Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/85117a90-fbc2-31b0-a147-5e7433717d49.roa
File:                     85117a90-fbc2-31b0-a147-5e7433717d49.roa (raw, json)
Hash identifier:          44x/q8VFHajVlQQAtMlRlV6C17Jwf7WGtSmudQqzZEo=
Subject key identifier:   F3:98:FD:01:DC:75:23:BC:88:F8:70:B9:04:52:89:C8:E1:EC:EB:E1
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584BA7CD1C2F7D58D3EB3CDEF500
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/85117a90-fbc2-31b0-a147-5e7433717d49.roa
Signing time:             Mon 27 Oct 2025 01:00:31 +0000
ROA not before:           Mon 27 Oct 2025 01:00:31 +0000
ROA not after:            Sun 25 Jan 2026 02:00:31 +0000
asID:                     19905
IP address blocks:        2604:2e87:9000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Nov 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a7:cd:1c:2f:7d:58:d3:eb:3c:de:f5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Oct 27 01:00:31 2025 GMT
            Not After : Jan 25 02:00:31 2026 GMT
        Subject: CN=44e2218f-6992-4490-9fa8-fe7fac687614
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:a4:78:89:ed:68:c7:e7:8b:26:00:4c:b7:5f:
                    62:59:c1:aa:ce:52:4c:3f:72:1f:1f:b0:e2:dc:69:
                    a6:87:c0:dd:81:c6:b1:1c:ec:9b:79:1b:8d:38:05:
                    25:5e:8f:44:6f:49:f8:a8:40:61:0b:89:22:c2:7a:
                    bf:60:0d:40:49:5b:66:24:ff:0f:60:cb:9c:10:77:
                    df:f2:1e:e6:e3:49:32:72:2d:39:f3:8b:ab:af:78:
                    76:51:54:d9:8c:53:f2:1e:99:d3:be:08:78:d0:8c:
                    ef:8d:b4:11:9c:d4:84:e8:d7:79:3c:4d:e6:ce:3b:
                    ed:f4:41:55:5e:2e:c7:ca:c5:2a:4e:ac:88:cd:22:
                    c4:28:55:07:6c:0f:5c:ed:3e:ed:78:fd:0f:7b:2c:
                    e5:2f:57:5c:7a:b2:cc:f7:d2:17:83:b8:5f:ca:9b:
                    5b:d2:e8:16:94:e9:e1:bc:d6:07:4d:67:9a:35:1d:
                    7e:af:57:76:a6:5f:4f:35:00:e6:dc:8c:e8:f9:9b:
                    0f:ed:71:60:cb:88:df:39:9c:d8:11:90:81:b6:b9:
                    77:3a:c3:9e:f1:9c:3e:5d:e5:ec:1e:5a:c1:83:40:
                    79:ef:22:da:00:3c:5e:ba:f1:e6:04:2c:e2:96:51:
                    85:26:03:74:8e:2b:26:99:c3:bd:1a:ea:12:55:ac:
                    99:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:98:FD:01:DC:75:23:BC:88:F8:70:B9:04:52:89:C8:E1:EC:EB:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/85117a90-fbc2-31b0-a147-5e7433717d49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e87:9000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:d0:cf:36:ef:0d:af:4e:b7:a0:f5:0a:2f:0f:cf:63:58:54:
         3a:7b:55:ab:d7:17:3c:74:8a:85:82:b6:4f:a3:ed:b6:cb:f9:
         71:8b:76:01:ed:81:fd:99:17:cf:ec:bb:89:75:40:bb:63:23:
         f4:8a:c4:b7:39:2f:2e:ef:f2:8a:c2:bc:ce:cb:7a:c0:62:63:
         0e:2c:30:a3:79:4e:05:26:6a:4c:d3:42:07:0b:c4:bc:98:99:
         d3:03:fc:35:62:a9:18:74:e2:91:9f:c5:d3:6d:2d:63:bb:c4:
         ce:e8:43:12:56:33:73:de:1e:33:1c:a7:67:43:71:1c:93:bb:
         41:93:e4:24:b0:84:68:97:8b:eb:f9:68:14:d3:cf:b1:a1:3e:
         11:a9:fc:06:48:75:04:5b:9c:2f:3a:10:c4:30:c3:d8:88:ad:
         57:62:ea:d4:45:fc:ab:f1:b2:f3:1c:5c:2b:45:28:bb:fe:53:
         23:fd:5b:a3:7f:2d:05:d8:56:12:0a:ef:f7:6d:27:99:b5:0c:
         ab:0a:14:b9:54:a7:28:1a:a4:37:16:ce:d0:cf:b4:c6:19:51:
         df:05:37:e7:35:16:16:1c:68:23:57:fe:5d:85:ea:00:7a:0c:
         ce:66:99:ca:dc:a0:12:66:7a:50:4e:79:69:d3:c7:48:03:ac:
         8e:bc:ad:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:01:22 2025 by rpki-client