Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/65115691-425d-3bbc-b9ff-bb85989e2854.roa
File:                     65115691-425d-3bbc-b9ff-bb85989e2854.roa (raw, json)
Hash identifier:          LcJrWz3F/di5Oh//PnRD3sHFaFMX+TKj7DMSaWhCeiU=
Subject key identifier:   8D:0F:FA:63:D8:25:49:12:44:F8:0D:A4:3A:2E:E7:95:AB:8F:56:76
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584D571FBEEE2079507A6864B900
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/65115691-425d-3bbc-b9ff-bb85989e2854.roa
Signing time:             Mon 30 Mar 2026 13:00:30 +0000
ROA not before:           Mon 30 Mar 2026 13:00:30 +0000
ROA not after:            Sun 28 Jun 2026 13:00:30 +0000
asID:                     19905
IP address blocks:        2604:2e8f:9400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:57:1f:be:ee:20:79:50:7a:68:64:b9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Mar 30 13:00:30 2026 GMT
            Not After : Jun 28 13:00:30 2026 GMT
        Subject: CN=ab463815-a8c2-4abc-928e-d77787720420
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c9:87:55:e2:8d:96:54:52:5e:ae:0a:22:8a:
                    c4:e2:6d:07:71:8e:02:e9:1e:0e:96:5b:42:14:52:
                    48:59:fa:d4:9f:34:3b:46:0b:fe:f0:b7:b5:a6:a7:
                    f1:fc:40:74:20:1b:f1:d4:d0:55:9f:1a:c4:81:bc:
                    d1:fa:69:6d:3b:1f:70:0e:b5:fa:23:6e:1b:3e:a9:
                    8c:3e:a9:03:88:bc:be:c2:2b:c2:1e:6f:b0:8d:e2:
                    7c:97:35:54:ff:0e:af:1e:7f:d8:bd:e8:10:7f:a2:
                    ac:5d:39:f4:9e:c3:97:ea:e8:64:c2:ee:1a:3f:fc:
                    1d:0f:f3:6d:2b:25:03:6f:a9:aa:aa:4c:8b:53:d8:
                    42:03:ad:24:39:01:3a:db:4d:a3:86:d3:d4:21:8f:
                    90:26:4e:18:f7:b9:8d:fd:4e:81:eb:b5:5e:21:a4:
                    d1:e9:4e:6e:5d:10:10:8a:42:a8:b1:70:5a:50:3f:
                    52:02:a0:d0:ce:ed:e3:4e:bf:29:82:df:0d:95:46:
                    bf:50:11:de:f9:0d:8a:70:b4:ee:81:5d:33:35:86:
                    40:27:28:f4:2f:a7:5e:59:ef:18:40:ea:d5:a3:c5:
                    6f:93:6b:08:5b:62:d1:a8:22:3d:aa:cd:de:38:40:
                    0a:52:3a:b7:0c:a1:48:44:25:3d:7e:d8:65:d3:2c:
                    23:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:0F:FA:63:D8:25:49:12:44:F8:0D:A4:3A:2E:E7:95:AB:8F:56:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/65115691-425d-3bbc-b9ff-bb85989e2854.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8f:9400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:35:34:2f:a0:b3:c6:0e:5c:29:d2:9e:29:78:69:ff:bb:d9:
         40:b6:12:c9:83:93:bb:57:e4:50:54:58:da:cf:60:de:cf:05:
         42:32:2e:1c:59:b4:5f:ed:a9:51:45:a3:62:d0:8c:85:cf:bf:
         db:f1:22:9b:52:51:11:ba:fa:8f:17:c5:27:9c:88:da:46:ac:
         33:c6:9b:46:c3:75:f4:94:a7:ae:ad:a4:16:42:c5:f6:29:2a:
         3a:61:1a:d2:7b:97:a9:47:de:b7:b1:0d:e0:e0:07:d6:b7:62:
         e3:e5:63:69:3b:c4:d3:ac:bf:b8:57:5d:e3:4e:f2:f3:0b:7b:
         ff:40:33:ae:54:6c:c2:ec:c9:91:53:45:5a:6c:31:08:6b:52:
         b5:75:39:64:67:0c:19:4a:ad:b3:bd:2f:6a:94:58:6c:b6:98:
         56:62:1c:b8:08:f9:d8:73:b1:d1:07:00:00:7c:d0:30:9a:1c:
         13:0b:b0:3b:37:21:0d:53:dc:62:75:1f:f4:7f:3d:65:c0:98:
         d9:8a:13:c3:0a:29:f7:28:66:bf:63:ac:7d:b4:24:db:98:30:
         14:44:70:b0:d3:12:4c:6d:a8:60:ea:3b:5b:bf:b9:fe:2b:56:
         00:36:25:4a:0d:cb:e7:31:d0:e4:01:68:76:7c:26:08:79:44:
         63:cc:8f:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:30:22 2026 by rpki-client