Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/adcb7057-bc5b-329c-860e-d339f75db840.roa
File:                     adcb7057-bc5b-329c-860e-d339f75db840.roa (raw, json)
Hash identifier:          vjclrOZwHZe/xK8Q3dlob5jusW3B6VOgP1F7CYyF4us=
Subject key identifier:   BD:A4:65:A1:02:97:E1:0D:46:F5:BE:D9:0C:CE:BF:EE:20:17:36:98
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584AA42B735AE4E33E2771CAD500
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/adcb7057-bc5b-329c-860e-d339f75db840.roa
Signing time:             Sat 26 Jul 2025 01:00:49 +0000
ROA not before:           Sat 26 Jul 2025 01:00:49 +0000
ROA not after:            Fri 24 Oct 2025 01:00:49 +0000
asID:                     30036
IP address blocks:        2604:2e87:1800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a4:2b:73:5a:e4:e3:3e:27:71:ca:d5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jul 26 01:00:49 2025 GMT
            Not After : Oct 24 01:00:49 2025 GMT
        Subject: CN=ceb23dca-801d-4632-9963-73788928aaf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e6:8c:92:08:51:ae:04:fb:ef:04:22:a7:a2:
                    c6:f1:d2:2a:ea:99:59:30:5f:cc:56:36:fd:40:8e:
                    c5:65:8d:40:c4:3f:7a:68:fe:2d:e0:28:41:03:71:
                    1c:ce:0b:d1:ab:1b:38:98:f1:ad:e6:b6:dd:40:d8:
                    84:8e:2b:af:54:84:27:39:5b:1e:be:c9:4e:35:cc:
                    eb:a9:c7:0f:cc:20:f0:51:a6:36:db:68:10:6e:77:
                    22:ec:df:90:68:fa:a2:bd:cf:d3:09:c4:62:ff:6d:
                    f5:a4:74:95:c4:5e:85:08:98:e0:b3:89:4f:b5:54:
                    f2:68:41:c1:0b:dd:27:19:29:e9:a6:fe:a5:cd:1b:
                    09:46:38:26:4b:81:e2:32:b2:6a:7f:70:d7:a6:c3:
                    66:a8:c7:ad:c1:e8:52:de:eb:49:d2:3f:41:2b:f2:
                    28:22:d6:ce:b4:33:b2:c5:45:aa:12:ba:10:25:3d:
                    67:f2:9e:48:ae:1b:fd:1f:1b:5d:b4:fb:90:18:f2:
                    a0:b1:b8:17:72:0f:6c:e4:90:ad:2e:d3:0e:05:9e:
                    f6:6e:01:4c:74:f6:15:a8:6e:a0:14:5d:83:66:0b:
                    0f:b4:48:eb:b2:83:3a:3c:f5:73:f4:08:1b:09:f8:
                    3d:6e:79:60:83:a7:17:c2:e6:5d:7e:83:5d:56:62:
                    49:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:A4:65:A1:02:97:E1:0D:46:F5:BE:D9:0C:CE:BF:EE:20:17:36:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/adcb7057-bc5b-329c-860e-d339f75db840.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e87:1800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:77:36:ab:92:e9:2a:f0:33:a2:6d:d1:a5:7e:b6:1c:cd:51:
         8a:40:75:3f:97:65:ce:16:97:9c:8f:6f:db:4c:cd:54:3a:26:
         a0:18:58:15:e1:da:15:19:63:ad:49:56:58:cc:ea:7f:41:1f:
         ce:f8:12:d0:19:3d:d4:68:e3:8b:84:1a:a2:34:42:99:d7:93:
         7d:ca:8f:55:33:74:32:b8:ff:94:83:7a:bd:aa:53:b2:38:2b:
         fd:9f:e0:92:f8:6a:97:ee:40:c5:ad:29:d3:c8:03:a5:5c:b6:
         d5:7c:b6:09:0d:07:38:52:52:c8:47:ec:bd:f7:31:c6:b7:36:
         82:2f:99:fc:8e:50:c9:03:c5:c9:0c:11:8d:60:c2:74:09:75:
         48:43:59:31:96:19:b8:97:15:a4:90:9d:2f:22:1b:4c:d0:c8:
         e4:cc:24:fb:83:4b:e9:c4:28:a0:ae:6a:4f:e3:0b:56:26:a5:
         58:7c:cd:75:a6:d4:11:49:63:83:93:2d:0e:ef:9b:cb:69:e2:
         1a:0a:b2:e7:03:81:c5:00:13:8a:bd:d1:c8:68:74:5e:3d:f1:
         b5:9e:2f:2a:91:30:d3:a6:42:d2:12:a1:9c:01:ef:25:ce:ff:
         95:6a:a3:10:74:be:13:cc:92:bf:98:af:9c:83:42:12:f6:0f:
         6e:e1:f1:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 02:09:47 2025 by rpki-client