Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a150822d-c7e4-350c-a8b7-bc98b7930af7.roa
File:                     a150822d-c7e4-350c-a8b7-bc98b7930af7.roa (raw, json)
Hash identifier:          xgBRi2iukuwWZSkh/Eaq5AEsfbAgnAlpvRFhPrlfIKY=
Subject key identifier:   67:B4:20:70:1C:41:7D:B4:59:8C:F2:C9:72:01:F1:1C:59:54:B8:10
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584CE57E7028D9B619F92C292540
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a150822d-c7e4-350c-a8b7-bc98b7930af7.roa
Signing time:             Tue 17 Feb 2026 20:09:30 +0000
ROA not before:           Tue 17 Feb 2026 20:09:30 +0000
ROA not after:            Mon 18 May 2026 19:09:30 +0000
asID:                     19905
IP address blocks:        2604:2e8a:3400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e5:7e:70:28:d9:b6:19:f9:2c:29:25:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Feb 17 20:09:30 2026 GMT
            Not After : May 18 19:09:30 2026 GMT
        Subject: CN=2eefbd4b-ad8e-41d3-9612-ee002148274b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:0e:14:09:8c:9f:60:f9:d3:f1:82:88:ae:2c:
                    bf:87:c7:68:6c:a6:d0:1f:d0:04:ed:a5:63:18:4a:
                    a4:ce:1e:a5:83:57:ee:f3:00:1b:5c:5e:3e:6f:f7:
                    10:78:42:7e:7b:3b:7b:23:0a:d4:cc:e4:a4:9e:24:
                    31:4b:c9:d7:ee:54:39:5b:90:87:a1:e3:90:8c:2b:
                    3e:7c:e3:16:e3:a8:27:3b:08:82:c4:db:16:83:dd:
                    c5:1c:af:ad:1e:99:3d:cb:18:13:13:84:2b:4c:cc:
                    d8:38:cf:96:90:0f:4d:a5:65:84:56:dd:d9:0e:f6:
                    4a:4d:de:4e:b4:a8:27:0e:3d:23:c1:98:57:ef:0b:
                    94:c1:c0:f6:40:48:62:e7:82:fd:26:cd:ef:88:a1:
                    06:d2:53:e1:e2:7b:db:d0:08:d1:aa:d5:c2:bc:84:
                    f7:bb:f2:47:82:ef:bf:c0:31:21:ed:ae:3a:3a:02:
                    39:79:ed:df:ac:f0:85:d8:3c:72:29:fd:cf:98:58:
                    93:14:d9:86:e4:6b:d0:ac:31:df:37:ee:a0:5b:a4:
                    c7:ad:90:90:2b:2b:a1:33:8d:b7:de:55:26:26:ee:
                    9a:5d:c2:84:bd:6a:39:a9:66:85:2a:54:43:d0:76:
                    9a:cf:c4:47:cf:f5:30:b2:55:56:c7:27:c9:89:42:
                    9f:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:B4:20:70:1C:41:7D:B4:59:8C:F2:C9:72:01:F1:1C:59:54:B8:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a150822d-c7e4-350c-a8b7-bc98b7930af7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8a:3400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:bf:6f:23:df:56:c6:51:52:7a:66:6a:94:00:28:03:1a:a6:
         ad:7d:3d:eb:38:0b:d0:0a:04:5e:9a:43:e1:40:1c:01:d1:dd:
         1c:b9:42:e4:08:1e:33:85:22:15:4a:ca:eb:15:65:26:d6:a5:
         03:06:48:74:9f:35:8f:2c:ef:c7:e1:92:ed:6c:0c:94:10:c9:
         e0:65:7c:78:ce:ee:37:66:02:5a:e0:3c:c4:cc:73:a5:25:ad:
         30:c8:36:02:66:fb:e3:24:ed:4e:27:10:29:c5:77:bb:9c:ea:
         d9:f0:c5:5f:1e:47:9d:55:06:6e:4a:c8:f1:57:8b:16:f1:22:
         f5:35:fd:68:93:84:6b:8e:a9:cb:8a:73:58:25:d0:2b:f8:6f:
         a4:1a:b0:80:3a:85:b7:22:0a:a2:f1:2b:55:17:6e:b0:c9:ad:
         64:0a:e6:f7:7a:f2:8f:ff:50:35:9d:de:50:71:e0:05:7d:31:
         0a:ad:e8:1c:ad:b7:f3:30:02:f1:5e:56:c3:94:b5:b6:b6:24:
         7b:d6:48:80:ec:fc:32:d2:f3:9c:53:ce:9e:d0:da:96:be:6b:
         f5:0f:a7:c3:2b:d5:ad:1f:d8:90:f1:41:95:19:0f:e3:ce:4a:
         28:4a:8e:c1:69:12:a6:53:74:28:22:9e:9e:bb:51:fd:3d:59:
         0c:3e:ab:5e
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEzlfnAo2bYZ+SwpJUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI2MDIxNzIwMDkzMFoXDTI2MDUxODE5MDkzMFowLzEtMCsGA1UEAxMk
MmVlZmJkNGItYWQ4ZS00MWQzLTk2MTItZWUwMDIxNDgyNzRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAog4UCYyfYPnT8YKIriy/h8dobKbQH9AE7aVj
GEqkzh6lg1fu8wAbXF4+b/cQeEJ+ezt7IwrUzOSkniQxS8nX7lQ5W5CHoeOQjCs+
fOMW46gnOwiCxNsWg93FHK+tHpk9yxgTE4QrTMzYOM+WkA9NpWWEVt3ZDvZKTd5O
tKgnDj0jwZhX7wuUwcD2QEhi54L9Js3viKEG0lPh4nvb0AjRqtXCvIT3u/JHgu+/
wDEh7a46OgI5ee3frPCF2DxyKf3PmFiTFNmG5GvQrDHfN+6gW6THrZCQKyuhM423
3lUmJu6aXcKEvWo5qWaFKlRD0Haaz8RHz/UwslVWxyfJiUKfewIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFGe0IHAcQX20WYzyyXIB8RxZVLgQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYTE1MDgyMmQtYzdlNC0z
NTBjLWE4YjctYmM5OGI3OTMwYWY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuijQw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAGL9vI99WxlFSemZqlAAoAxqmrX096zgL0AoEXppD4UAcAdHdHLlC
5AgeM4UiFUrK6xVlJtalAwZIdJ81jyzvx+GS7WwMlBDJ4GV8eM7uN2YCWuA8xMxz
pSWtMMg2Amb74yTtTicQKcV3u5zq2fDFXx5HnVUGbkrI8VeLFvEi9TX9aJOEa46p
y4pzWCXQK/hvpBqwgDqFtyIKovErVRdusMmtZArm93ryj/9QNZ3eUHHgBX0xCq3o
HK238zAC8V5Ww5S1trYke9ZIgOz8MtLznFPOntDalr5r9Q+nwyvVrR/YkPFBlRkP
485KKEqOwWkSplN0KCKenrtR/T1ZDD6rXg==
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:36:03 2026 by rpki-client