Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/79791f88-d10a-3958-9953-c4d03075024e.roa
File:                     79791f88-d10a-3958-9953-c4d03075024e.roa (raw, json)
Hash identifier:          m8SbI3+Ysi1QeRpotZd0Txj3dpeckbGO+Y7ctreC+o4=
Subject key identifier:   4D:2D:F0:7D:1A:1B:8B:31:AE:E7:86:66:C2:2D:4D:D5:CB:DD:47:01
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584BB45D424D8864D5039963EC80
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/79791f88-d10a-3958-9953-c4d03075024e.roa
Signing time:             Fri 31 Oct 2025 13:00:39 +0000
ROA not before:           Fri 31 Oct 2025 13:00:39 +0000
ROA not after:            Thu 29 Jan 2026 14:00:39 +0000
asID:                     30036
IP address blocks:        2604:2e8c:9800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Nov 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b4:5d:42:4d:88:64:d5:03:99:63:ec:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Oct 31 13:00:39 2025 GMT
            Not After : Jan 29 14:00:39 2026 GMT
        Subject: CN=bc16bef7-9ee9-406c-a3cf-91534b66188c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:18:9e:8d:7b:91:7e:94:3a:50:e2:df:42:cd:
                    19:cb:9a:02:c2:d2:8e:9f:0c:96:02:90:4b:78:a0:
                    da:cc:90:45:75:f0:c3:f6:d3:fb:75:cc:6d:e3:c1:
                    0e:43:74:7c:d2:a2:1c:6c:04:cc:9d:86:fc:3c:4e:
                    c3:c5:fe:82:a1:0d:85:9a:0b:4e:e1:2d:3d:24:ce:
                    23:22:3b:4e:8f:8d:56:17:36:98:f8:3b:88:97:44:
                    ed:77:4f:b6:c1:a8:25:8d:78:d6:47:d4:82:6a:b7:
                    30:dc:cc:79:0b:ce:44:65:fe:95:6a:11:fe:14:a3:
                    f8:99:90:ed:88:f4:88:86:21:49:00:e9:36:67:67:
                    e2:56:1b:de:82:6f:30:40:04:8d:ca:02:31:4d:0a:
                    32:7f:66:6d:a8:f4:07:2c:53:3b:c4:b1:32:1f:0d:
                    d0:59:7d:c0:a8:db:4d:38:4d:71:50:fc:4f:e1:f3:
                    57:a1:c3:66:f4:00:92:60:11:e5:cb:71:36:bc:c6:
                    b5:77:6f:56:06:d5:06:8f:02:0b:84:5c:a2:8a:db:
                    a6:63:d0:4a:eb:b5:82:18:0e:ff:20:ef:e6:ef:09:
                    78:25:3b:1a:3d:2f:49:d9:ad:bc:8d:03:6b:ba:df:
                    28:7d:d2:0e:05:0c:68:52:fb:48:ec:4f:5a:d7:4c:
                    c1:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:2D:F0:7D:1A:1B:8B:31:AE:E7:86:66:C2:2D:4D:D5:CB:DD:47:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/79791f88-d10a-3958-9953-c4d03075024e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8c:9800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:fe:55:cc:f8:01:46:17:b5:36:70:aa:de:88:50:7e:1a:11:
         e9:ad:36:c3:70:a8:13:57:6a:fa:ca:af:20:ef:c1:8e:67:f8:
         7d:70:e6:3b:e0:59:eb:16:62:6d:11:a3:e0:ca:57:e2:a2:bc:
         1a:3e:53:bb:f6:c9:d7:a9:73:b5:a8:eb:be:ad:28:c8:52:6d:
         a7:ef:e4:03:3d:13:6d:01:ea:c1:dc:c6:25:76:35:40:66:fb:
         d4:7a:e0:50:c1:ed:22:54:37:05:8b:55:f1:e9:49:2c:0c:d2:
         38:74:25:04:23:89:5e:91:54:31:34:d3:0f:3e:db:d9:42:54:
         0e:ee:9d:ae:29:5a:6b:11:3c:2a:af:48:b2:2d:c0:e6:28:f1:
         f9:e5:38:d0:7a:a7:c9:e4:74:a9:93:4a:70:ca:88:d2:0a:eb:
         2b:ce:ec:a9:05:5a:ac:f1:a1:a3:53:2a:b6:1e:a0:a0:b1:85:
         83:72:b0:68:97:40:70:ea:53:f8:08:86:6a:1a:3c:c2:17:30:
         bc:0f:67:c6:cf:d1:f1:c2:10:96:a5:d1:a9:94:51:ba:b2:6b:
         4d:c5:10:45:ed:f7:f1:66:a1:ba:8b:09:73:cf:c1:78:50:ba:
         93:aa:52:56:04:bf:82:0d:85:a4:e7:87:9c:ed:81:9e:d5:e2:
         a9:fe:1b:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:33:27 2025 by rpki-client