Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9f891b01-9cb3-3657-bfc4-7dd870d004cf.roa
File:                     9f891b01-9cb3-3657-bfc4-7dd870d004cf.roa (raw, json)
Hash identifier:          RGWfxgz0ashh6wIi462AWak/upZgSkSuE/rDePSukOs=
Subject key identifier:   85:EB:C5:88:40:51:BB:73:B6:DD:C9:06:58:AC:34:9A:D3:BA:34:5D
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584A86DBFE3731322A0990366280
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9f891b01-9cb3-3657-bfc4-7dd870d004cf.roa
Signing time:             Tue 15 Jul 2025 13:01:04 +0000
ROA not before:           Tue 15 Jul 2025 13:01:04 +0000
ROA not after:            Mon 13 Oct 2025 13:01:04 +0000
asID:                     30036
IP address blocks:        2604:2e8b:2400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:86:db:fe:37:31:32:2a:09:90:36:62:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jul 15 13:01:04 2025 GMT
            Not After : Oct 13 13:01:04 2025 GMT
        Subject: CN=ffb19707-cf1f-40b9-becf-c3f4f33abfd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:ee:be:86:f3:cc:19:17:a5:43:b1:f1:a8:9d:
                    fb:e5:8d:17:90:7e:5b:91:c7:33:a7:04:71:01:35:
                    59:64:2e:e5:9a:df:94:fc:36:c2:c3:15:5c:39:40:
                    7d:1a:19:2c:ae:62:9c:4b:db:2f:f9:8c:66:89:a3:
                    c4:2a:01:dd:d5:5f:d1:9e:7f:fd:38:d6:fd:b7:94:
                    6e:39:eb:f1:73:ba:45:ac:72:29:52:f1:cd:7a:dd:
                    5e:78:c4:ab:59:0c:e2:ab:cc:12:3c:e9:33:a1:27:
                    8d:4f:ae:83:14:ff:36:ac:ea:24:53:83:a0:7f:a0:
                    7b:5c:bb:af:2a:d6:1e:ed:fd:be:8c:75:aa:7d:bb:
                    7e:e9:ee:75:65:c3:07:c2:4f:2b:c5:0b:fc:77:20:
                    69:8d:ab:a9:fe:ca:0e:db:70:3d:b5:2c:6a:73:69:
                    7c:1e:eb:5b:c4:a9:f9:0a:a7:a0:ad:28:6d:92:72:
                    90:96:da:e3:ca:8e:79:4b:db:9c:6f:12:1b:f6:3d:
                    44:ce:04:2a:ae:5b:1f:d1:88:47:dd:e2:fd:6e:cb:
                    4c:a4:e8:f5:aa:b4:25:5c:02:cd:54:b8:cd:eb:1a:
                    03:cd:1f:d9:87:bd:53:d7:5f:b9:0b:3f:96:8d:0d:
                    8e:a4:fe:7d:ee:e5:b6:a7:2a:34:e4:d9:38:5a:f5:
                    0f:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:EB:C5:88:40:51:BB:73:B6:DD:C9:06:58:AC:34:9A:D3:BA:34:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9f891b01-9cb3-3657-bfc4-7dd870d004cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8b:2400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:4e:b3:38:f1:cc:f2:db:9c:57:c8:6d:fe:00:83:41:2a:82:
         f8:5a:db:78:a9:e9:1d:d6:c3:bf:95:c9:70:87:5c:63:5a:4a:
         6b:83:a7:8d:e1:f5:60:22:b9:dd:47:8c:5d:19:9c:0f:4c:60:
         83:6f:4f:d5:ed:10:4e:0c:9a:81:32:8b:90:49:61:85:1f:9a:
         bc:ac:d9:0e:8b:8f:ab:54:dd:44:70:01:96:21:82:1a:65:46:
         c0:e6:d6:55:a5:9d:51:82:43:10:e0:cb:9c:0e:25:d4:3c:eb:
         76:a8:e6:e9:0d:5b:dd:6b:e7:df:48:bf:10:82:6b:bd:c5:28:
         2b:90:fd:0a:22:da:5f:2e:21:24:85:a6:d2:4a:fd:ac:76:17:
         58:fb:5e:ac:b8:bf:16:40:c9:f4:47:b4:f8:6e:38:5c:40:64:
         b5:29:0e:a4:15:24:7f:5e:59:75:84:28:fb:60:be:9f:b8:71:
         6b:02:b7:dd:33:45:d6:58:fa:f1:fc:3f:ae:5a:ae:15:7f:33:
         82:e3:43:91:2a:0a:ab:7e:c3:5a:f3:53:4d:c0:92:53:56:b4:
         0f:be:ff:d8:fa:c8:61:8d:60:5c:b5:85:e3:c8:bf:ec:9e:64:
         3d:f7:89:07:d2:f8:44:b2:73:a4:df:b8:67:5f:5b:16:a0:0f:
         da:e8:2e:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:25:56 2025 by rpki-client