Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ab85ab0f-eccb-3ad8-b9bd-5fe3d05d462c.roa
File:                     ab85ab0f-eccb-3ad8-b9bd-5fe3d05d462c.roa (raw, json)
Hash identifier:          UPo8vr6Q2xd9TYZBnOOT4fGxT1BCpY9M/lTjSGMF7kw=
Subject key identifier:   65:9C:14:C7:45:2F:55:C5:22:8B:BC:85:12:1D:BF:34:48:A4:C8:6F
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584B64CC9317BDEC4EE6AA8ACC40
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ab85ab0f-eccb-3ad8-b9bd-5fe3d05d462c.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     30036
IP address blocks:        2604:2e8e:d400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cc:93:17:bd:ec:4e:e6:aa:8a:cc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=6574d590-6ed9-4ed1-a9f3-a057fd372411
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:cb:e5:91:c5:ce:5f:26:cb:21:a8:6e:36:d9:
                    a6:35:17:de:71:1c:f2:77:72:6e:9e:f3:11:f2:90:
                    e6:75:2a:47:b5:26:47:d5:6a:58:f5:09:10:d0:f9:
                    d8:f7:9a:80:90:58:d4:c4:40:d3:93:22:f0:42:9d:
                    1a:d7:72:06:7c:78:a1:f0:ec:53:8f:4f:b7:ae:9f:
                    47:c7:6d:b1:16:3a:28:ca:c8:63:cd:89:80:4e:2f:
                    38:72:44:db:26:14:d3:71:61:8c:21:17:48:81:58:
                    1d:4c:ad:49:02:4b:9f:c0:09:56:82:f1:24:a0:af:
                    36:f9:aa:19:7f:ba:4a:cf:a6:90:dd:d7:99:d1:36:
                    f6:b2:b9:48:a0:f6:09:eb:88:48:01:5b:99:e2:8d:
                    d4:5e:63:e9:f2:c6:40:f2:2c:7e:0e:c1:48:df:0e:
                    7d:47:5b:5c:4a:c1:43:6b:ee:7e:5d:fa:ff:30:61:
                    dc:fc:cf:ff:9c:32:8d:6b:b1:bd:c5:2c:ea:06:11:
                    1e:18:4e:1c:86:3f:7b:b9:ea:87:77:74:70:9b:d0:
                    5b:13:5b:18:5b:fd:ca:d8:b1:63:9c:5b:e7:c9:77:
                    d1:b4:ca:a9:2d:4d:d9:f8:9a:f5:2e:02:08:12:64:
                    3a:8b:2c:de:4e:31:fa:b2:c3:ca:5d:4a:b9:a7:c4:
                    28:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:9C:14:C7:45:2F:55:C5:22:8B:BC:85:12:1D:BF:34:48:A4:C8:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ab85ab0f-eccb-3ad8-b9bd-5fe3d05d462c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8e:d400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:bf:1b:5a:54:45:07:61:55:43:9e:c3:af:aa:28:ad:dd:7c:
         ac:9c:6e:a9:71:23:ef:8a:f7:a9:b1:f8:7b:9e:0b:b7:d2:3d:
         c3:9f:0b:38:4b:95:ad:f8:28:be:f6:4d:5b:54:6c:77:7e:d4:
         fa:52:4b:77:3a:62:b3:17:95:9e:57:95:04:ee:8d:0c:9f:15:
         25:50:e3:16:e5:3b:0b:9a:3a:bc:5e:98:62:90:1b:c1:fe:32:
         c7:68:12:60:93:a2:f8:02:a0:04:ea:72:30:fb:a1:cb:1b:47:
         82:be:05:fa:b4:7c:38:2f:1f:13:c9:7d:4e:9b:76:e3:fc:c3:
         f6:96:00:77:08:77:69:f3:30:2d:57:77:e5:35:57:a2:88:5a:
         25:ac:21:43:11:a4:7e:5a:1a:9a:2f:50:d1:4f:d6:8e:80:9d:
         75:ee:95:bf:02:fe:d1:f9:08:11:65:96:14:26:2e:ff:8e:9d:
         ee:c6:3f:97:f8:17:7c:df:83:8d:ba:f4:bf:23:f8:bd:a2:a3:
         17:6c:a1:ff:79:ee:f3:1e:e2:49:e8:7d:78:f7:da:8d:9e:98:
         14:59:49:c3:82:79:16:69:66:02:5f:57:cd:78:ef:09:53:ff:
         70:d3:d9:a1:47:de:f7:24:35:af:50:cf:0a:51:ba:25:e8:73:
         71:89:90:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 07:12:25 2025 by rpki-client