Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/892c815f-ea39-3b07-84b0-07633eeb832d.roa
File:                     892c815f-ea39-3b07-84b0-07633eeb832d.roa (raw, json)
Hash identifier:          h/4GIr5O6q4PEcym81PaA3qHRuySgNa4ulEyV4TkhOs=
Subject key identifier:   1F:12:A5:19:7C:AF:73:A0:83:33:63:A9:15:BC:8C:87:69:1B:7E:4B
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584CA061BE3FBD7FAC77FFE1C680
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/892c815f-ea39-3b07-84b0-07633eeb832d.roa
Signing time:             Sat 24 Jan 2026 02:00:31 +0000
ROA not before:           Sat 24 Jan 2026 02:00:31 +0000
ROA not after:            Fri 24 Apr 2026 01:00:31 +0000
asID:                     30036
IP address blocks:        2604:2e87:3800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:a0:61:be:3f:bd:7f:ac:77:ff:e1:c6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jan 24 02:00:31 2026 GMT
            Not After : Apr 24 01:00:31 2026 GMT
        Subject: CN=e92e3b6c-3a45-4206-8a7e-11d18baedb15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:d3:cf:13:8b:c8:47:d0:0c:91:41:67:28:b9:
                    98:62:6a:81:98:83:d4:59:e7:90:4b:b9:50:76:86:
                    0b:7d:e4:16:c0:70:2b:69:40:89:43:96:b3:b7:0a:
                    29:30:5a:bc:4e:90:de:8e:cb:57:b9:a2:d6:25:11:
                    8e:6e:e0:9c:f8:1b:51:e0:f5:c2:ef:0c:d0:98:3c:
                    49:4c:51:80:07:bf:68:b4:f0:e3:34:b4:e8:36:73:
                    d0:57:1a:94:81:e9:8a:86:0d:20:60:d2:90:74:f2:
                    38:6e:16:1c:cb:71:7d:d4:ff:1d:2b:82:56:0d:69:
                    f9:c2:af:c8:1f:33:84:63:a1:67:01:5c:cc:72:7e:
                    64:4c:70:d4:7f:34:04:33:9e:ae:db:f5:42:5d:db:
                    d4:5b:2b:91:e4:a5:f0:8a:4d:9d:76:b4:1d:ae:d2:
                    2b:26:5c:85:59:0c:3b:06:dd:94:e7:6f:cd:65:1f:
                    d5:6c:37:fc:c7:b3:b7:58:44:b0:13:82:1b:4e:22:
                    95:4e:ca:5a:6f:45:54:ad:aa:c6:ec:fb:79:09:3b:
                    b5:9f:ac:a0:48:3d:a8:8a:34:22:2f:ec:6c:45:bf:
                    54:fe:74:7d:2d:14:b5:47:9c:19:af:b1:bc:d5:cb:
                    e2:a1:49:77:ff:2e:50:31:d3:25:f6:31:58:e9:84:
                    7f:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:12:A5:19:7C:AF:73:A0:83:33:63:A9:15:BC:8C:87:69:1B:7E:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/892c815f-ea39-3b07-84b0-07633eeb832d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e87:3800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:8a:fb:5d:62:6d:e7:8b:e1:d1:23:aa:58:10:62:f7:f0:d4:
         ef:97:fc:d9:99:35:de:ac:08:21:ab:9f:22:c2:b5:b4:3a:78:
         5f:df:b7:68:76:39:30:76:6c:09:9e:b1:63:2f:31:ed:49:91:
         9b:a2:01:e8:9d:d4:ce:41:d0:aa:7c:ec:92:45:c2:b0:74:9c:
         6b:c9:a3:6b:93:21:05:08:a8:41:84:d9:fc:d7:df:5a:16:ee:
         e8:86:bb:63:35:68:30:9e:2c:29:73:c6:f0:4a:14:7d:88:c9:
         93:ef:ce:a8:b4:a6:7d:ec:6b:d1:5f:f6:16:88:3f:81:dc:3f:
         0b:12:d1:8e:c8:b3:01:3b:c8:6a:44:f8:83:3c:51:a2:90:7a:
         26:ae:10:4c:94:5c:12:52:9d:30:b4:88:5f:f1:f5:f9:86:d3:
         8f:f8:ad:5a:4d:d5:4c:9a:26:c8:45:e6:7c:fa:a6:b2:1b:6d:
         96:3d:23:f5:6c:1c:ed:2b:6d:c4:a8:2e:58:67:96:b9:54:e7:
         61:ff:4d:63:36:80:37:31:aa:11:90:03:a4:95:9f:df:86:ed:
         dd:96:55:73:5f:73:36:4b:8d:b7:e9:b5:88:27:8f:d7:64:46:
         ce:a6:92:af:11:1e:ec:65:7d:28:2f:8b:93:4c:18:6b:a9:3d:
         22:24:c4:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:48:22 2026 by rpki-client