Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/28bdc1a3-6ee6-3d23-bb7f-67e2b8a179c7.roa
File:                     28bdc1a3-6ee6-3d23-bb7f-67e2b8a179c7.roa (raw, json)
Hash identifier:          PXC34gva3Y3gG4pFB8mc9Qb/zEzycKY3luP71tfSC1o=
Subject key identifier:   28:9E:25:F3:E2:4C:FA:FD:8B:64:15:21:57:57:4B:C3:5B:48:7A:CD
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584B64CCA1D91641F5EFAA8F3C20
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/28bdc1a3-6ee6-3d23-bb7f-67e2b8a179c7.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     30036
IP address blocks:        2604:2e8a:7800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cc:a1:d9:16:41:f5:ef:aa:8f:3c:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=7853d525-6d67-4f28-9029-560e33e5c557
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:67:74:ca:de:61:53:cb:57:34:b0:cc:2b:38:
                    fd:12:15:6b:23:99:d7:8f:8f:82:e3:90:c5:22:8d:
                    dd:b1:48:63:5a:ab:bc:06:11:3d:09:4a:9e:85:90:
                    3a:09:94:29:d4:d6:49:26:e3:dd:d8:8d:70:e7:6d:
                    bc:0e:47:e2:57:b7:f5:c3:cc:f2:75:e4:72:7c:f9:
                    ac:c5:a5:40:75:3a:4e:10:2a:d8:d2:2c:95:33:e2:
                    68:15:2e:95:56:57:5d:60:0b:e6:fa:72:14:4f:2e:
                    f0:9b:72:1b:76:db:ce:2a:3b:c7:f9:bc:cd:f4:68:
                    fc:d4:3f:fd:7b:49:69:c9:b5:b6:c1:e2:81:5e:55:
                    b5:c7:5e:f4:58:18:64:c3:a8:25:02:c7:2c:3a:31:
                    9c:67:07:cf:0e:a9:26:0e:3a:7f:fd:30:fc:b8:e4:
                    bd:62:19:62:fb:bf:23:4c:27:11:96:e2:93:78:69:
                    89:de:70:6f:4a:f2:7a:60:63:c2:7a:d3:84:d1:eb:
                    a0:66:10:bf:61:20:b6:18:4a:01:a4:14:ef:f5:8f:
                    07:93:06:b2:a1:d9:42:a5:66:86:bc:75:01:a2:ff:
                    6b:0a:a5:5e:1a:f1:eb:54:8e:5a:e2:c6:8b:42:fd:
                    5f:fe:47:0b:3c:f9:18:e5:59:c8:b0:68:87:77:e4:
                    e2:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:9E:25:F3:E2:4C:FA:FD:8B:64:15:21:57:57:4B:C3:5B:48:7A:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/28bdc1a3-6ee6-3d23-bb7f-67e2b8a179c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8a:7800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:2e:e8:ba:49:f9:cc:3a:3b:18:aa:4c:1c:25:d8:02:5a:ed:
         80:46:9b:de:ae:a6:45:c7:94:79:60:a4:c7:c6:1d:95:40:5f:
         2a:e8:0f:05:9f:d7:c8:1c:18:3b:e7:01:97:89:bc:f0:8f:c0:
         87:bb:f8:8d:e8:36:ff:5c:b4:6f:cb:0c:99:34:53:ab:2c:4e:
         0b:70:4b:99:38:b5:b2:54:68:a2:4c:2b:c3:a2:8a:b1:20:6a:
         f5:1e:b5:34:76:33:1a:39:39:79:06:59:21:4a:55:30:8a:12:
         db:55:91:37:7d:c4:45:21:e3:b9:d9:2a:55:00:45:cf:69:fb:
         5e:b2:83:80:e0:15:a0:85:e5:1a:82:f5:ca:91:a9:40:d3:f0:
         e0:a8:13:03:24:89:09:59:37:05:46:59:33:87:7e:33:ac:f1:
         1a:5c:dc:f7:db:01:1c:27:6c:11:d1:29:4a:a7:c4:a4:d8:35:
         52:e1:03:bf:64:c8:cf:45:08:bf:c2:36:00:90:f7:fd:f0:ce:
         2e:b6:d3:30:10:1e:c7:2a:7c:42:ef:e2:fe:da:35:6e:1d:82:
         27:1a:28:b3:96:23:ba:c8:68:de:14:a0:ac:ee:c1:c6:1e:8c:
         a2:f6:88:35:53:9a:2a:43:dc:18:bc:f1:21:69:1b:1a:f8:d9:
         d3:0b:2a:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 07:14:29 2025 by rpki-client