Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/10f693e1-2190-32c6-8bd6-728b2dd38858.roa
File:                     10f693e1-2190-32c6-8bd6-728b2dd38858.roa (raw, json)
Hash identifier:          YbC00BDmZdcy+5766SBG2DoZx75nrrNo84j5vyVcIQE=
Subject key identifier:   7B:1A:27:EE:B2:6F:8C:61:4C:18:6A:8A:E9:67:6A:3A:52:14:F4:75
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584A28844DCBA174F564084BF240
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/10f693e1-2190-32c6-8bd6-728b2dd38858.roa
Signing time:             Wed 11 Jun 2025 17:59:40 +0000
ROA not before:           Wed 11 Jun 2025 17:59:40 +0000
ROA not after:            Tue 09 Sep 2025 17:59:40 +0000
asID:                     19905
IP address blocks:        2604:2e87:4c00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:28:84:4d:cb:a1:74:f5:64:08:4b:f2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jun 11 17:59:40 2025 GMT
            Not After : Sep  9 17:59:40 2025 GMT
        Subject: CN=5f867e68-66bf-47a6-88fc-41399b0ab758
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:2a:b6:c2:72:79:79:1f:1c:f4:f0:7e:f8:85:
                    31:b0:fc:06:df:98:64:49:1d:58:cd:ba:1b:6a:75:
                    09:26:e1:2b:b6:1a:38:d3:b9:52:50:7c:b4:bf:7c:
                    00:44:b2:5e:a8:65:38:6b:8f:87:ac:b9:8f:86:c1:
                    a8:96:bf:36:11:b5:5f:e8:fe:81:14:57:99:f5:4b:
                    b1:ba:15:25:9f:8a:eb:37:d3:92:60:88:45:97:ab:
                    2a:b3:d1:0c:db:80:66:6b:c7:30:11:ce:94:05:15:
                    8d:eb:14:b1:8e:b2:53:3b:17:70:04:20:b1:4d:6b:
                    d1:71:69:a6:0b:68:f5:fa:54:21:5e:29:58:79:58:
                    9c:6d:80:7f:a4:a2:cc:2c:c9:f4:de:b0:b7:ce:d4:
                    5f:81:26:1d:53:2e:24:90:d1:d5:67:c8:45:dd:77:
                    69:97:a8:30:02:a4:bd:97:4a:bf:c2:db:4e:fd:2b:
                    99:be:48:3f:8f:5d:73:31:5c:db:cb:6e:9b:d2:0d:
                    97:aa:c0:95:5a:16:39:18:f0:d5:80:a2:5e:2b:6a:
                    51:75:c9:9c:b4:b1:87:38:b4:cb:c2:fc:f0:07:4a:
                    db:2a:cc:d1:94:c8:5e:bc:bb:e8:1a:ad:32:82:9b:
                    94:6d:03:45:a3:0d:b7:b2:20:65:94:2b:88:a1:83:
                    25:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:1A:27:EE:B2:6F:8C:61:4C:18:6A:8A:E9:67:6A:3A:52:14:F4:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/10f693e1-2190-32c6-8bd6-728b2dd38858.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e87:4c00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:02:b1:51:b5:55:99:93:1d:e5:49:54:1e:6d:7b:66:8c:f5:
         d8:07:a7:d7:4e:80:ad:c6:bb:ba:e1:e6:b4:2c:48:aa:00:31:
         7e:a9:9f:af:34:8d:e3:a5:87:71:7e:29:8f:ab:f0:73:d9:8a:
         8c:52:26:1a:7e:fc:81:f1:4c:2e:18:66:5e:6a:00:60:65:2b:
         11:f6:59:bd:21:88:23:e3:46:2e:b1:79:bf:8d:d4:97:5e:ec:
         73:58:17:7d:9a:b9:6f:bd:c1:d0:b9:93:c2:1d:f7:cc:6e:a9:
         f8:3f:6e:49:1a:0d:60:a1:80:07:06:f7:99:11:21:ef:a2:13:
         24:00:11:47:96:cb:a6:d8:01:d9:20:da:58:d5:f8:23:68:55:
         10:52:c8:e5:1e:ff:8b:de:0b:c9:85:27:1a:29:ad:62:21:71:
         96:26:70:2e:d3:04:3e:db:2b:41:63:2d:96:fd:b9:a9:b2:12:
         f1:86:4e:d8:ae:2e:1e:5b:5c:28:6e:06:71:7b:90:09:c9:4f:
         51:ca:15:fc:1b:16:99:0d:86:c5:72:8a:9d:66:7e:dd:ee:09:
         29:47:13:5c:67:d3:57:0d:19:22:32:fd:a4:a9:1f:31:36:e2:
         b4:1b:ae:3f:04:be:58:74:ad:19:9a:94:a3:99:c6:de:b7:0e:
         d8:c2:13:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:59:11 2025 by rpki-client