Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1d78a97c-7fe3-360b-ad9d-22c9c6cf9c81.roa
File:                     1d78a97c-7fe3-360b-ad9d-22c9c6cf9c81.roa (raw, json)
Hash identifier:          28JHuTWNkzFu7l39PluoOPrPQC9jDPtAxYcjpUzO+TQ=
Subject key identifier:   5B:E7:28:3D:0D:C9:24:3A:0B:BB:DF:3C:23:71:CB:5D:8A:22:8C:94
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584B64CE41A7023A10C170C27200
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1d78a97c-7fe3-360b-ad9d-22c9c6cf9c81.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     30036
IP address blocks:        2604:2e8a:e400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:41:a7:02:3a:10:c1:70:c2:72:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=b143eaf5-cddb-4be9-876a-87f7ffe30ebe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:bf:6e:1c:b4:fa:8b:aa:6e:49:1c:7f:7a:b6:
                    07:a9:d3:40:bd:08:9a:84:5c:e1:04:ba:7c:14:1b:
                    3e:94:f2:1c:2a:30:d7:dc:14:91:df:6f:57:8d:c9:
                    42:1c:79:7f:99:27:e2:f5:8e:22:1b:fa:d1:ea:9f:
                    50:aa:29:a8:8e:69:84:3d:59:92:fe:bb:ee:75:47:
                    df:8a:ec:9a:25:4b:1d:54:20:1d:77:55:85:fa:0c:
                    47:16:eb:de:ce:89:20:3c:b3:c6:6f:ac:e9:12:66:
                    b2:e6:a0:07:98:8c:81:78:1c:be:8d:ba:17:15:af:
                    3b:06:0f:0b:f4:11:6e:80:a8:a2:56:4e:1f:28:8a:
                    c1:bc:00:4d:64:65:81:d3:e3:e3:ea:31:68:fc:bb:
                    9f:79:78:87:6e:43:2a:93:a0:26:a9:af:0a:fd:46:
                    2a:f4:62:37:8e:a5:2a:f0:04:32:f8:ef:64:fc:d5:
                    c9:fb:dd:9b:d7:a7:15:34:01:15:84:10:3c:64:e5:
                    7c:ed:0f:b7:0e:a2:38:f0:c6:c2:09:7d:f5:de:e6:
                    29:97:56:b8:77:7a:ca:15:8e:53:3e:e6:f0:9f:b6:
                    f5:5d:2b:38:e8:79:33:8a:95:6b:2f:f5:17:f3:9c:
                    02:3b:d5:2d:e1:97:2f:c6:ca:a0:fc:79:70:ad:48:
                    16:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:E7:28:3D:0D:C9:24:3A:0B:BB:DF:3C:23:71:CB:5D:8A:22:8C:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1d78a97c-7fe3-360b-ad9d-22c9c6cf9c81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8a:e400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:93:14:35:67:45:13:b9:77:78:01:4d:62:f3:16:a2:9b:a6:
         80:e8:c3:ec:f8:82:3b:4f:6a:bc:ea:1b:74:7a:0d:7b:1b:bc:
         81:26:b9:04:de:e1:ca:22:78:25:6b:4d:f0:f0:1f:4f:b0:2d:
         82:2e:bb:c7:b2:ae:48:38:46:b4:2d:74:d6:be:ea:14:09:77:
         cf:ed:9c:3d:fc:ba:db:72:a9:a1:92:b7:4f:31:2a:84:18:97:
         88:a9:f1:1f:8c:18:06:d3:ba:66:55:f9:af:d2:79:21:e0:7f:
         22:83:c2:02:69:01:3c:61:cf:1d:96:11:79:f6:49:be:0d:cc:
         02:bd:55:f6:9e:80:46:7a:d2:0d:c1:cd:58:af:65:5d:8f:1d:
         5c:71:fb:59:eb:8d:0f:38:62:31:2e:a1:40:77:98:93:34:2f:
         6f:80:0e:84:0c:8e:9e:19:56:a4:a5:94:57:e0:60:fd:e3:d3:
         df:4a:40:85:e5:53:e4:67:80:84:dd:83:3d:67:71:ed:c0:60:
         b7:06:0e:54:09:26:4d:8e:b6:8e:f0:0c:84:07:8d:0e:25:b2:
         5a:f5:0d:f0:e3:a8:fa:28:0d:31:d8:a8:d0:98:67:dc:ef:b3:
         a5:18:78:3f:ab:df:1e:53:6e:74:01:9f:9a:6a:be:3c:e6:04:
         ed:33:86:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 07:12:36 2025 by rpki-client