Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/e9f3a12a-5d62-3306-a506-b91eb637f57a.roa
File:                     e9f3a12a-5d62-3306-a506-b91eb637f57a.roa (raw, json)
Hash identifier:          G7Fn6fvoLXcI7OD/vTTPXualX3CP/hzIQcmLiDxWBd8=
Subject key identifier:   11:D3:69:77:50:6F:60:75:5C:A5:A4:51:2A:B4:19:6C:C6:2D:B4:CB
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584D1B1A63722D24DB939BA7D100
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/e9f3a12a-5d62-3306-a506-b91eb637f57a.roa
Signing time:             Mon 09 Mar 2026 01:00:32 +0000
ROA not before:           Mon 09 Mar 2026 01:00:32 +0000
ROA not after:            Sun 07 Jun 2026 01:00:32 +0000
asID:                     19905
IP address blocks:        2604:2e8e:6000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 13 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1b:1a:63:72:2d:24:db:93:9b:a7:d1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Mar  9 01:00:32 2026 GMT
            Not After : Jun  7 01:00:32 2026 GMT
        Subject: CN=05428fd3-acaf-4492-8772-feb648f70476
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:b7:23:96:db:27:fe:84:fa:af:dd:8d:c9:6a:
                    bc:2a:f5:a4:a3:f9:d2:f2:20:27:2e:40:d1:db:e2:
                    f5:6a:36:5a:90:ed:1e:02:82:80:8d:06:0e:42:fd:
                    18:6d:1e:f1:99:99:1c:41:68:14:de:d4:90:05:b4:
                    dd:7a:f9:f5:f2:2a:1c:67:2f:e4:eb:d0:91:46:c2:
                    6e:6f:63:fe:e8:71:9d:f1:3f:ba:ae:f3:1c:12:e2:
                    13:f8:c8:91:fa:ea:5a:73:60:eb:5d:4f:9d:71:4b:
                    0e:aa:8f:79:73:18:2e:ba:59:8f:64:4d:b0:0b:d4:
                    3d:22:bb:80:b5:b4:6f:91:de:80:21:bf:4c:1a:aa:
                    91:7c:9a:60:61:8a:87:35:52:98:b6:b7:f3:af:fd:
                    f1:6a:ee:67:13:bb:50:cb:de:f5:d5:b0:c3:99:79:
                    91:e1:87:4e:5c:e7:c6:0f:52:83:35:ec:aa:a5:74:
                    4d:fd:8f:cf:a5:91:18:7e:20:ce:dd:89:75:83:7e:
                    04:ca:7b:c6:41:03:be:87:83:aa:e6:f8:85:88:f8:
                    1b:6f:84:fa:b3:62:ea:c4:74:f7:34:f7:f3:db:06:
                    e8:68:88:ac:b9:74:d2:74:10:73:be:55:9f:b8:09:
                    83:aa:88:ef:41:bd:eb:f9:42:cb:c1:76:a8:48:80:
                    b3:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:D3:69:77:50:6F:60:75:5C:A5:A4:51:2A:B4:19:6C:C6:2D:B4:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/e9f3a12a-5d62-3306-a506-b91eb637f57a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8e:6000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:ee:3e:03:91:4c:62:cc:b5:48:e7:b1:7d:7c:33:3e:e5:f1:
         18:d1:17:61:98:d9:32:a8:a3:9b:4e:93:21:79:d4:23:7a:f9:
         06:80:50:bf:19:92:4d:d3:9a:e3:fc:c6:5f:fc:32:ce:6e:0f:
         59:07:50:c3:bb:b0:7f:73:da:34:99:ad:3a:7b:25:2b:22:54:
         9d:0f:97:2a:a4:d5:6c:d3:ce:c3:92:5f:36:7f:4c:28:a4:2f:
         21:07:b9:e2:b1:9e:c7:d2:af:3e:55:51:d4:a7:7e:d3:f3:c6:
         ab:36:46:f8:3e:ab:1e:86:74:35:7e:4c:6a:3c:4b:7f:5b:98:
         f0:bf:5a:28:2b:25:a0:b5:2a:a0:67:28:30:7b:62:c4:29:8f:
         57:62:82:c6:0e:ae:03:86:f9:ca:03:86:85:d0:fc:2e:a3:6a:
         f1:55:e9:e5:a9:f8:bc:7c:d1:8f:03:de:92:1c:84:75:4d:b9:
         b2:2e:c1:94:80:2a:9c:74:40:8e:d9:32:21:c0:a3:13:ae:96:
         67:55:fa:7c:70:39:cb:99:2b:18:a4:00:6e:0e:12:41:18:9a:
         50:ac:00:b4:91:86:cc:90:2c:4d:ac:38:c4:dd:32:51:6e:36:
         c1:32:f8:26:b6:84:b6:2d:8f:d4:13:2c:03:45:4c:2e:da:6f:
         79:97:56:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 09:32:23 2026 by rpki-client