Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/82ac8938-4c8f-3847-9e90-93b95cf556e5.roa
File:                     82ac8938-4c8f-3847-9e90-93b95cf556e5.roa (raw, json)
Hash identifier:          lI+iR+QIE76r2AIAxS3/jvSPLzqBS1KlcCzhnhvP0cY=
Subject key identifier:   B8:D8:2F:8C:EE:02:4F:95:C8:B9:80:43:83:0A:1A:45:F5:9B:2A:99
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584CEBC22145262A7A956E1D9E20
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/82ac8938-4c8f-3847-9e90-93b95cf556e5.roa
Signing time:             Fri 20 Feb 2026 02:00:32 +0000
ROA not before:           Fri 20 Feb 2026 02:00:32 +0000
ROA not after:            Thu 21 May 2026 01:00:32 +0000
asID:                     19905
IP address blocks:        2604:2e89:7000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:eb:c2:21:45:26:2a:7a:95:6e:1d:9e:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Feb 20 02:00:32 2026 GMT
            Not After : May 21 01:00:32 2026 GMT
        Subject: CN=bc95b7e0-30df-452c-b9c5-3dc9a5e97a99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:5f:07:13:e5:15:46:8c:1f:f5:ea:12:39:f6:
                    e8:07:23:72:a2:ec:54:c5:ca:ff:ec:6d:72:d7:87:
                    2e:2b:99:c4:12:d1:8b:c9:39:cf:01:9b:b0:60:a9:
                    58:e9:47:a6:30:57:3e:19:1a:3d:25:25:ff:35:a6:
                    dd:df:01:77:ad:02:fe:1f:e3:97:ec:4b:00:70:86:
                    39:8e:47:1d:48:70:fa:c3:7f:20:5b:87:30:78:e9:
                    b2:8e:81:f4:9a:8d:ce:5b:2b:b1:51:aa:28:69:3d:
                    ac:d4:fd:32:9d:22:5a:d1:8c:2d:f2:d6:30:4e:22:
                    d7:a1:79:cf:16:e6:3a:5b:9f:e4:27:95:8e:02:33:
                    03:b8:5a:d9:33:e8:dc:c8:f5:00:9d:23:56:76:db:
                    e4:69:06:0d:53:24:71:e1:eb:3e:ab:df:25:e5:42:
                    32:b6:6a:1c:40:51:be:6e:35:b7:94:19:c7:b5:43:
                    30:e2:08:26:62:c0:26:cb:6b:c5:84:af:c9:fd:f6:
                    bd:71:f7:ba:5c:58:a1:8c:f8:5e:db:cb:cf:c7:f3:
                    0c:6d:bf:d2:91:30:75:28:28:a7:25:93:05:84:f5:
                    db:22:54:3e:ed:44:c0:01:20:a3:84:93:71:b4:3b:
                    d0:3f:01:dc:cf:72:a8:92:c8:19:8f:af:d5:a3:03:
                    92:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:D8:2F:8C:EE:02:4F:95:C8:B9:80:43:83:0A:1A:45:F5:9B:2A:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/82ac8938-4c8f-3847-9e90-93b95cf556e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e89:7000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:8b:bf:86:f8:66:3c:65:86:59:93:1f:23:9f:f4:ea:89:6d:
         65:11:e2:3b:7b:68:bf:e3:2f:55:13:f2:c8:29:4e:0e:5d:86:
         b4:b6:21:73:9e:9f:83:cd:1a:f0:f1:ef:15:1b:4b:6d:34:ce:
         e5:af:a6:fb:c3:0c:70:f0:66:4e:2c:eb:d6:54:21:3b:f5:bc:
         db:e8:fb:27:c8:02:81:c5:31:53:00:b2:f5:b4:e4:d8:7f:49:
         c6:79:be:05:a1:47:c9:64:36:f6:26:06:63:1b:d1:3c:3e:bf:
         7e:4d:f2:f4:0c:23:c8:f2:e5:08:e0:22:fc:a2:26:3c:80:f6:
         0e:2b:9d:1d:9b:8c:e5:54:91:bb:07:26:eb:e9:a0:b5:34:60:
         86:84:9b:33:d0:0b:14:e6:c3:7d:a1:02:84:c2:47:f7:ad:40:
         9b:17:de:35:3e:0e:3c:c3:51:48:12:a5:2b:d5:5f:9d:10:ba:
         84:8a:75:8b:81:a0:26:9c:7b:b9:3e:28:23:47:88:e0:80:97:
         7a:9e:1a:bb:a0:72:72:78:ca:3e:31:1d:ec:69:77:95:7e:91:
         a4:11:6a:56:38:8d:8d:4d:6b:e8:57:57:c0:74:2c:a8:27:80:
         e6:d1:94:22:e3:be:bc:cc:d8:14:50:47:03:ec:0b:11:e0:35:
         21:d9:25:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:07:04 2026 by rpki-client