Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/55faf23e-db71-3a98-a34c-c0e180b980fc.roa
File:                     55faf23e-db71-3a98-a34c-c0e180b980fc.roa (raw, json)
Hash identifier:          PKV2pdelDZ6CODcVTUoQ241b/s79G7C+wcBAcgoPGjA=
Subject key identifier:   98:4D:B1:41:AA:33:E3:17:50:08:DC:3E:55:3F:41:EE:B0:E6:61:B8
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584A81462EDD8C705DFACBA78400
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/55faf23e-db71-3a98-a34c-c0e180b980fc.roa
Signing time:             Sun 13 Jul 2025 13:01:03 +0000
ROA not before:           Sun 13 Jul 2025 13:01:03 +0000
ROA not after:            Sat 11 Oct 2025 13:01:03 +0000
asID:                     19905
IP address blocks:        2604:2e8b:ec00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:81:46:2e:dd:8c:70:5d:fa:cb:a7:84:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jul 13 13:01:03 2025 GMT
            Not After : Oct 11 13:01:03 2025 GMT
        Subject: CN=8b785ceb-24ca-450e-a178-36cc46482393
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:53:c5:34:a2:b6:41:b9:ba:9a:55:c4:7b:9a:
                    89:b4:a1:19:61:02:7b:8a:0f:22:5d:7e:d3:3a:71:
                    e2:93:89:2f:99:6a:0f:0f:e5:7d:11:ca:96:1e:34:
                    64:8f:96:16:90:6a:bd:d4:71:d6:16:14:fd:6e:6b:
                    7d:00:28:3f:03:82:61:e8:1c:8e:84:c4:0f:b2:ec:
                    d0:bb:36:11:5e:1b:7c:43:0e:b1:e9:34:40:bc:63:
                    d4:6e:13:2b:f1:57:7a:d8:da:f2:ce:b2:78:26:1a:
                    d1:d8:60:8b:91:33:0f:04:0a:fd:c0:b9:7a:6d:5e:
                    c7:00:33:c2:2e:56:33:55:34:36:b9:39:65:be:8e:
                    dd:e8:98:28:87:47:d8:56:a1:cb:39:f5:59:a4:78:
                    34:53:c5:5d:ec:bc:ad:80:e4:d7:09:2a:35:2b:ea:
                    07:8b:e5:3b:41:20:c1:19:41:a6:19:fd:95:1c:7b:
                    0e:f6:28:4b:5a:a1:64:39:0e:3a:f0:f4:5e:84:df:
                    79:47:2f:2e:28:6f:02:d0:e8:9b:4c:f9:19:d0:31:
                    9a:5c:a1:8a:e4:b1:d8:ad:91:cc:a2:f0:a9:39:90:
                    9f:90:3a:73:43:19:28:ed:ac:69:76:80:eb:bb:cb:
                    e8:13:1d:30:4c:b2:17:ef:ca:74:a6:2b:0b:cc:a2:
                    91:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:4D:B1:41:AA:33:E3:17:50:08:DC:3E:55:3F:41:EE:B0:E6:61:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/55faf23e-db71-3a98-a34c-c0e180b980fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8b:ec00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:d2:e7:ea:ed:8e:00:22:65:fd:61:db:34:02:42:af:46:0b:
         ab:d3:d4:9d:e7:86:e9:8a:fc:9c:46:d2:fb:60:d5:82:ac:fb:
         32:ee:c4:a0:ce:65:90:ec:0d:92:a0:e7:a6:db:de:62:a8:a3:
         07:d5:08:39:ac:e6:7a:9f:5c:64:b9:dc:95:bd:85:1d:41:8c:
         23:0e:c3:fd:d3:1c:b2:91:dc:7b:a6:ce:f5:10:0f:df:f3:a0:
         a1:c3:43:d2:02:2e:58:dd:60:ca:8d:77:89:7e:e9:fe:fd:c0:
         9b:81:93:00:8a:14:d3:c0:d8:e8:32:29:99:8d:4f:b1:bd:28:
         22:7a:07:37:8d:58:fe:1c:9a:9e:72:a4:39:84:b4:ab:f5:77:
         10:ea:73:34:49:0d:75:8a:e4:f0:60:b5:41:8c:7c:56:d4:da:
         77:88:7c:97:7a:6d:07:61:ae:ee:24:72:85:ad:b1:10:9a:75:
         cc:b9:ca:aa:5a:8e:3d:7b:1f:5b:6a:de:a7:e5:28:19:dc:f8:
         c5:ba:e4:8e:3e:a7:ab:3b:15:3e:f5:12:52:df:6b:60:97:8f:
         8c:85:83:a8:af:33:b9:90:05:13:ce:0a:7d:ba:dc:20:7b:d6:
         1e:ad:e8:ba:29:37:54:18:cb:fb:72:e6:fb:73:30:63:c6:b4:
         75:3e:57:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:11:50 2025 by rpki-client