Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/30490a35-c0d8-32d6-849a-a465e85d9337.roa
File:                     30490a35-c0d8-32d6-849a-a465e85d9337.roa (raw, json)
Hash identifier:          Bylh86359qn2hO3KWxPv2rIBQ+wU38yOeKLdvoH6Bvo=
Subject key identifier:   74:B4:A4:24:30:2E:D4:76:FA:4B:5E:FF:A5:C7:55:5D:54:27:7F:31
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584B64CE49F40DFC5369BC859F80
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/30490a35-c0d8-32d6-849a-a465e85d9337.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     30036
IP address blocks:        2604:2e8d:8800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:49:f4:0d:fc:53:69:bc:85:9f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=1f0b6856-6446-4d99-aad8-618d805a9e63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:d4:34:23:00:63:59:42:66:df:7d:2d:93:31:
                    bc:7e:82:78:27:c3:f7:66:b7:c1:9f:04:2f:31:d9:
                    5e:de:b7:74:69:28:2a:86:7a:56:1a:c7:37:81:77:
                    a7:db:f8:d9:c6:ce:06:6a:fd:09:39:6b:1f:c7:3e:
                    e5:e5:c8:a6:86:6c:14:ff:df:74:36:3c:69:07:f1:
                    1b:fd:30:a4:62:32:60:d9:9b:9c:70:2a:5d:a1:db:
                    c6:c4:f8:17:30:16:3b:3f:ad:8e:d1:8e:4e:e8:6c:
                    57:9d:b0:bd:98:2e:97:ea:91:8e:41:4d:f1:0b:c6:
                    36:d5:2f:f2:ac:e2:3c:89:34:0b:4b:90:19:d4:38:
                    9a:5c:9f:dd:42:6d:c5:60:46:fd:c8:64:22:82:59:
                    e8:83:c2:d9:bc:f8:5a:d0:cf:de:9a:40:75:37:43:
                    15:99:c4:55:6f:ad:f4:fb:52:0d:78:8d:31:9a:63:
                    be:7f:d0:c7:28:45:c8:0e:95:fb:3b:24:7a:1d:ef:
                    c0:27:a0:0f:35:a8:9c:12:46:a4:7f:53:c4:9d:d4:
                    f1:db:e8:46:ee:97:ac:a1:db:83:8c:64:e7:f9:91:
                    47:08:1e:51:d3:c0:8a:38:2b:d5:a3:10:44:63:6d:
                    88:07:30:26:3a:05:a0:99:13:d5:ec:6b:ce:80:cd:
                    34:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:B4:A4:24:30:2E:D4:76:FA:4B:5E:FF:A5:C7:55:5D:54:27:7F:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/30490a35-c0d8-32d6-849a-a465e85d9337.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8d:8800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:c4:9f:5d:7f:60:79:c2:c2:4e:6c:4f:a3:32:68:35:35:69:
         e9:54:54:02:01:06:0e:b6:00:f6:f5:1d:55:6e:d7:b3:e2:58:
         bb:e2:19:6f:91:4e:33:0e:19:3f:2b:ff:fb:57:60:0e:c6:d8:
         f6:8a:34:bc:01:0d:25:4c:e6:2a:9a:61:4d:0b:ad:d6:d2:65:
         f3:12:a2:ed:5e:8d:8b:cc:ce:ed:25:bd:fe:70:63:7b:65:8a:
         f2:ec:cd:90:10:dc:9b:96:21:a4:f3:29:76:19:7c:f4:d4:fa:
         56:5a:bd:1f:2a:ed:33:6c:77:4a:99:9d:69:c9:35:77:e5:27:
         fc:ba:0c:24:80:3d:ab:ae:cf:d1:83:da:96:69:69:9f:02:b3:
         85:d0:a2:15:27:32:1c:d1:f2:c0:7d:50:8c:0e:7a:7c:4b:93:
         6d:fe:97:f7:c8:07:54:23:13:4c:ad:cc:4b:9a:8e:91:b4:98:
         8e:c2:90:d4:61:17:56:31:56:4b:a5:0f:ad:c5:90:3c:8f:af:
         e2:6d:f9:dd:80:0c:17:ab:28:24:fe:0d:56:76:b8:d3:5f:af:
         b4:34:e3:c7:94:57:f5:99:8b:3c:8b:82:fd:d3:f9:95:1a:bc:
         49:96:11:49:4f:2a:b4:f6:14:bf:3a:b5:93:d5:d7:1b:03:e2:
         b0:5d:2a:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 07:16:29 2025 by rpki-client