:8b:ce:34:40:
         1e:d6:90:13:f9:0d:f6:81:f0:8b:5d:1f:f6:35:1f:59:6a:36:
         bb:f4:49:a1:f1:4c:9b:ac:34:91:13:cb:0b:11:79:d9:a3:d7:
         c1:53:54:38:3e:e9:14:c0:ee:e5:a9:95:4d:de:ab:ac:37:2e:
         4a:31:2a:be:6b:d7:31:74:af:5e:5d:73:f3:2f:22:62:8e:bd:
         9f:d6:f8:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:45:05 2026 by rpki-client