Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0fdd346f-efc1-369d-b7c9-9bef94ebf0c0.roa
File:                     0fdd346f-efc1-369d-b7c9-9bef94ebf0c0.roa (raw, json)
Hash identifier:          SIziJWEKwES158GJNLf9oUx9krLRGZCMnRL0q7deBEQ=
Subject key identifier:   BC:4A:5A:80:59:4D:02:3C:B8:A3:7F:39:38:FB:B4:41:79:F9:B9:51
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584B56D7234D51C756701EF421A0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0fdd346f-efc1-369d-b7c9-9bef94ebf0c0.roa
Signing time:             Sun 28 Sep 2025 01:00:33 +0000
ROA not before:           Sun 28 Sep 2025 01:00:33 +0000
ROA not after:            Sat 27 Dec 2025 02:00:33 +0000
asID:                     30036
IP address blocks:        2604:2e88:5400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:56:d7:23:4d:51:c7:56:70:1e:f4:21:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Sep 28 01:00:33 2025 GMT
            Not After : Dec 27 02:00:33 2025 GMT
        Subject: CN=2b58c5d4-ba80-44ba-bc30-49d6ad166439
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:27:c3:2f:92:66:12:2f:6c:61:b6:87:c8:41:
                    38:84:55:63:81:89:79:eb:45:18:85:1f:17:c9:53:
                    92:e0:b3:1a:3b:c4:03:75:45:d3:d2:ac:a6:ac:98:
                    98:e8:da:4b:54:f3:4f:24:93:88:7e:02:dd:91:7d:
                    2b:3a:e0:e5:a0:0e:01:e0:0f:e4:89:82:1c:93:7e:
                    ae:82:ad:5c:d2:15:6f:be:8f:cd:a8:4f:e6:b6:d4:
                    c8:bc:86:ee:f9:d5:46:53:69:ea:17:22:0d:5e:a2:
                    fd:32:f9:65:ff:2b:95:2f:ee:95:2f:b7:fd:58:24:
                    1f:65:7a:e7:35:c9:41:12:8a:35:b9:db:7c:0a:10:
                    3b:07:71:74:94:79:78:83:8e:66:15:20:fe:ea:13:
                    05:e8:8d:42:14:ec:0b:c7:cc:a3:54:e0:be:65:06:
                    6a:78:2d:be:a6:5b:88:68:ea:85:ac:bc:05:96:c4:
                    fb:6b:71:ec:66:2a:85:d5:7e:dd:89:ff:c3:71:a2:
                    b3:5f:4b:68:0e:40:d1:2e:22:da:d0:08:de:88:11:
                    20:39:3e:d9:e0:8d:40:4b:58:55:52:ab:f4:81:6a:
                    31:6b:25:19:ce:3f:53:4e:19:12:f6:e5:5c:d5:50:
                    cb:2a:e3:25:aa:d8:d9:f3:35:c1:d2:2f:ac:2a:3f:
                    9b:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:4A:5A:80:59:4D:02:3C:B8:A3:7F:39:38:FB:B4:41:79:F9:B9:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0fdd346f-efc1-369d-b7c9-9bef94ebf0c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e88:5400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:af:a2:3d:ff:0f:c6:b4:30:47:dd:a6:f9:f2:ac:d9:bf:06:
         a8:8e:03:43:3a:68:5c:4e:8e:57:a5:b3:72:f3:74:b2:9f:82:
         e1:87:5d:a6:b1:0e:35:bd:98:33:82:e1:82:11:8a:55:f8:6e:
         46:12:b7:c5:3b:0e:ac:e2:60:c8:ee:6d:d2:b9:13:48:8d:ea:
         4a:cb:3f:7a:da:5e:48:2c:69:80:63:46:6f:5f:f9:da:59:4b:
         80:bb:6f:c8:2f:b3:22:68:99:13:48:61:60:ab:0a:b7:02:82:
         44:31:75:7b:9c:4e:d2:68:7d:3a:e7:b7:ef:b6:04:42:f8:ad:
         e2:5f:1c:7c:73:89:0e:74:e6:e8:46:19:a3:fa:98:c2:c6:04:
         39:0b:1e:a6:af:d6:9e:09:2c:3f:47:d2:ef:13:85:6b:59:14:
         67:26:da:cf:e1:f6:3f:51:92:5c:2c:2b:1e:e7:37:f3:f2:46:
         43:b3:7e:cb:ef:ac:c0:1f:cd:92:b2:29:65:4a:7f:cf:83:b6:
         ee:cc:e5:3b:0c:08:f1:9f:1a:49:f7:64:65:c1:8e:e0:e8:4b:
         18:be:00:08:89:0a:cd:59:fd:9f:ee:75:c7:7e:d5:c9:e2:42:
         58:c2:31:56:84:57:a1:5f:c7:4b:dd:3d:f7:02:43:a5:7b:23:
         f0:7b:a1:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 07:18:07 2025 by rpki-client