Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/04ab4809-41be-3c40-91c1-3979cabaae5c.roa
File:                     04ab4809-41be-3c40-91c1-3979cabaae5c.roa (raw, json)
Hash identifier:          pWFIyCCr/Jb9adVOFnVnFdu7xsqvaU87Flt/qDxNtWM=
Subject key identifier:   E4:EF:07:54:81:5A:D1:05:00:00:0E:0A:92:36:42:39:80:BE:D7:81
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584B475D1A2B1A354D89D07CB300
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/04ab4809-41be-3c40-91c1-3979cabaae5c.roa
Signing time:             Mon 22 Sep 2025 11:57:41 +0000
ROA not before:           Mon 22 Sep 2025 11:57:41 +0000
ROA not after:            Sun 21 Dec 2025 12:57:41 +0000
asID:                     19905
IP address blocks:        2604:2e8c:8000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:47:5d:1a:2b:1a:35:4d:89:d0:7c:b3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Sep 22 11:57:41 2025 GMT
            Not After : Dec 21 12:57:41 2025 GMT
        Subject: CN=3952a858-8825-4862-8e34-b585acc1304b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:30:72:4c:b7:7c:c9:23:1e:ee:d6:c4:0f:fa:
                    ff:3e:c1:72:76:08:ff:d6:c1:79:11:64:a7:d5:20:
                    50:1f:1d:0d:74:37:bf:ed:0f:28:15:8f:b2:e6:6d:
                    10:b2:f8:b4:38:e1:24:8a:6f:f0:17:f9:1e:4d:9c:
                    37:00:f1:22:3d:cb:53:af:7e:ce:b4:e9:cf:b2:04:
                    4b:ed:c2:d1:f7:20:e5:79:4a:0e:5f:2c:20:74:47:
                    e2:5f:66:e5:d8:d1:64:16:22:0f:4e:df:25:0b:f1:
                    ce:a0:83:73:dd:91:93:27:fe:74:a4:92:c7:68:8a:
                    4c:71:55:63:9f:d4:5f:d1:0d:ec:c2:fd:86:fb:0e:
                    d9:79:6b:28:26:16:20:fa:53:3a:73:df:95:4d:b8:
                    8a:73:1e:3d:90:53:7c:30:e9:aa:53:cb:6b:27:3e:
                    5a:87:e6:a8:ca:00:f9:7a:5b:16:c0:08:7c:78:b3:
                    96:c3:de:ae:bc:20:14:12:54:6f:20:0e:ae:d0:ad:
                    46:9f:d8:db:35:d7:75:30:7d:e6:ac:57:1c:cd:17:
                    68:c5:34:34:24:2e:8e:51:2e:f1:71:3d:f5:10:ef:
                    f3:6d:8a:ae:be:7f:09:c3:86:a5:ae:8c:44:dc:e2:
                    e1:1f:40:f3:f4:cb:04:7c:be:4c:a1:d7:7d:12:b4:
                    96:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:EF:07:54:81:5A:D1:05:00:00:0E:0A:92:36:42:39:80:BE:D7:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/04ab4809-41be-3c40-91c1-3979cabaae5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8c:8000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:22:e6:de:58:f8:8f:4b:0e:a1:80:13:56:0b:4b:21:5e:b6:
         d0:ab:cf:e8:2d:1e:72:cd:5e:76:96:32:57:42:69:04:54:e3:
         73:be:86:37:a1:a4:a5:d0:22:36:8c:88:03:4e:9c:30:ca:14:
         9c:40:8e:b0:d1:47:b9:bd:96:00:0a:34:4f:a5:29:08:db:54:
         fb:df:68:fa:d9:a1:65:8d:6d:96:50:81:19:18:bf:c4:05:5c:
         af:16:14:10:e8:8e:3e:f4:6a:3e:05:44:5f:3d:ca:01:c5:de:
         13:d5:26:50:60:05:68:26:31:b3:4a:d7:58:37:fd:95:90:6f:
         48:e0:15:35:13:17:37:ef:36:e4:45:ef:d1:e3:a7:cd:48:c5:
         9e:5c:ef:fa:e1:f6:8e:84:4c:43:24:e6:39:d8:4e:bc:fe:1b:
         d2:19:92:75:24:d0:83:82:62:12:d5:70:cc:bd:c4:96:5e:d4:
         d1:7b:e1:33:a0:c1:44:e4:51:85:bd:4b:d9:08:2b:7b:ce:27:
         de:72:25:cd:d2:6a:4a:52:64:1b:cb:73:f4:76:39:3b:7e:d8:
         b4:7a:23:53:5a:78:12:ae:c6:8c:56:13:a9:52:e1:0b:c1:cd:
         63:25:86:1b:d3:a1:f0:6f:99:77:9e:ea:71:a3:02:f4:d5:cd:
         b4:c8:9a:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 07:11:36 2025 by rpki-client