Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/48d62b2a-5dab-377e-8b71-6a7ce442c61f.roa
File:                     48d62b2a-5dab-377e-8b71-6a7ce442c61f.roa (raw, json)
Hash identifier:          OMPJHOoIu7B8PT+ZKUJK0rxW8Vut2mmovCPNly7byK4=
Subject key identifier:   44:C2:27:E1:BA:8F:B0:2C:F1:03:9C:5E:7D:1E:25:78:66:76:2E:0F
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584B6201E763362360C12E85DD00
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/48d62b2a-5dab-377e-8b71-6a7ce442c61f.roa
Signing time:             Thu 02 Oct 2025 01:00:31 +0000
ROA not before:           Thu 02 Oct 2025 01:00:31 +0000
ROA not after:            Wed 31 Dec 2025 02:00:31 +0000
asID:                     30036
IP address blocks:        2604:2e8b:6800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:62:01:e7:63:36:23:60:c1:2e:85:dd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Oct  2 01:00:31 2025 GMT
            Not After : Dec 31 02:00:31 2025 GMT
        Subject: CN=a81ee7ad-b33c-4d60-b389-7cf073ec7352
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:52:d1:fa:ac:c9:5a:f6:dd:c5:93:c2:0c:75:
                    04:f7:56:fe:12:08:62:9e:d6:5c:bb:a1:ec:4d:2d:
                    44:e4:ac:41:59:51:58:16:b6:fd:38:ae:9e:17:fd:
                    09:91:36:47:7e:d7:72:b2:86:80:aa:e8:32:8d:38:
                    f3:df:07:9a:9f:0f:fa:1c:c0:77:a1:13:6d:30:b4:
                    b2:84:41:c1:92:1e:7d:1b:ec:76:47:c2:6b:8e:6b:
                    fa:d9:5d:e0:f9:51:be:6b:1b:4c:e3:2a:8e:78:9c:
                    a7:6b:94:b3:cb:c0:52:4d:07:96:cf:7d:40:8e:53:
                    4a:ce:58:7b:1d:03:dd:9c:04:cb:59:6b:f0:31:9b:
                    5f:ab:bc:de:c2:1e:0c:c0:bf:7f:41:24:10:67:0e:
                    83:81:9d:17:97:e1:8c:53:7e:92:72:f8:8b:99:c5:
                    7b:77:e4:2e:d7:d7:d6:1a:62:b0:b7:fa:a9:d5:86:
                    42:c0:e3:d8:12:4f:97:46:37:37:54:08:8a:97:78:
                    2e:69:8b:7b:4c:1b:a3:bc:d3:d0:1b:c8:89:e3:80:
                    c7:0a:11:10:64:95:39:e9:d9:85:ec:b4:d7:14:6d:
                    9d:40:b6:15:13:35:18:e3:89:b8:d1:45:d5:0a:83:
                    a7:01:4c:9c:b2:90:c5:a7:73:e6:88:b4:9c:5e:15:
                    ec:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:C2:27:E1:BA:8F:B0:2C:F1:03:9C:5E:7D:1E:25:78:66:76:2E:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/48d62b2a-5dab-377e-8b71-6a7ce442c61f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8b:6800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:a6:11:71:ab:fd:ee:09:6d:5c:b0:92:4e:e7:59:db:2a:09:
         c1:ee:7a:8b:ce:e6:74:f1:9f:e2:3f:b9:6a:10:62:fe:8a:11:
         40:80:15:c3:6b:69:d5:b5:d9:12:5a:18:0d:77:7b:1e:fc:87:
         39:60:41:c5:61:58:e6:1a:92:8d:9e:c8:eb:94:40:61:f9:e2:
         10:8e:0d:fb:85:87:63:ec:44:4a:84:ee:38:3f:9a:d3:40:6f:
         92:b8:6c:b2:ad:f3:f7:89:9a:77:2c:38:a0:23:64:16:c3:81:
         29:56:8a:f5:e1:57:d9:1c:ec:12:aa:63:06:ba:45:5d:60:41:
         9d:e6:b0:d0:2d:dc:86:14:cc:3c:96:8c:06:63:25:5c:ae:26:
         16:82:4d:4a:34:1e:03:a1:62:b4:ba:f2:0b:18:40:c9:16:40:
         d9:3b:e9:0e:fb:b2:4d:45:c0:01:21:d3:dc:80:c4:e0:49:7f:
         7f:f4:e3:73:d0:0a:4a:5f:e0:b6:5e:c3:2a:8c:b2:51:f9:7b:
         d8:a3:23:49:08:54:05:4c:9f:43:a3:16:b6:97:4f:05:5c:cd:
         7a:88:2f:3f:bf:52:31:1c:9c:03:31:27:c5:ab:85:6a:9b:b6:
         18:fe:80:09:23:93:ee:75:27:87:d4:b3:ae:6a:c0:b6:96:dd:
         af:cd:b5:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 07:15:27 2025 by rpki-client