Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4c3de2f2-204a-3c51-847f-60a6fd0c4d1b.roa
File:                     4c3de2f2-204a-3c51-847f-60a6fd0c4d1b.roa (raw, json)
Hash identifier:          EBWjP90PDnbafbuYgKjH2IwlDrAv5NCYpUzNf8WMjHE=
Subject key identifier:   58:ED:73:28:DC:DC:FB:0C:1F:72:24:93:22:3C:0A:58:1A:F0:AF:FC
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584CCD0CB165D56D4DAF4A2A90B0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4c3de2f2-204a-3c51-847f-60a6fd0c4d1b.roa
Signing time:             Mon 09 Feb 2026 02:00:31 +0000
ROA not before:           Mon 09 Feb 2026 02:00:31 +0000
ROA not after:            Sun 10 May 2026 01:00:31 +0000
asID:                     30036
IP address blocks:        2604:2e8d:4c00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:cd:0c:b1:65:d5:6d:4d:af:4a:2a:90:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Feb  9 02:00:31 2026 GMT
            Not After : May 10 01:00:31 2026 GMT
        Subject: CN=6fab790b-2ea6-41e2-a23b-d9b1c6e6be23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:3a:fc:02:c4:e2:4a:23:1c:4b:0d:67:51:0c:
                    59:72:f3:14:35:1f:16:25:0c:9c:ab:aa:24:61:68:
                    4a:1f:c2:f5:d1:bd:05:17:39:95:5c:05:5f:12:8a:
                    0b:16:dc:9f:f3:ec:2f:89:aa:ea:a3:32:0a:8a:8a:
                    31:db:8f:e4:01:36:db:b5:48:eb:e5:aa:45:25:20:
                    1c:af:ff:bf:fb:5d:18:95:9c:a2:5d:86:f5:ce:d6:
                    d6:cf:8b:3d:0d:e9:83:ad:ec:f8:48:5e:50:00:ad:
                    c4:ec:b5:eb:0f:82:61:9d:98:ef:4b:b6:40:d9:da:
                    97:b6:f1:56:e3:0e:be:37:3f:79:e5:b4:fc:6a:e7:
                    e9:f3:7b:07:e0:3e:b9:8c:2d:c6:8f:25:f2:bd:03:
                    2d:21:ee:e6:6a:72:90:a3:0d:a6:d8:42:ec:13:da:
                    3e:a5:e8:91:ad:5e:93:d1:e0:46:e8:e3:a6:c3:4b:
                    8f:37:42:52:c2:e8:2e:15:f8:22:3e:7c:8f:e5:b9:
                    52:8a:03:b0:47:d9:15:2a:5b:a3:06:f3:b5:eb:b5:
                    95:d7:68:54:ba:df:d4:30:34:2e:8d:40:d0:0c:17:
                    9e:24:b3:54:de:fc:7c:52:15:db:c1:b9:da:8d:33:
                    c7:b0:60:d8:b9:8b:7d:31:ec:c6:03:6a:4b:ab:f0:
                    24:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:ED:73:28:DC:DC:FB:0C:1F:72:24:93:22:3C:0A:58:1A:F0:AF:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4c3de2f2-204a-3c51-847f-60a6fd0c4d1b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8d:4c00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:e3:27:d4:90:96:86:d6:10:88:17:01:a9:d3:c9:39:46:08:
         02:ff:05:0e:51:59:db:6c:84:11:92:0a:73:f6:69:df:45:a7:
         2a:fe:38:35:36:db:0f:bb:69:65:a8:15:2e:d1:a3:19:ed:35:
         f2:3f:fa:a5:26:cb:c9:08:95:02:d7:dd:1a:71:bb:eb:39:51:
         6d:06:96:48:64:39:f1:1e:b8:8a:0b:52:26:3d:e7:69:b8:e8:
         04:09:af:9c:d0:2d:21:a1:9f:06:8a:2a:93:a7:b8:59:48:a7:
         2d:ff:0a:38:e7:42:f4:d9:a1:df:0a:08:6c:83:83:ef:8d:41:
         d1:8b:1c:6a:61:08:8c:53:7b:77:a9:2f:d1:83:75:b0:27:21:
         e8:65:aa:5f:c5:54:24:11:70:93:58:89:45:cf:83:35:41:28:
         8f:83:08:31:1d:be:0b:61:8a:77:50:b3:01:15:c0:aa:73:6c:
         4d:10:0f:74:95:e4:63:57:92:44:21:de:f2:44:9d:69:80:dc:
         59:f9:c1:ec:49:ce:c9:da:22:f9:61:16:44:8f:57:7d:15:ce:
         1d:6d:bc:dd:4a:61:b9:64:ce:69:c9:6e:ed:3d:91:f9:fb:49:
         5a:1b:d1:71:eb:89:eb:0b:58:4c:3c:ce:a0:1b:9b:a8:c9:27:
         a5:6b:f5:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:01:07 2026 by rpki-client