Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/fe142a14-58e4-343c-be50-483c2eba7c06.roa
File:                     fe142a14-58e4-343c-be50-483c2eba7c06.roa (raw, json)
Hash identifier:          by/zqLskWIjtbtvwgcXzCJCbh75fTNNP4qMUnTcdDJ0=
Subject key identifier:   B6:B7:64:7F:7D:9C:4B:74:1B:99:4F:45:6A:8A:24:44:AF:C1:0E:C5
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584C910708E0CCD5681C54399E40
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/fe142a14-58e4-343c-be50-483c2eba7c06.roa
Signing time:             Sun 18 Jan 2026 14:00:39 +0000
ROA not before:           Sun 18 Jan 2026 14:00:39 +0000
ROA not after:            Sat 18 Apr 2026 13:00:39 +0000
asID:                     30036
IP address blocks:        2604:2e88:b800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:91:07:08:e0:cc:d5:68:1c:54:39:9e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jan 18 14:00:39 2026 GMT
            Not After : Apr 18 13:00:39 2026 GMT
        Subject: CN=e38038b0-f24a-4da7-886f-0e4529fcb759
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:26:32:ed:23:2b:3b:d3:b2:ae:22:38:22:19:
                    3f:68:5b:a5:a2:50:e3:fc:5f:a7:7a:93:0f:ab:63:
                    d2:74:d3:37:b3:60:8b:41:3e:f4:1e:1a:e9:7b:2f:
                    13:a0:d9:16:13:8b:ff:15:1c:ad:7c:b1:e5:89:f5:
                    7b:00:ef:a2:ec:76:7f:5d:c6:5e:68:8c:f0:4f:1d:
                    c0:cc:31:3f:92:00:0c:aa:61:67:e6:17:d2:3a:dd:
                    08:34:e5:47:a7:8a:f8:14:c4:ff:8a:bb:01:28:c5:
                    b3:95:de:84:7b:35:7b:2d:a1:0d:8f:98:52:fc:da:
                    0f:80:df:49:63:11:28:da:d1:3f:2c:73:7c:85:f1:
                    77:17:4c:1a:af:ab:b2:cb:0a:fd:aa:3c:35:8f:04:
                    59:de:ec:55:fb:61:97:02:a2:f2:45:63:92:a8:3c:
                    3f:1e:5f:57:7a:c5:79:6e:54:2b:5b:50:66:31:6d:
                    fc:73:da:dc:52:44:22:24:bf:12:83:8f:72:c8:f5:
                    f3:c7:11:a0:4e:60:5a:47:9e:8d:47:6f:ea:3f:5a:
                    f8:b0:9e:21:d3:cc:26:8c:1f:6a:85:a8:0d:91:fe:
                    3e:da:98:61:d1:d2:ec:e4:7b:9b:74:2a:50:f0:61:
                    27:2b:83:55:ed:7e:3a:64:78:66:49:f6:59:e8:d4:
                    14:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:B7:64:7F:7D:9C:4B:74:1B:99:4F:45:6A:8A:24:44:AF:C1:0E:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/fe142a14-58e4-343c-be50-483c2eba7c06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e88:b800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:46:b6:1b:9f:b6:7d:c6:d8:0a:20:fe:f4:ad:0d:70:9b:dd:
         c0:54:41:79:96:5e:70:8b:8d:3c:34:9d:9e:ec:02:2e:4b:27:
         31:fe:7f:3c:8a:3b:ca:33:01:86:21:63:83:d1:7d:ac:8a:16:
         6c:90:77:02:56:5c:50:4f:df:60:16:dc:6e:1b:e7:33:41:51:
         5d:94:7d:46:32:a0:93:74:a1:81:a4:22:be:3e:7c:49:6c:fe:
         49:2b:8b:9d:03:df:8f:b2:75:47:91:34:f0:2d:96:4f:0c:8b:
         77:fb:10:1b:94:37:33:ba:1b:8e:37:90:63:0b:e4:0f:93:5a:
         c2:0e:44:ed:7d:87:40:96:f0:0f:b3:98:e2:f3:b3:92:b6:16:
         74:3c:8e:9b:20:fd:87:23:cd:1b:aa:ac:5b:00:ff:d0:cd:49:
         ca:c0:ba:fa:aa:7c:14:17:00:90:d0:63:26:c0:41:c4:f0:92:
         cb:08:58:86:f5:fe:22:d9:44:3d:23:87:7c:4c:ac:b3:3b:c7:
         1c:e7:49:57:45:e3:18:70:de:7a:f7:fb:15:76:d0:fb:23:7b:
         81:67:0b:c9:83:63:99:8c:27:6d:a8:e4:9b:82:52:d1:b6:08:
         0b:e2:89:1f:f4:84:23:c7:db:a9:bd:b8:13:42:78:0b:e0:34:
         d8:37:00:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:56:22 2026 by rpki-client