Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b4e0c176-214f-3286-8616-fd3f51e93567.roa
File:                     b4e0c176-214f-3286-8616-fd3f51e93567.roa (raw, json)
Hash identifier:          OMUDkcREC57okzFWTuc/ypcxHnk7ftQ8bL9P90t0crQ=
Subject key identifier:   A3:B9:32:40:F0:14:06:2C:56:8C:8B:FC:83:DB:94:43:CA:9B:62:30
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584D4D5A9857AEAE9F6BF7B2DE00
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b4e0c176-214f-3286-8616-fd3f51e93567.roa
Signing time:             Fri 27 Mar 2026 01:00:31 +0000
ROA not before:           Fri 27 Mar 2026 01:00:31 +0000
ROA not after:            Thu 25 Jun 2026 01:00:31 +0000
asID:                     19905
IP address blocks:        2604:2e87:7c00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4d:5a:98:57:ae:ae:9f:6b:f7:b2:de:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Mar 27 01:00:31 2026 GMT
            Not After : Jun 25 01:00:31 2026 GMT
        Subject: CN=3de616a7-f490-4311-9f9b-d87fd2cb91bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:19:59:22:a5:85:ad:72:3d:a8:a9:1f:e4:eb:
                    59:c7:27:96:35:3e:48:01:4b:83:d9:f0:07:f5:5a:
                    0f:1d:aa:d4:08:e9:53:c8:a6:d9:36:2e:78:5d:1f:
                    1f:2a:db:4b:e5:76:70:8d:9c:13:7d:5c:08:c7:ce:
                    28:06:60:dc:9c:5d:b6:db:23:1f:f3:05:bc:9e:da:
                    ff:09:02:18:65:26:ac:9c:62:a3:65:3f:48:7c:ed:
                    97:17:34:18:e3:a3:37:9d:b2:fb:48:c3:03:8f:b0:
                    a5:78:fe:55:40:fa:39:a7:4d:41:f0:5e:13:63:1f:
                    27:26:37:78:ee:60:cd:4d:fc:32:b2:ca:ec:92:45:
                    40:00:7f:5e:92:1e:47:7e:b0:69:40:07:7d:bd:93:
                    ee:ea:42:b9:2c:5d:ca:1e:47:d1:d3:e5:8e:d0:79:
                    41:6f:87:e4:25:72:8c:8f:6a:7b:a9:2f:46:b9:c7:
                    75:2c:52:60:cc:ab:68:44:be:e1:5d:4d:6c:24:8e:
                    b2:0b:41:63:c3:66:14:47:c3:48:6c:6d:50:9c:15:
                    7e:87:6f:1f:17:bb:70:c2:5d:76:0b:c7:be:7e:af:
                    11:ff:0e:00:c3:cd:d9:85:09:ff:51:41:10:79:20:
                    67:fd:99:b7:b9:43:e5:6a:1c:7d:f9:3c:f1:2d:8e:
                    3c:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:B9:32:40:F0:14:06:2C:56:8C:8B:FC:83:DB:94:43:CA:9B:62:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b4e0c176-214f-3286-8616-fd3f51e93567.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e87:7c00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:5a:bd:b6:19:5b:26:59:02:66:fb:ce:38:68:68:aa:9e:12:
         48:9d:61:24:f5:09:7c:0f:31:73:a7:b9:ee:ae:32:14:a5:08:
         20:86:2d:9d:66:94:f2:f9:a3:5c:98:92:de:4b:d2:c9:f7:e7:
         b4:77:e0:a6:df:d3:ed:b9:19:98:5e:30:11:1a:ef:5b:e5:55:
         17:8c:fd:97:b6:9f:40:4b:d7:10:87:ed:9e:20:a0:78:7f:f4:
         33:26:4c:9a:fc:c4:4b:44:31:04:e3:02:5e:d6:d5:c4:94:25:
         57:1e:d1:82:e9:20:df:03:7c:a8:0e:86:16:b8:f2:c7:30:1e:
         82:58:a6:58:ae:f2:e2:65:19:78:2d:7a:f6:37:43:71:5f:7f:
         22:17:fc:b5:c3:13:0b:32:2f:7f:bb:a3:a7:27:8d:0c:93:5e:
         cf:e1:d2:88:73:9a:24:b7:e9:26:a8:15:f1:e5:1f:cd:bf:09:
         f1:5a:8b:16:c4:a0:5c:be:64:7f:8a:c1:a5:2e:a3:44:0f:b9:
         a2:e4:6d:fa:aa:3a:f7:7f:b9:f9:da:fb:09:a4:05:dc:d9:e7:
         97:ae:f1:09:b4:f8:5f:23:c3:be:6b:00:e7:f5:7d:79:9d:11:
         b0:5c:50:3a:e7:b5:a0:81:d2:23:44:29:16:47:18:6c:13:0d:
         a7:95:3f:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:44:32 2026 by rpki-client