Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3782c60c-85bd-3035-bc93-b6475d3fc8f1.roa
File:                     3782c60c-85bd-3035-bc93-b6475d3fc8f1.roa (raw, json)
Hash identifier:          S8fQz1HCWBMqM7jjQvYqlTtpSp1ZOHQ0381QR3wPOTQ=
Subject key identifier:   92:1B:B9:8D:06:DB:DB:E9:71:4E:16:AE:3C:FF:3A:6E:F4:22:0A:99
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584D39CF954E0B34E5E91B79A840
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3782c60c-85bd-3035-bc93-b6475d3fc8f1.roa
Signing time:             Fri 20 Mar 2026 01:00:32 +0000
ROA not before:           Fri 20 Mar 2026 01:00:32 +0000
ROA not after:            Thu 18 Jun 2026 01:00:32 +0000
asID:                     19905
IP address blocks:        2604:2e8f:8800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:39:cf:95:4e:0b:34:e5:e9:1b:79:a8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Mar 20 01:00:32 2026 GMT
            Not After : Jun 18 01:00:32 2026 GMT
        Subject: CN=9818e55a-8265-48d7-8f09-5fcb9836282f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:81:8d:b3:2b:4c:e4:6e:25:1f:8d:b1:16:d3:
                    6f:78:4b:71:b4:9e:73:ef:67:99:f0:d4:e4:b1:41:
                    c4:40:88:d5:04:78:3a:56:fb:ec:37:6b:c8:9c:57:
                    3d:43:13:6f:cb:eb:1e:a8:a9:da:8d:4f:a1:54:7d:
                    3d:b7:05:11:0a:dd:bf:00:e1:9a:68:c3:43:15:ac:
                    7e:94:fd:66:01:05:c0:7e:2a:f6:3c:da:69:44:aa:
                    31:a9:05:ea:b5:cb:54:b8:10:52:05:78:de:5b:2c:
                    c6:bd:ae:d0:7f:4c:65:a5:09:a3:fa:c1:16:a5:4e:
                    50:3a:b8:9a:e7:17:07:be:21:a4:fc:ed:19:a2:ef:
                    4a:86:ef:fa:e0:44:0f:53:71:ba:78:5c:c4:c3:03:
                    f2:95:3d:86:a2:91:e5:b2:c7:fa:9c:d9:7a:d6:75:
                    57:bc:8d:f4:85:07:67:15:8b:8b:2d:17:b3:13:8b:
                    2a:17:f0:88:9e:1a:63:b1:79:8d:30:8c:12:7f:6a:
                    84:22:7e:82:08:7c:45:10:ca:d5:f1:c9:7e:80:10:
                    8f:a0:68:22:f3:fb:10:a5:d5:ac:e1:ca:e9:bc:96:
                    0a:48:45:10:5e:ca:11:b6:72:e8:f7:c8:87:17:86:
                    06:6a:c8:c4:05:fa:54:93:63:e1:f3:ee:d7:e0:d7:
                    14:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:1B:B9:8D:06:DB:DB:E9:71:4E:16:AE:3C:FF:3A:6E:F4:22:0A:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3782c60c-85bd-3035-bc93-b6475d3fc8f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8f:8800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:6c:15:24:4e:9c:7d:30:22:3d:0d:15:6e:67:b3:bc:39:42:
         ab:57:7e:9b:6e:83:da:80:fa:94:1f:da:15:81:05:e0:c1:76:
         4f:ae:c6:db:b7:65:a4:fe:b9:39:97:37:62:5b:8d:7d:49:5a:
         3d:1f:88:8b:6e:7b:e5:a3:30:9b:3a:ea:2f:2f:c1:4c:c1:91:
         29:2c:04:4f:f0:22:4d:92:f4:5f:78:dd:55:d1:e2:66:9c:0c:
         4e:b3:e2:fb:19:74:01:b7:62:f6:08:49:44:56:c2:b2:a9:b1:
         3a:11:f0:28:32:23:3c:b8:a2:62:ee:bb:aa:db:1b:bb:c2:78:
         9a:75:29:48:b0:e7:17:99:04:0f:dd:1a:b9:63:9e:5a:01:68:
         99:9e:8b:a5:6c:a1:f2:74:ca:69:38:28:93:42:d0:db:e1:4c:
         10:07:e1:5a:37:0e:5d:c8:8d:80:99:00:62:82:00:fd:7e:07:
         db:6c:e8:42:d0:f2:63:1d:2d:0d:4d:2a:26:b3:f2:3d:db:ed:
         04:3f:d2:dd:41:d9:06:68:86:d9:84:ef:0f:ca:2e:f9:db:b4:
         a4:ac:ab:2a:39:1f:16:90:f5:ef:46:a0:e8:07:9e:ef:c7:80:
         a6:2d:97:15:b4:39:16:dc:7a:7a:58:46:bc:6a:ae:ba:3d:a8:
         eb:00:f5:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:38:26 2026 by rpki-client