Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/7ca74157-65d7-3fab-8ccd-ddf14f59051d.roa
File:                     7ca74157-65d7-3fab-8ccd-ddf14f59051d.roa (raw, json)
Hash identifier:          7am5La3yGiD/7oxIfIGu8tK/JjIrwVnlPQmPCUrUbhI=
Subject key identifier:   97:12:E2:2F:3F:2A:38:33:32:4F:F7:E3:60:ED:1F:D5:8E:0F:9D:12
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584B64CCA8BE30AE84E4CA258540
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/7ca74157-65d7-3fab-8ccd-ddf14f59051d.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     30036
IP address blocks:        2604:2e8b:a800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cc:a8:be:30:ae:84:e4:ca:25:85:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=bf20050d-b432-48ae-b4f3-9357e5a7bbf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:41:62:1e:c0:39:51:7b:10:cc:05:8e:8b:63:
                    f9:6f:df:9c:25:94:39:2a:00:08:50:17:8d:97:d4:
                    ac:1b:e0:53:05:7d:27:3f:54:1e:64:51:34:4e:08:
                    08:18:21:14:00:b8:10:99:8e:ca:4c:db:ff:7e:5f:
                    7b:97:97:0c:f6:03:d1:4a:8d:8a:5c:ab:7b:cd:96:
                    a7:5c:01:fa:e2:06:3e:cc:e0:56:d3:42:9f:d8:d3:
                    dd:93:35:3d:44:c6:d5:04:63:2a:af:84:6d:45:32:
                    87:8a:bd:6f:ed:ee:40:f4:c2:f7:17:85:f3:b3:89:
                    7b:7c:e6:5b:13:28:4b:82:2a:e0:39:68:46:92:40:
                    0a:d6:ae:ff:bb:14:d9:75:cf:68:fb:9c:9e:53:eb:
                    cc:90:d4:a2:d0:ee:64:0f:09:f9:b4:cf:4d:c6:bc:
                    44:9d:d0:6f:66:dc:39:3a:3e:73:27:9d:53:f8:4e:
                    b0:33:58:c8:88:38:c5:a1:58:cd:b3:54:69:1b:10:
                    6b:7f:1b:64:d7:3b:30:87:00:88:d5:d7:39:af:57:
                    e1:af:7d:c6:d8:ed:64:ff:f6:4a:e9:51:85:0b:39:
                    1f:f9:69:ba:ab:d8:68:44:38:5e:4f:44:29:95:cb:
                    15:83:2f:34:10:ec:56:e1:1a:c3:5b:9e:34:30:51:
                    33:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:12:E2:2F:3F:2A:38:33:32:4F:F7:E3:60:ED:1F:D5:8E:0F:9D:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/7ca74157-65d7-3fab-8ccd-ddf14f59051d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8b:a800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:30:4c:da:84:2f:dc:7a:f7:2b:b1:b2:a0:ed:cc:f7:f8:b8:
         29:13:46:0a:a3:3d:94:4d:06:c0:f4:56:cf:ec:b0:15:81:ae:
         ae:d2:90:ba:b2:1b:83:a8:74:a8:d0:39:32:7f:68:df:b8:18:
         d6:21:2c:06:fe:f7:7e:a3:df:f7:d6:f0:f8:34:b4:2c:71:52:
         de:dd:c7:f7:2f:87:81:ad:8f:16:2f:a1:2e:da:95:1b:6d:59:
         0c:ec:40:d2:40:56:d8:42:7b:99:7e:96:3a:74:00:69:e4:23:
         e1:ab:85:f2:35:62:ab:db:99:d1:20:f3:7b:00:fc:b3:b0:cb:
         d6:a9:c7:f1:a0:e8:40:3c:62:2c:c0:a0:57:d8:a2:9b:54:d4:
         c7:01:ee:2c:b8:64:8a:56:aa:5b:84:10:85:94:3c:08:d0:55:
         0b:5b:a6:f4:a7:4e:4d:7c:f2:05:9d:ab:87:0c:a0:3e:00:a7:
         65:aa:1a:4f:8c:ea:a3:f7:78:10:48:83:2b:1d:c5:cb:d4:21:
         07:1d:64:9a:90:94:5a:c5:e1:ba:28:34:76:91:c2:d5:01:69:
         bc:15:87:47:da:42:ec:a0:84:05:c8:48:8c:81:7f:36:b7:cb:
         a3:0d:ad:a5:2a:25:7e:7b:cc:f3:9a:40:d7:5e:52:f6:0e:4b:
         ac:67:b2:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 07:22:02 2025 by rpki-client