Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/683ad58c-cddc-3c5a-b1f4-9da1d1d01436.roa
File:                     683ad58c-cddc-3c5a-b1f4-9da1d1d01436.roa (raw, json)
Hash identifier:          WFaFwtEb2Mn7azHL2jfEFFY9VKqQ3bHJrvqB31+fCp4=
Subject key identifier:   3E:4C:DB:E9:51:B6:B4:27:E4:32:90:56:68:32:8D:EA:C7:40:0C:0A
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584B64CE3BA73EB815BCEC063D00
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/683ad58c-cddc-3c5a-b1f4-9da1d1d01436.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     30036
IP address blocks:        2604:2e8b:b800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:3b:a7:3e:b8:15:bc:ec:06:3d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=f408e46f-7a59-47b3-a449-91ba06fde107
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:68:66:53:f6:3f:56:d9:27:ff:06:65:aa:f0:
                    f4:b4:53:b3:c1:94:c2:3e:42:b6:fa:f0:66:9f:d2:
                    7b:13:40:6e:f9:40:64:d1:32:50:74:d0:c8:05:ee:
                    42:e4:d4:a5:b0:55:54:47:1a:62:6e:fd:c0:92:b2:
                    d0:0a:78:b9:5b:18:67:02:ca:ab:a2:15:48:87:ec:
                    fb:c7:9c:60:8f:f1:5e:5f:85:52:42:53:5d:b6:a8:
                    42:8c:8c:6a:c0:84:4b:8b:d0:ae:7f:23:be:9e:b2:
                    c7:f3:76:c8:26:29:5b:5d:d9:8a:35:5a:a3:e9:a8:
                    44:ac:5e:b5:1d:2d:fb:ac:a2:00:cd:97:2e:9b:56:
                    98:aa:f6:f3:50:1a:53:18:01:93:e1:c2:be:11:33:
                    69:11:c8:2d:03:7f:28:6b:0e:fd:ae:fd:a3:dc:41:
                    c1:00:76:42:c6:14:3a:d3:b2:44:00:ee:20:16:66:
                    e5:26:25:ac:6d:49:36:1d:3c:c2:b9:cb:3e:97:dd:
                    80:f0:a0:e4:e2:8a:94:14:4d:fa:36:2b:4f:80:e5:
                    f5:8b:69:8e:f9:ef:e8:f6:48:07:c9:53:e8:4d:9e:
                    44:0b:4c:04:40:07:e5:22:11:9f:c5:fe:6e:fe:7f:
                    df:7e:2a:06:b3:4f:9b:49:a9:bf:2d:b3:7a:9d:b1:
                    35:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:4C:DB:E9:51:B6:B4:27:E4:32:90:56:68:32:8D:EA:C7:40:0C:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/683ad58c-cddc-3c5a-b1f4-9da1d1d01436.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8b:b800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:24:98:7c:6c:c8:35:0f:9d:66:2f:05:99:b4:49:6b:56:b1:
         ac:50:bf:e0:80:01:c1:bf:cd:18:97:97:6f:6b:c0:20:93:ce:
         a0:9f:fd:06:37:6a:43:e6:09:2e:9b:ca:15:2b:d3:48:de:a9:
         45:ff:e2:8a:6f:93:fc:99:d1:6d:9f:64:21:81:a0:0f:28:41:
         4e:8f:c1:44:d0:d4:9c:ae:2e:46:1e:4a:5f:cf:84:81:6b:1b:
         c6:86:98:59:65:df:eb:96:90:1d:d1:2f:a7:70:67:70:c3:54:
         1d:49:b6:d3:53:cf:1b:e8:90:8e:e9:49:b7:77:88:20:73:41:
         be:c9:f9:1f:dc:bc:c5:d0:be:89:09:a7:cc:4d:3b:28:e9:a6:
         14:8e:1c:a2:ab:a9:19:f0:ba:aa:e9:e5:3d:12:96:45:82:c5:
         b0:e3:56:0e:b1:75:20:13:55:7a:a2:f1:74:d8:66:4a:f6:cf:
         d5:32:34:92:99:43:84:f6:e5:4c:7b:98:95:e5:6a:14:96:44:
         02:d3:0e:01:e1:61:0c:3f:24:b7:cc:40:82:cc:23:10:ac:38:
         e9:e1:c8:86:0f:4f:f2:67:08:c5:6d:89:e5:73:2e:3d:fb:76:
         59:0c:f9:07:db:8f:8a:a7:b2:39:f3:2f:65:b0:49:04:97:ad:
         75:75:e1:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 07:12:28 2025 by rpki-client