Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8317255b-235c-3215-9d31-a31891a2c3b0.roa
File:                     8317255b-235c-3215-9d31-a31891a2c3b0.roa (raw, json)
Hash identifier:          JtQew+0Lr4gw5TCCxTnEbZZfgPlDERX+IOk1jk2JVWI=
Subject key identifier:   CC:30:CA:EC:D6:F8:45:51:B1:89:69:35:6B:25:F8:FA:6C:E3:A4:2A
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584CE57E69AE8FD31F65D5D93F80
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8317255b-235c-3215-9d31-a31891a2c3b0.roa
Signing time:             Tue 17 Feb 2026 20:09:27 +0000
ROA not before:           Tue 17 Feb 2026 20:09:27 +0000
ROA not after:            Mon 18 May 2026 19:09:27 +0000
asID:                     19905
IP address blocks:        2604:2e8a:2800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e5:7e:69:ae:8f:d3:1f:65:d5:d9:3f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Feb 17 20:09:27 2026 GMT
            Not After : May 18 19:09:27 2026 GMT
        Subject: CN=8e5e023c-52ed-4655-9908-63cf2e37d15c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:e0:3d:87:05:05:fb:54:2d:c3:09:03:39:8f:
                    2b:c3:2c:a8:8b:b7:ba:4f:83:04:d7:ee:df:4d:70:
                    15:54:8a:cc:15:39:7b:67:33:8e:e1:2d:74:05:2c:
                    13:3f:c5:60:ba:de:6f:b8:87:1e:c6:f9:ff:fd:fa:
                    6b:07:c2:00:43:f8:4b:08:1f:f6:8d:0d:18:7b:fc:
                    0d:77:22:17:7d:c6:b7:31:08:81:18:85:3e:92:98:
                    21:af:fe:32:61:ea:85:88:d9:ad:9f:6a:68:b8:c0:
                    70:c7:05:74:d3:52:57:96:0b:77:83:41:e8:e5:68:
                    6b:f8:8a:95:86:66:21:fb:84:6e:12:17:66:e4:d7:
                    e3:79:1c:ac:8b:10:0c:21:70:d7:ab:bb:d5:a4:25:
                    d3:8d:35:0e:52:5f:4d:98:83:ed:b4:ee:bc:47:d9:
                    bb:76:8a:3c:99:e3:5f:42:e7:71:74:af:4e:ad:15:
                    47:a5:54:28:93:13:3c:92:89:a7:db:b6:25:ed:6a:
                    40:86:6c:b2:8c:7b:08:12:15:6e:f7:87:a3:ff:7a:
                    57:99:24:0d:e9:62:08:94:e6:a9:81:13:43:47:06:
                    c2:81:72:ef:2e:db:aa:5a:2f:ff:c3:82:a9:cd:ba:
                    46:b2:a0:67:2a:a6:db:e1:5a:16:8e:2c:c6:26:7e:
                    34:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:30:CA:EC:D6:F8:45:51:B1:89:69:35:6B:25:F8:FA:6C:E3:A4:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8317255b-235c-3215-9d31-a31891a2c3b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8a:2800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:18:3a:c6:40:e6:ed:ee:d9:d3:20:34:49:52:dc:40:8f:9d:
         99:ae:57:e5:73:d1:0d:5c:81:04:c0:4e:f3:1b:a3:ed:4b:88:
         6e:30:a1:91:c2:a5:92:41:c4:16:a2:c8:5c:77:d0:6a:99:88:
         a4:65:0d:d3:b2:98:29:27:db:55:6f:1a:76:40:6e:88:81:82:
         00:18:2c:36:ef:6c:00:8d:6a:dd:8f:2d:b3:fa:ce:59:3c:a2:
         fb:ef:ca:b2:06:b7:24:72:36:b1:66:72:cc:a1:a6:95:8a:78:
         3b:f7:f4:c4:84:07:18:e3:a4:ce:fe:6d:51:38:25:ed:8d:e4:
         77:ff:e0:0d:3b:5d:92:4c:ca:26:64:d7:f6:52:fc:b8:b3:b2:
         23:0a:07:ce:01:6e:59:2d:b6:6e:76:95:b0:80:e6:09:51:61:
         0a:b2:1e:72:f4:f5:83:9d:73:03:96:bf:63:ca:55:6e:00:6a:
         eb:23:b8:e4:3a:3c:72:12:de:40:eb:88:55:fa:d5:e7:52:9c:
         be:7b:98:21:4a:3f:36:70:ac:36:43:ed:e1:b3:25:da:36:00:
         38:a1:05:43:56:de:c2:d0:6b:b7:bc:cd:b2:7b:6c:7e:fb:5c:
         fb:e3:1a:7a:bb:20:66:95:d0:70:53:e8:56:f3:a3:ef:54:f2:
         f0:55:b9:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:44:59 2026 by rpki-client