Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/19f9b13f-f970-30b5-bfde-e53e66509d1d.roa
File:                     19f9b13f-f970-30b5-bfde-e53e66509d1d.roa (raw, json)
Hash identifier:          oLCd9gRPMZmDT46rPWaDD1Nzj9OknzZCcr4oGv/nMQI=
Subject key identifier:   82:49:E6:43:86:90:70:9A:80:1F:B7:7F:72:7A:50:FB:58:7D:67:6A
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584B26264C9388F86BDFD6DFE600
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/19f9b13f-f970-30b5-bfde-e53e66509d1d.roa
Signing time:             Wed 10 Sep 2025 14:25:35 +0000
ROA not before:           Wed 10 Sep 2025 14:25:35 +0000
ROA not after:            Tue 09 Dec 2025 15:25:35 +0000
asID:                     19905
IP address blocks:        2604:2e80:400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:26:26:4c:93:88:f8:6b:df:d6:df:e6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Sep 10 14:25:35 2025 GMT
            Not After : Dec  9 15:25:35 2025 GMT
        Subject: CN=fb76af84-e4bd-4d8e-a9ff-13cea124d24e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:cc:66:c9:00:14:30:f7:23:17:06:7f:83:5b:
                    ac:2e:ee:6e:d5:5a:d9:cc:76:2b:a6:09:11:40:40:
                    c7:ea:ca:85:6a:c7:44:7f:2d:b6:fb:e9:08:ed:de:
                    94:a6:83:3f:a5:9d:eb:ab:90:e2:f9:49:ef:fc:72:
                    2a:64:bd:3f:d7:3f:84:30:85:98:01:b0:b8:95:7e:
                    ce:a5:f8:de:90:6a:21:fc:6b:26:c8:65:46:77:d1:
                    b0:d8:75:8c:f1:89:78:45:98:73:5e:96:a5:99:7f:
                    ec:ba:cd:16:91:30:da:5c:72:68:f3:31:83:3a:dc:
                    b0:9f:47:0b:e0:e6:bf:60:ce:45:31:45:37:9e:4a:
                    cb:0a:16:76:a3:9c:bd:2b:d6:8d:97:a1:71:88:aa:
                    c6:0c:ef:6d:fd:01:f1:60:21:f9:14:78:1f:21:39:
                    3c:3b:f9:09:5f:19:01:3e:7b:fc:d6:f7:95:ce:fc:
                    98:bb:9c:99:a7:5e:c5:15:3c:a7:ec:42:21:4c:0a:
                    e1:42:7a:0b:4d:ad:e5:ea:e4:d1:88:bb:9e:87:38:
                    5b:a0:41:72:21:ed:51:20:f0:c4:80:7c:d3:ff:b7:
                    94:30:eb:c0:71:e9:8a:cb:89:42:b4:ea:2a:37:be:
                    64:ad:46:6c:f8:b6:b8:0c:e5:50:d7:be:31:47:e0:
                    84:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:49:E6:43:86:90:70:9A:80:1F:B7:7F:72:7A:50:FB:58:7D:67:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/19f9b13f-f970-30b5-bfde-e53e66509d1d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e80:400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:e8:01:87:c3:49:bb:ad:c0:2b:56:2c:cc:6a:55:07:d7:40:
         ba:1c:97:f7:14:f1:57:20:fa:a5:dd:13:a6:4f:42:d2:0a:37:
         e0:ca:a0:2d:88:d4:d3:52:7b:ed:6c:f5:20:a1:49:14:3e:60:
         01:b9:93:a0:ef:b4:3f:cc:1e:55:4e:ef:7a:5d:f8:f1:9d:43:
         4d:1d:9d:c5:0e:82:b3:c9:6d:27:27:a6:fc:0a:f9:c4:19:21:
         31:91:97:7e:97:02:4a:bf:65:1a:7a:a5:19:da:d2:0b:52:da:
         7e:40:ff:c2:7f:f9:e5:27:0e:53:cc:d1:3c:68:27:9e:c2:fc:
         7b:e3:dd:e5:77:02:de:46:0b:78:23:6d:d4:c5:33:b4:1c:d6:
         4d:33:ab:62:80:ed:27:54:08:0c:3f:ed:5b:6b:22:8f:9a:48:
         96:8d:99:4e:d0:cd:70:ec:37:3a:be:13:5c:0e:5b:23:d5:45:
         c0:ae:1a:4e:26:b9:11:41:0d:d7:bd:34:e6:c2:13:a4:bb:90:
         e0:11:d3:6d:86:d1:89:33:23:64:d2:79:25:9c:72:1b:9c:4c:
         0f:b4:cc:1a:b6:c6:b6:a1:54:6c:f8:43:70:77:05:46:64:51:
         3e:bf:6b:1d:5a:a9:05:82:31:49:4a:fb:44:0a:24:03:cd:62:
         95:d4:69:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 07:11:40 2025 by rpki-client