Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2cf5c72c-6009-30e5-bc38-7a930697bf35.roa
File:                     2cf5c72c-6009-30e5-bc38-7a930697bf35.roa (raw, json)
Hash identifier:          XCd9ZV79Q36UHrmQZBp16F3KXyevpRLw5/3XLtpwp1c=
Subject key identifier:   55:3A:F9:72:8C:EC:E4:EA:5B:B0:54:31:45:84:34:8F:CE:D7:4D:57
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584B67973B0643594E5EDF751B00
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2cf5c72c-6009-30e5-bc38-7a930697bf35.roa
Signing time:             Sat 04 Oct 2025 01:00:33 +0000
ROA not before:           Sat 04 Oct 2025 01:00:33 +0000
ROA not after:            Fri 02 Jan 2026 02:00:33 +0000
asID:                     30036
IP address blocks:        2604:2e8e:1400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:67:97:3b:06:43:59:4e:5e:df:75:1b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Oct  4 01:00:33 2025 GMT
            Not After : Jan  2 02:00:33 2026 GMT
        Subject: CN=3982ea4f-3421-4e22-82a6-f344f51f4b00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:bb:46:42:5c:bf:ff:fd:83:cc:cc:0a:29:d6:
                    57:08:61:d6:0d:7e:00:bc:90:7e:36:84:d4:f7:6c:
                    d1:c2:95:ba:74:b0:3b:42:3b:e4:6b:46:fe:0d:53:
                    3c:da:65:db:12:2f:28:bb:fb:96:de:67:a9:09:ed:
                    d5:e2:b0:17:20:77:fc:92:c1:be:79:74:ef:c1:e4:
                    92:1b:c4:df:f9:9a:60:29:ff:6c:65:e3:4b:5a:e2:
                    09:16:21:61:b5:94:c7:1c:f3:9d:ed:63:59:28:87:
                    00:67:29:ea:c8:2a:34:05:95:ce:71:ce:c7:ea:65:
                    d7:f1:e2:63:39:cd:47:b0:20:61:c4:06:7f:9d:15:
                    b4:8b:b4:3c:28:10:c9:e8:e8:d7:f4:19:fc:1b:b4:
                    45:c4:a5:bb:b1:93:8e:f0:96:44:47:36:69:2e:e1:
                    3c:3c:f8:7c:3a:36:17:d8:ea:46:3f:5a:72:dd:b9:
                    85:3b:f1:bd:b2:91:47:c5:48:74:6b:d8:26:6d:de:
                    fb:c4:2e:e9:8b:9a:99:96:e9:0c:33:7a:27:c6:eb:
                    9c:a7:8c:4a:ca:4c:22:72:29:d3:fe:c8:aa:3b:b5:
                    5d:e2:e4:90:79:7d:c2:44:f6:8a:a9:29:ab:f9:fa:
                    d8:ef:85:94:18:45:f1:04:68:b8:12:97:01:ab:8f:
                    2d:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:3A:F9:72:8C:EC:E4:EA:5B:B0:54:31:45:84:34:8F:CE:D7:4D:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2cf5c72c-6009-30e5-bc38-7a930697bf35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8e:1400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:77:b8:b1:94:04:fa:a9:b8:b8:de:f4:01:99:41:9a:32:1a:
         a2:4b:0d:eb:cb:1c:ff:b2:21:2c:4b:63:0b:dc:af:98:95:16:
         2f:3e:ea:22:a8:39:36:65:2d:54:c9:85:3f:e4:cf:74:aa:4d:
         73:3a:0c:bf:dc:be:f6:3f:94:84:a2:de:92:78:3b:21:43:81:
         97:bd:37:c4:c5:02:2a:c2:08:62:f0:ec:56:40:b4:5c:3a:7d:
         5a:4f:cc:ec:eb:85:26:c3:6c:fc:15:e5:d1:03:29:7c:f3:7d:
         c7:2b:d0:37:db:87:48:07:1f:ba:e0:a7:bd:9e:d7:36:33:7d:
         33:e8:4a:3f:45:7e:1c:3c:4d:2e:4e:bc:3c:7e:4c:f6:e4:6a:
         66:e9:23:0b:45:ab:8d:7b:23:41:e0:f1:d7:44:5e:4b:61:97:
         d4:51:29:87:ed:45:3d:eb:7b:14:a0:47:42:71:5b:ba:41:6e:
         16:14:da:f1:05:53:d9:5d:55:dd:31:50:19:f8:08:fd:cb:9a:
         85:58:c5:49:ce:58:36:d2:c2:0f:6f:1c:1e:9f:8a:a4:69:4e:
         f6:f9:f6:7d:d5:bf:78:b1:18:0f:3a:31:88:4e:c0:34:95:a0:
         bf:00:21:ab:ac:4d:e7:4e:53:7f:4f:90:46:ee:ed:50:f1:c0:
         65:dc:8c:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 07:14:28 2025 by rpki-client