Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4419fb65-2457-3093-8790-33acd058af32.roa
File:                     4419fb65-2457-3093-8790-33acd058af32.roa (raw, json)
Hash identifier:          72rCCb5yNXjNUY4agqLgSLd41UF2H239bb3NQdp/Fis=
Subject key identifier:   FD:D5:8D:76:21:66:0C:6C:BC:E9:5F:4A:F7:6C:54:EB:B0:C3:2C:4C
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584A84124CDEB43148589AC9CF70
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4419fb65-2457-3093-8790-33acd058af32.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     30036
IP address blocks:        2604:2e8a:bc00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:4c:de:b4:31:48:58:9a:c9:cf:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=b821abe8-28ff-4534-8c7f-c7eacf7bcc12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:40:8f:c3:d2:9b:7c:ff:d6:32:3a:77:1b:54:
                    b0:1d:b5:3a:d0:ad:1b:77:d5:14:57:cb:cb:c6:33:
                    2e:0f:a3:54:e1:1b:76:dd:95:41:b4:f7:2c:62:4b:
                    ff:ed:7b:ea:39:50:f1:64:e1:df:f6:98:49:2a:e9:
                    ca:59:27:de:43:21:9b:c8:d8:a9:f4:83:34:43:50:
                    79:68:9e:a3:96:44:d2:ad:90:07:b1:73:62:d4:1d:
                    f9:3f:4c:74:38:90:b3:a2:92:35:34:ac:95:1f:16:
                    3b:85:9a:35:fa:60:eb:5c:58:dc:0c:05:7d:c1:7a:
                    6e:6f:e3:7e:5d:33:e8:57:d5:d3:78:fa:ba:36:92:
                    e7:04:e2:95:71:97:a1:50:e3:5e:cc:91:3a:8b:57:
                    00:6d:f3:c6:47:88:42:62:34:9f:2b:7b:c9:1d:b2:
                    2e:74:39:6a:b6:03:78:be:05:80:72:e8:5e:ba:17:
                    6c:ee:48:eb:5f:4c:7f:6c:96:75:9e:aa:51:4d:ca:
                    ad:4b:2e:89:8f:af:96:77:89:29:f5:32:69:13:d0:
                    8f:20:19:d9:c2:5b:c6:8b:19:2e:c2:85:9b:aa:9b:
                    b1:61:76:96:90:d5:25:2b:b9:b0:ec:5f:45:f2:9c:
                    d4:07:e0:db:6b:75:20:9e:5d:62:74:90:0c:4e:61:
                    9d:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:D5:8D:76:21:66:0C:6C:BC:E9:5F:4A:F7:6C:54:EB:B0:C3:2C:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4419fb65-2457-3093-8790-33acd058af32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8a:bc00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:5d:0b:cd:e8:3b:0f:8d:ea:d4:ec:c3:61:0c:f1:d2:96:0e:
         b7:77:2a:9c:be:54:ab:29:07:07:84:a1:fa:aa:40:e7:1f:9a:
         61:ff:78:ec:e5:02:35:c9:4a:c3:1a:bf:36:6d:90:c8:ff:8f:
         7b:82:72:82:3c:5a:a2:30:75:6b:f6:9c:0e:7e:52:f8:91:eb:
         32:35:c0:4a:9e:53:69:1e:c9:b8:4a:dd:fc:d1:e2:24:0d:79:
         c5:c5:13:8a:7c:4b:43:f2:7f:8b:bc:26:cc:e5:88:70:f9:bf:
         85:48:88:40:d1:3d:bb:d2:bd:87:26:31:4a:ae:a8:13:3a:74:
         8a:ec:23:8e:09:67:6c:f0:f2:5f:3b:d4:5a:1b:37:68:ba:13:
         f7:50:f7:14:61:0a:13:11:d2:46:31:67:cc:17:4e:7d:79:7a:
         88:eb:93:3a:62:d3:95:ae:3a:99:96:db:6d:f5:f6:02:e0:42:
         de:9d:6d:a7:36:9b:da:a7:d1:9f:2a:03:86:1e:e8:f6:0a:60:
         73:20:49:40:9e:b0:b5:f2:09:f4:6a:1c:9e:ab:32:7c:ff:93:
         2f:d5:f5:c5:f6:17:e9:0d:3d:85:8c:5e:88:7a:77:80:ab:f6:
         c4:21:3b:21:03:71:90:7f:3c:3d:4e:f5:dc:0f:d1:c6:67:56:
         d5:43:a2:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:21:56 2025 by rpki-client