Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/7e4ce9a2-f5fe-3d51-89e2-7303df23bbe6.roa
File:                     7e4ce9a2-f5fe-3d51-89e2-7303df23bbe6.roa (raw, json)
Hash identifier:          l+H6adVIVv0LNIAm5DJs4+5mjV8bBEzdSjECzVjVjZM=
Subject key identifier:   17:18:3F:C3:00:A0:1B:65:3C:B5:7E:D7:91:23:32:86:E8:91:F6:76
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584CAA2710E26DE02C468845DA80
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/7e4ce9a2-f5fe-3d51-89e2-7303df23bbe6.roa
Signing time:             Tue 27 Jan 2026 14:00:36 +0000
ROA not before:           Tue 27 Jan 2026 14:00:36 +0000
ROA not after:            Mon 27 Apr 2026 13:00:36 +0000
asID:                     19905
IP address blocks:        2604:2e87:a000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:aa:27:10:e2:6d:e0:2c:46:88:45:da:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jan 27 14:00:36 2026 GMT
            Not After : Apr 27 13:00:36 2026 GMT
        Subject: CN=666e4dd1-83a6-4340-922d-c21d18e1da4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:bb:cf:fb:8e:56:0f:52:dc:76:3e:b7:54:3a:
                    48:02:81:e8:69:51:b3:28:d4:fe:d0:ce:1c:d0:aa:
                    de:53:5b:8d:db:80:38:cc:0e:5e:87:e4:7c:69:5e:
                    99:dd:b2:63:ec:3e:07:39:98:be:2a:cd:21:57:33:
                    2d:2a:91:21:bb:27:43:48:4a:d4:cc:22:8c:ed:09:
                    5a:22:ac:96:02:37:cb:ad:df:58:5b:a5:85:2a:19:
                    d5:09:05:56:11:21:fc:9c:32:d8:ed:8e:95:1b:c6:
                    bf:87:db:92:89:18:4c:90:ab:06:21:1a:55:b1:c7:
                    e1:92:5b:ba:e3:39:7a:ca:6e:7e:ca:35:22:d0:c2:
                    1c:29:9e:e2:0a:ab:df:54:6b:9b:89:dc:a7:4d:60:
                    74:ce:d7:85:99:11:ab:bd:47:61:4c:5f:ce:b0:cd:
                    84:41:8c:de:36:51:75:e4:2e:b9:56:2b:1e:cf:22:
                    e8:f5:cc:d4:ee:53:c1:1d:46:40:21:d5:bf:d1:3b:
                    86:33:d5:c8:e5:78:80:7a:ae:91:94:64:a4:dc:ab:
                    8d:f7:dc:d8:1c:64:90:74:30:56:db:49:c4:21:78:
                    d2:71:c3:4d:1d:80:b8:02:55:8e:bb:b3:f9:41:66:
                    bd:0f:21:ac:4e:fc:d3:30:e2:b4:62:2a:35:61:8b:
                    b0:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:18:3F:C3:00:A0:1B:65:3C:B5:7E:D7:91:23:32:86:E8:91:F6:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/7e4ce9a2-f5fe-3d51-89e2-7303df23bbe6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e87:a000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:16:ec:ed:41:25:b1:8e:a7:ae:cf:5a:35:ec:12:94:38:a3:
         2d:20:35:2b:95:be:8d:13:e3:9d:9f:ad:42:68:8a:dd:a5:4a:
         c7:45:60:74:70:e8:e7:fe:1d:22:1b:e4:f4:d0:9c:11:7a:9a:
         4c:19:c2:c8:50:30:6a:a9:a7:48:19:b9:63:aa:21:e3:93:1e:
         ac:bd:17:69:8b:a8:6a:4c:f6:fa:5d:2d:ff:fd:59:e2:42:1f:
         f1:e8:28:3e:f1:4f:e3:5e:fa:76:d7:03:de:aa:80:58:00:54:
         9f:92:65:25:4a:2f:b2:80:92:c3:c4:e8:05:de:5d:00:23:73:
         c5:29:c1:e4:8b:98:2f:23:58:7e:55:43:b4:4f:ab:52:08:18:
         bb:e5:12:29:43:a3:48:20:0d:79:42:06:c4:b1:af:4c:c7:49:
         1c:40:22:54:fc:8c:0d:94:64:09:57:a9:de:59:74:b0:db:52:
         54:bc:1c:86:c0:7a:55:a2:c9:91:8d:37:e7:b0:72:43:70:44:
         ad:01:a2:ca:4f:0e:30:f6:5e:c6:1c:cc:d2:63:a3:75:4c:f0:
         8f:e7:de:59:9f:21:3e:25:dc:85:07:67:ba:9b:97:65:ed:87:
         51:45:44:c6:3b:4f:d9:20:0a:ed:94:a9:36:70:af:a8:01:81:
         88:d1:75:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:31:43 2026 by rpki-client