Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d90c9724-7ce0-3667-a810-c88ce03c5246.roa
File:                     d90c9724-7ce0-3667-a810-c88ce03c5246.roa (raw, json)
Hash identifier:          noNv9/jnDe5+z7oPFk6QjUO8mA0iJxSmMRArfn+I1pc=
Subject key identifier:   34:DB:ED:E1:1A:9C:D4:32:F6:51:94:57:EE:36:28:06:87:27:13:82
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584D624A59858A1A43FAF1AA9C00
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d90c9724-7ce0-3667-a810-c88ce03c5246.roa
Signing time:             Fri 03 Apr 2026 13:00:30 +0000
ROA not before:           Fri 03 Apr 2026 13:00:30 +0000
ROA not after:            Thu 02 Jul 2026 13:00:30 +0000
asID:                     19905
IP address blocks:        2604:2e87:8400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:62:4a:59:85:8a:1a:43:fa:f1:aa:9c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Apr  3 13:00:30 2026 GMT
            Not After : Jul  2 13:00:30 2026 GMT
        Subject: CN=485fb838-e759-448a-a91b-a5edeafd2b5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:38:08:aa:10:8d:ae:7e:5b:ef:8d:b0:9b:7d:
                    e7:42:9f:37:06:fa:4c:5c:90:01:cf:22:1e:1a:86:
                    19:0f:49:ff:51:c7:04:01:92:ed:3e:d5:78:79:7b:
                    40:3a:16:46:71:c5:31:09:9f:6d:e6:5d:84:fb:f6:
                    0d:f1:70:1d:6b:35:08:6a:c9:e7:07:ac:3a:e9:03:
                    ef:e2:c2:c7:88:fe:95:b2:cd:3e:46:4b:f6:49:45:
                    08:15:ad:dc:04:a4:6d:b5:46:26:69:ec:68:99:70:
                    12:34:c8:31:f3:5c:68:2e:a2:e7:b2:fc:d8:e1:b9:
                    00:e6:d3:b1:72:e1:51:1e:0b:20:a2:e2:1c:94:e4:
                    f2:5d:90:3e:83:e2:cd:29:cb:04:1d:b0:07:77:e6:
                    9d:d2:99:1a:dc:64:7f:64:f7:6f:37:a5:c7:d3:05:
                    58:7f:b2:69:99:cb:0b:12:18:3d:7b:dd:60:97:59:
                    b3:d8:c7:cd:4a:1f:11:39:0e:b4:52:6c:15:b6:02:
                    f5:51:29:2d:a2:f7:ec:87:20:54:e7:94:ea:7b:0c:
                    44:50:27:fe:47:0e:d6:97:8b:37:ae:09:46:7a:66:
                    09:21:8d:09:cc:17:b5:a9:59:1c:66:1c:42:28:e2:
                    c1:4a:01:70:c5:cf:d7:82:c1:2a:e1:e8:81:a9:27:
                    53:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:DB:ED:E1:1A:9C:D4:32:F6:51:94:57:EE:36:28:06:87:27:13:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d90c9724-7ce0-3667-a810-c88ce03c5246.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e87:8400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:21:3d:46:4e:7e:0f:ed:d6:27:49:75:64:d8:5a:26:4d:b7:
         e6:1d:96:47:d4:05:3b:cf:ef:60:e9:58:23:51:11:c0:68:a2:
         40:a7:f1:97:91:aa:68:5f:f0:8c:70:61:a1:29:2e:79:1b:61:
         1d:f1:87:27:48:0e:9d:68:5c:33:cc:f2:e5:13:13:0c:8a:0a:
         1c:33:26:f7:6d:3e:53:02:05:5b:e6:37:c4:21:e6:8d:61:8f:
         91:74:70:84:48:e7:2e:2e:b7:10:16:65:d4:30:4d:4c:0e:aa:
         09:e3:eb:57:af:19:ab:e0:3f:7a:61:b7:7b:3a:c1:1a:61:e9:
         46:fb:99:4c:82:33:74:10:8c:49:51:6a:f8:11:40:0d:65:06:
         8a:f1:cb:03:9b:1a:be:8b:95:6e:ed:1c:ae:ec:e5:74:90:f3:
         86:63:4f:de:22:35:d7:67:6a:08:d6:7a:db:cb:9e:35:1d:78:
         d2:37:a7:14:f8:93:f6:2c:d5:8d:f3:27:61:bd:fb:c2:69:a6:
         7a:ed:8b:04:a2:98:bc:5e:62:71:51:2a:96:31:6d:f8:94:68:
         36:32:3e:1b:b9:e6:e4:2f:61:92:27:e0:54:89:00:51:e7:59:
         09:2f:0b:f8:05:34:42:e8:06:f0:42:d7:a3:da:46:48:5c:d5:
         bc:2f:5f:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:05:11 2026 by rpki-client