Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/67f5b29b-05b6-37e1-a1a7-beaae66e5bd5.roa
File:                     67f5b29b-05b6-37e1-a1a7-beaae66e5bd5.roa (raw, json)
Hash identifier:          5chNFLIm6dYPv5Q3LRhH/7CB7kO8UJbcMlSgPgQ1/+A=
Subject key identifier:   A0:30:E3:CF:43:BE:86:44:A6:1A:04:AD:A7:70:75:F0:0A:6B:2F:23
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584CEDCF8FCB524074A3DB115C00
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/67f5b29b-05b6-37e1-a1a7-beaae66e5bd5.roa
Signing time:             Fri 20 Feb 2026 19:39:26 +0000
ROA not before:           Fri 20 Feb 2026 19:39:26 +0000
ROA not after:            Thu 21 May 2026 18:39:26 +0000
asID:                     19905
IP address blocks:        2604:2e89:1000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ed:cf:8f:cb:52:40:74:a3:db:11:5c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Feb 20 19:39:26 2026 GMT
            Not After : May 21 18:39:26 2026 GMT
        Subject: CN=b0ed4d92-c444-4ad1-82f8-d9050328af5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:18:41:01:ac:e5:e0:d4:13:0e:d7:26:5d:a8:
                    d5:5b:c1:c6:0c:f9:4f:20:7f:1a:02:67:1d:5a:b6:
                    2b:eb:2f:5f:3d:ae:eb:b1:2b:90:df:24:7c:8d:86:
                    4a:c2:23:bc:b3:70:2a:a4:7a:4d:48:0c:26:d2:16:
                    b8:6c:fa:87:f4:bd:44:22:20:b9:82:1e:e9:dd:9b:
                    42:d8:06:bd:c1:d4:a2:e9:ad:3f:6a:be:71:e0:45:
                    03:3c:22:bc:fd:bd:a8:ca:29:c5:87:0e:df:be:18:
                    e9:2e:c4:35:f9:00:84:21:b2:3b:d2:d1:23:d9:0a:
                    f6:d8:6b:04:dc:f8:81:9f:79:62:8a:85:b4:6a:0d:
                    f3:42:60:0d:bb:75:25:c4:5e:28:c9:76:75:0d:42:
                    03:50:e3:6d:62:12:12:08:5c:62:de:0b:3d:1e:98:
                    b0:c0:ea:e6:1f:b7:8f:2b:34:0e:30:1e:71:ee:e5:
                    8a:37:5f:70:c0:b9:25:5f:9b:db:79:17:35:c9:5d:
                    aa:4c:ef:5b:61:e6:22:fa:f0:ba:6b:80:f7:cc:24:
                    8d:c5:2e:f6:0e:62:68:ed:a5:b5:70:f8:ec:a5:b8:
                    bb:8d:6c:8d:35:bd:5b:a7:24:13:4a:4c:36:d0:fa:
                    c2:4d:e7:0e:9a:df:75:ea:3d:7b:4b:d8:72:2a:21:
                    30:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:30:E3:CF:43:BE:86:44:A6:1A:04:AD:A7:70:75:F0:0A:6B:2F:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/67f5b29b-05b6-37e1-a1a7-beaae66e5bd5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e89:1000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:69:39:3d:91:6f:b9:c1:e4:9d:b5:12:1f:34:ab:17:31:83:
         ff:18:3e:3a:a2:e1:24:b3:bc:92:6b:64:cf:d5:31:c6:9f:2a:
         be:5e:78:74:be:22:70:a0:bc:c2:63:b3:44:2c:9d:e0:b4:89:
         c3:ba:7e:3b:1c:c8:40:61:df:0e:8b:bf:c5:21:3d:91:5b:cf:
         38:31:90:6d:82:00:fc:d0:23:e3:a1:81:2b:ac:1a:ce:20:ee:
         6c:6a:d4:52:02:cc:85:0f:13:65:2f:30:27:53:5c:bd:4d:78:
         80:77:14:43:de:f5:10:18:68:f1:1f:f6:f2:b5:30:25:10:6c:
         27:3b:d2:08:6d:31:9f:9f:fa:5a:70:5d:2c:0b:d2:10:48:ee:
         f8:05:be:c6:93:c8:02:cc:fe:d0:11:26:35:3b:1d:f0:71:1a:
         21:82:a8:5a:21:36:58:fd:71:cc:64:06:e8:d5:93:c0:d5:46:
         5a:41:c9:0f:61:cb:ec:65:03:ea:a0:cb:f0:f0:2e:b1:f2:6e:
         3c:cd:9b:87:e3:4b:42:eb:be:7b:c8:66:a9:94:be:62:c7:d1:
         b0:8b:89:db:8b:8a:9d:8a:7e:2e:a8:1e:10:b5:50:20:49:95:
         45:8b:3b:7c:0a:26:33:fe:e0:a4:23:89:29:73:d2:eb:e6:b6:
         48:08:1f:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:52:49 2026 by rpki-client