Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/dd1671a8-5f6d-307f-9a05-2fe437c29814.roa
File:                     dd1671a8-5f6d-307f-9a05-2fe437c29814.roa (raw, json)
Hash identifier:          zKLi83eBhePsIyhvqHRm3Nrmr0DNH62/zzEsSeNntks=
Subject key identifier:   10:75:54:48:D2:6B:05:F4:19:BC:BC:A7:97:62:B9:79:C9:43:92:F1
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584CEDCFA09B05C752D236C25560
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/dd1671a8-5f6d-307f-9a05-2fe437c29814.roa
Signing time:             Fri 20 Feb 2026 19:39:34 +0000
ROA not before:           Fri 20 Feb 2026 19:39:34 +0000
ROA not after:            Thu 21 May 2026 18:39:34 +0000
asID:                     19905
IP address blocks:        2604:2e89:4800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ed:cf:a0:9b:05:c7:52:d2:36:c2:55:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Feb 20 19:39:34 2026 GMT
            Not After : May 21 18:39:34 2026 GMT
        Subject: CN=4bd84fd0-566f-4c59-b2a2-937feb18dcea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:ff:13:67:67:58:9c:af:b2:de:7a:5f:cf:2d:
                    3a:08:c3:0a:e4:ed:38:d3:21:56:cf:ec:3b:48:c7:
                    94:e0:5d:e7:35:63:d1:1a:f4:c6:12:83:5d:e2:fe:
                    26:e6:0e:5f:3c:cf:65:a7:02:35:78:fe:31:a2:7a:
                    a7:89:b2:95:01:41:e3:d8:6a:1c:0a:0e:25:b3:0f:
                    fb:77:83:ab:fb:44:c0:8f:5b:6e:ac:95:e4:38:e4:
                    52:e0:77:27:58:e6:4b:92:ea:07:4b:e6:75:6a:c4:
                    58:cb:71:bb:c1:1a:20:90:a7:d3:93:e5:ff:ce:e3:
                    76:73:52:ac:d1:5f:26:29:95:3b:73:c9:95:ea:20:
                    a9:56:0e:f3:1a:83:47:97:2e:34:d4:6b:5e:19:78:
                    cc:31:f6:fb:22:8c:cc:54:73:d8:99:c0:48:ee:e7:
                    af:32:5e:f9:77:23:24:53:e4:8a:dc:03:99:ea:11:
                    b8:2c:5b:39:48:8f:46:6b:cb:8f:09:19:9a:3f:77:
                    41:3c:ce:de:06:90:d4:33:fa:27:73:7d:cd:be:7e:
                    0d:f1:a4:e7:fd:b2:7a:bf:3d:36:d1:7f:a8:1f:a5:
                    0c:24:bc:92:89:65:1e:4c:20:a8:5f:d1:84:cb:32:
                    37:e3:c2:c7:e0:1b:6e:68:bc:38:10:20:1e:0c:12:
                    cb:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:75:54:48:D2:6B:05:F4:19:BC:BC:A7:97:62:B9:79:C9:43:92:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/dd1671a8-5f6d-307f-9a05-2fe437c29814.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e89:4800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:fd:06:8d:f2:d8:83:c8:47:db:67:8f:45:46:ba:52:60:4a:
         46:b6:23:1f:29:f6:58:1d:31:d7:39:5f:c9:4d:03:8f:32:63:
         af:9c:a3:a6:44:42:d8:c6:ef:48:a5:4f:22:5c:7f:dd:eb:4f:
         56:b1:11:ec:cb:a9:72:42:ea:e4:9d:8a:4e:9c:74:0d:b6:98:
         05:e5:10:b7:7e:a0:23:be:46:e3:55:fd:bb:34:a9:a2:49:9c:
         e7:29:28:0b:4d:70:62:8d:05:64:c5:76:0f:72:39:02:0e:cf:
         f1:d4:f4:ee:f3:7a:3d:86:13:54:d6:8f:e4:70:70:59:83:d2:
         4b:f9:e3:9d:6f:0a:c8:b1:85:97:32:53:08:7d:f3:e4:5b:9b:
         d0:b0:16:48:30:c5:13:8a:80:e8:05:69:d6:1a:1b:bb:ab:3d:
         d6:ae:9f:8e:ea:12:bc:60:02:f0:64:4b:6a:91:af:ec:59:6e:
         c4:ed:8f:6d:04:00:4b:2a:19:6f:2d:07:86:d0:4e:83:f3:8d:
         9a:4f:69:56:98:75:58:74:f9:e0:2b:e3:e9:29:a5:37:be:7f:
         94:87:34:ec:6f:78:76:93:84:fb:50:1c:07:61:b4:7e:9a:5e:
         c3:4d:e2:21:c5:e6:07:45:74:04:f5:a3:04:d7:77:70:b2:99:
         35:67:a8:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:44:59 2026 by rpki-client