Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5ce0e31a-b76f-3239-ad3c-6d4080742d4b.roa
File:                     5ce0e31a-b76f-3239-ad3c-6d4080742d4b.roa (raw, json)
Hash identifier:          bGnKsSv4/ZQYR8KOabQZjIdTFEodOSm8yCxGEqoj8XU=
Subject key identifier:   49:8D:0A:87:06:D4:92:7A:40:6B:07:96:D2:B5:93:B4:33:2A:B9:15
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584B64CE4DE2B24AB07E531C2980
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5ce0e31a-b76f-3239-ad3c-6d4080742d4b.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     30036
IP address blocks:        2604:2e8c:2c00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:4d:e2:b2:4a:b0:7e:53:1c:29:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=32ef8482-5790-48b1-92a3-0b79be7ed42b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:78:4e:fb:d4:2d:a7:a7:9a:29:9c:4e:fd:bc:
                    e5:85:66:aa:ab:be:4c:8b:44:24:35:6b:11:18:d2:
                    4b:a9:9c:2c:48:d5:61:ea:1a:ef:bd:71:49:f1:3e:
                    c1:c4:30:8e:40:da:40:e7:ae:7c:9f:bd:d7:7a:44:
                    c2:23:1f:ef:ed:63:92:60:8e:08:e6:15:9a:e8:ab:
                    d1:0a:94:04:9d:f3:8f:ad:7d:ef:fe:4e:5a:e2:52:
                    86:4b:19:cd:a6:69:dc:65:d7:76:32:4f:d7:bd:a7:
                    34:bf:18:7c:c5:8e:eb:53:7f:49:e9:10:11:63:a4:
                    43:45:74:e1:db:bd:39:c9:ad:0b:7f:93:06:83:c6:
                    36:fc:56:7d:90:c4:35:89:dc:93:ca:d6:11:49:ea:
                    80:7b:6d:ce:dd:d0:58:83:67:1d:3d:89:1a:56:e1:
                    93:44:08:54:76:2e:c5:09:6e:56:b6:cc:85:49:2c:
                    e4:a1:75:a2:00:a3:8b:c0:12:81:1f:2b:93:31:7d:
                    80:85:a2:e7:04:aa:67:6f:61:55:4a:3c:f6:69:ef:
                    d1:63:08:7d:ac:3f:a9:8f:49:0a:93:78:37:65:eb:
                    59:0b:6c:62:12:b2:04:89:19:43:40:a1:b8:9a:6c:
                    0c:87:39:8f:8a:3c:72:0c:94:a9:3f:7e:27:c0:af:
                    fa:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:8D:0A:87:06:D4:92:7A:40:6B:07:96:D2:B5:93:B4:33:2A:B9:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5ce0e31a-b76f-3239-ad3c-6d4080742d4b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8c:2c00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:a3:e9:93:5b:8b:7c:ee:38:4e:c7:25:49:b0:e1:58:52:35:
         23:50:1e:79:9d:f7:bc:03:57:de:f1:1b:ee:05:ef:c6:a4:c7:
         4e:20:b3:ea:69:55:3d:e8:17:26:1e:a1:63:e5:62:d4:0b:a2:
         7d:f4:5a:c2:d0:23:38:b8:c1:d6:41:ca:37:e7:1e:47:80:0f:
         5d:9c:e9:ab:fe:c9:2a:02:cc:71:56:3f:92:94:ff:0c:a6:60:
         a9:5f:59:80:8f:8a:2a:98:ab:e1:ef:68:a3:53:f0:5c:9d:65:
         b8:42:91:45:9d:67:70:e2:65:ac:29:49:7e:85:19:e2:41:51:
         fd:28:91:f6:ed:b2:e7:e7:e7:53:e0:9f:10:21:78:53:b7:80:
         2b:9d:2d:57:89:98:37:f6:74:b5:09:d6:03:fd:72:63:28:bc:
         0d:f4:c5:41:f3:60:e9:27:97:00:44:9a:0a:52:00:9a:95:40:
         21:2e:6f:aa:76:5a:9e:52:69:f8:1f:51:35:3f:6d:64:c3:0d:
         65:87:7f:a1:db:30:4a:20:34:83:a1:f6:95:94:1b:00:7b:45:
         cb:40:cd:b8:ef:5c:a5:84:ae:7f:b4:35:b8:9a:13:b7:df:a4:
         4a:ac:53:21:96:3f:27:ca:92:88:ef:3f:36:86:10:41:e1:14:
         62:d0:86:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 07:20:15 2025 by rpki-client