Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bf00ff42-1d72-33fe-afc2-42837b116524.roa
File:                     bf00ff42-1d72-33fe-afc2-42837b116524.roa (raw, json)
Hash identifier:          oghU7JiC2YrhMkWcgEXzIqlL1I4FRJZ94B29i69cTu0=
Subject key identifier:   89:E1:63:8F:88:C6:9C:19:ED:0E:4A:F9:0E:23:ED:75:F7:2B:B2:30
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584B64CCB40114564D9403B81B00
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bf00ff42-1d72-33fe-afc2-42837b116524.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     30036
IP address blocks:        2604:2e8c:9400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cc:b4:01:14:56:4d:94:03:b8:1b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=715d37ed-04bb-4b74-8012-d881032fcf4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f1:f1:61:34:30:85:f4:81:cd:54:97:9d:81:
                    c2:35:cc:3b:a9:e1:bd:34:1e:b8:aa:3d:ff:ed:21:
                    75:2d:1f:24:a0:fc:5a:f9:8c:b3:86:78:ec:85:a8:
                    47:dc:10:cf:16:c9:7b:a9:fc:3e:cd:8b:dc:ad:48:
                    11:67:06:2f:1b:c5:20:d1:1f:51:11:2a:29:de:3b:
                    03:93:b7:db:6a:e6:24:80:a6:1d:e8:7e:7b:8d:cd:
                    14:dd:3b:ab:bf:f7:32:6a:1e:a6:34:8f:7f:c6:6e:
                    80:77:fe:ba:c8:38:5f:10:33:0b:51:9b:38:eb:b3:
                    40:cf:a2:b4:25:47:9e:71:1f:48:a8:72:fa:c8:f7:
                    96:44:05:32:d4:0f:86:ac:21:79:d8:ec:ca:0c:ff:
                    93:e7:02:f2:25:bc:6b:b3:37:6b:2f:00:06:5f:5e:
                    d5:87:88:b6:23:a0:e9:28:d7:56:0e:6c:64:64:fe:
                    fe:21:0f:1c:4c:4b:37:e5:b6:38:81:7a:09:08:b5:
                    1a:af:67:ce:e0:f5:b4:bd:82:cd:6d:01:d0:cc:52:
                    c8:31:c2:e6:e4:b0:2f:46:9f:76:bc:9d:a7:9b:d3:
                    cd:4e:f2:f2:01:fd:d4:af:ea:8b:2a:91:16:a1:dc:
                    5f:e6:a2:fa:c3:ae:2e:c6:b7:0a:25:35:9f:fe:0b:
                    80:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:E1:63:8F:88:C6:9C:19:ED:0E:4A:F9:0E:23:ED:75:F7:2B:B2:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bf00ff42-1d72-33fe-afc2-42837b116524.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8c:9400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:a9:a8:70:cd:9d:a9:51:55:bc:0b:08:7d:28:9b:15:46:f9:
         ee:24:01:ae:b6:a6:17:69:8a:5b:33:7f:74:d3:59:3d:06:c8:
         c1:5c:da:f2:fb:00:cb:4f:40:3e:23:45:2c:22:74:05:ec:0d:
         30:11:96:7f:1e:64:de:4a:43:04:d8:59:b4:0d:a1:cd:f9:57:
         33:5f:3d:44:31:d9:2a:ef:3d:29:12:03:aa:bb:11:5a:32:f5:
         2f:e3:b5:73:69:e6:56:4e:e3:a2:c1:1e:6b:40:3c:61:84:ad:
         39:7b:ea:06:c2:f2:4a:a8:2b:cd:84:16:5c:1e:89:32:71:49:
         d0:4a:7b:bb:ec:c5:db:d9:a7:5e:ec:6d:35:1c:ab:c6:4d:40:
         6e:00:e3:b0:7f:12:ce:3f:74:33:19:e2:8e:65:6f:b3:72:ec:
         1d:6a:cc:54:54:9f:89:aa:4e:a0:55:46:4b:91:93:47:c1:dc:
         62:23:5d:7b:f5:2a:c8:28:22:9d:3f:d0:76:50:dd:c7:01:60:
         57:77:a0:6e:9b:73:6d:4a:a2:10:bc:d1:c3:d8:23:2b:eb:3c:
         e8:dd:56:f9:3d:55:10:35:00:7e:c5:11:99:07:21:5e:22:fc:
         8c:5f:a1:8c:87:0c:06:cf:4b:b3:b8:94:d8:f0:3b:76:15:7f:
         eb:f6:e8:2d
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEtkzLQBFFZNlAO4GwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk
NzE1ZDM3ZWQtMDRiYi00Yjc0LTgwMTItZDg4MTAzMmZjZjRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfHxYTQwhfSBzVSXnYHCNcw7qeG9NB64qj3/
7SF1LR8koPxa+YyzhnjshahH3BDPFsl7qfw+zYvcrUgRZwYvG8Ug0R9RESop3jsD
k7fbauYkgKYd6H57jc0U3Turv/cyah6mNI9/xm6Ad/66yDhfEDMLUZs467NAz6K0
JUeecR9IqHL6yPeWRAUy1A+GrCF52OzKDP+T5wLyJbxrszdrLwAGX17Vh4i2I6Dp
KNdWDmxkZP7+IQ8cTEs35bY4gXoJCLUar2fO4PW0vYLNbQHQzFLIMcLm5LAvRp92
vJ2nm9PNTvLyAf3Ur+qLKpEWodxf5qL6w64uxrcKJTWf/guAAwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFInhY4+IxpwZ7Q5K+Q4j7XX3K7IwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYmYwMGZmNDItMWQ3Mi0z
M2ZlLWFmYzItNDI4MzdiMTE2NTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujJQw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAoqmocM2dqVFVvAsIfSibFUb57iQBrramF2mKWzN/dNNZPQbIwVza
8vsAy09APiNFLCJ0BewNMBGWfx5k3kpDBNhZtA2hzflXM189RDHZKu89KRIDqrsR
WjL1L+O1c2nmVk7josEea0A8YYStOXvqBsLySqgrzYQWXB6JMnFJ0Ep7u+zF29mn
XuxtNRyrxk1AbgDjsH8Szj90MxnijmVvs3LsHWrMVFSfiapOoFVGS5GTR8HcYiNd
e/UqyCginT/QdlDdxwFgV3egbptzbUqiELzRw9gjK+s86N1W+T1VEDUAfsURmQch
XiL8jF+hjIcMBs9Ls7iU2PA7dhV/6/boLQ==
-----END CERTIFICATE-----
Generated at Sat Oct 11 07:18:03 2025 by rpki-client