Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f597dc93-c66b-3570-afe6-71622af75858.roa
File:                     f597dc93-c66b-3570-afe6-71622af75858.roa (raw, json)
Hash identifier:          ypV4GkQlAGI1lx+E0r8l5L5hb23raCQSFgEpCzbLw14=
Subject key identifier:   07:7A:B1:51:AA:33:64:24:45:9B:4E:10:F8:CE:D8:2F:DD:5E:3A:00
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584B64CE4CE6A1758FEDEDD7E500
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f597dc93-c66b-3570-afe6-71622af75858.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     30036
IP address blocks:        2604:2e89:dc00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:4c:e6:a1:75:8f:ed:ed:d7:e5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=f01f5b86-59b3-4758-b27d-2c6b3c3ad6f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:47:d9:ee:fa:61:04:e5:99:ae:7e:cd:f8:a3:
                    83:95:b0:cf:63:c4:d2:77:c2:0c:fb:39:2a:41:32:
                    8d:23:bb:12:12:3d:d4:50:4d:62:58:40:fc:48:6a:
                    6a:c9:8f:71:14:88:8c:51:82:b9:46:f0:16:29:37:
                    24:68:aa:18:ee:3c:17:d2:2c:4e:31:76:be:64:64:
                    75:66:73:a6:6e:34:dd:8d:72:19:4b:30:53:f3:fd:
                    80:b5:80:1c:19:bc:be:06:ee:53:ad:3b:58:a1:c1:
                    0c:d2:af:12:89:79:9e:12:33:64:73:14:42:14:04:
                    91:a2:14:dd:7f:da:f2:13:4c:e8:62:bb:19:34:19:
                    fd:91:6b:38:24:7c:ca:5d:5f:43:74:6f:48:ff:57:
                    6b:11:43:05:46:f9:db:9a:d3:8b:28:18:60:c0:49:
                    5b:54:72:cd:14:52:7b:05:1f:56:27:8c:5e:4e:ed:
                    93:be:5d:7e:a6:7a:2e:dd:6d:ec:99:50:0a:4e:c3:
                    c6:36:a4:d3:bc:d5:6d:b8:b3:a6:ac:2d:c5:12:a5:
                    ec:52:9d:9c:b5:f8:07:e4:c8:01:07:39:ca:f2:e7:
                    23:75:78:be:72:7e:d6:47:2b:be:94:f7:74:ef:8c:
                    3b:f3:50:54:82:7b:44:41:6a:30:e8:c8:50:85:00:
                    a4:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:7A:B1:51:AA:33:64:24:45:9B:4E:10:F8:CE:D8:2F:DD:5E:3A:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f597dc93-c66b-3570-afe6-71622af75858.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e89:dc00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:0b:fd:ba:ef:34:8a:fc:d6:db:de:dd:b7:70:19:f8:d3:43:
         71:4d:6e:0f:8e:9b:be:46:7f:6b:3e:13:08:3d:06:91:3c:db:
         2c:c9:7f:0d:24:fc:f1:1b:96:18:94:af:dd:b7:cc:33:cf:cd:
         2a:56:78:7e:bb:84:0a:2c:0d:99:a8:62:52:34:75:a3:85:5c:
         c2:c0:f8:8b:75:ec:c7:f8:60:b3:95:6d:bd:72:45:ad:03:27:
         13:1f:64:30:09:fa:8d:2f:8d:1a:0a:36:0e:6c:85:fe:4d:24:
         4a:ec:4c:d2:2f:ef:97:bd:31:49:8a:78:ac:d6:33:ea:f1:8d:
         3d:fb:9d:d8:13:07:1a:f0:aa:9b:d5:07:e1:4a:38:81:6e:2a:
         41:38:9b:90:24:cd:1b:b2:67:5d:1a:4e:d5:e5:e9:dd:ef:71:
         09:fd:21:4c:61:f1:8b:a6:de:9b:2e:a2:4a:a2:13:dc:60:3f:
         d4:39:53:63:a3:c3:83:ea:ce:1f:2f:22:16:5f:1d:d3:d2:8c:
         54:9e:a7:64:99:f7:4e:0e:bc:7b:79:7d:83:31:47:1f:85:1c:
         92:3c:d2:70:72:a1:f0:28:56:14:e7:e2:f5:2f:54:c0:a6:d2:
         c4:6c:ad:07:49:9d:b9:0d:cd:3b:48:35:7a:00:48:1a:ba:99:
         fa:bb:49:5a
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEtkzkzmoXWP7e3X5QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk
ZjAxZjViODYtNTliMy00NzU4LWIyN2QtMmM2YjNjM2FkNmY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUfZ7vphBOWZrn7N+KODlbDPY8TSd8IM+zkq
QTKNI7sSEj3UUE1iWED8SGpqyY9xFIiMUYK5RvAWKTckaKoY7jwX0ixOMXa+ZGR1
ZnOmbjTdjXIZSzBT8/2AtYAcGby+Bu5TrTtYocEM0q8SiXmeEjNkcxRCFASRohTd
f9ryE0zoYrsZNBn9kWs4JHzKXV9DdG9I/1drEUMFRvnbmtOLKBhgwElbVHLNFFJ7
BR9WJ4xeTu2Tvl1+pnou3W3smVAKTsPGNqTTvNVtuLOmrC3FEqXsUp2ctfgH5MgB
BznK8ucjdXi+cn7WRyu+lPd074w781BUgntEQWow6MhQhQCkxQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFAd6sVGqM2QkRZtOEPjO2C/dXjoAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvZjU5N2RjOTMtYzY2Yi0z
NTcwLWFmZTYtNzE2MjJhZjc1ODU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuidww
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAfwv9uu80ivzW297dt3AZ+NNDcU1uD46bvkZ/az4TCD0GkTzbLMl/
DST88RuWGJSv3bfMM8/NKlZ4fruECiwNmahiUjR1o4VcwsD4i3Xsx/hgs5VtvXJF
rQMnEx9kMAn6jS+NGgo2DmyF/k0kSuxM0i/vl70xSYp4rNYz6vGNPfud2BMHGvCq
m9UH4Uo4gW4qQTibkCTNG7JnXRpO1eXp3e9xCf0hTGHxi6bemy6iSqIT3GA/1DlT
Y6PDg+rOHy8iFl8d09KMVJ6nZJn3Tg68e3l9gzFHH4UckjzScHKh8ChWFOfi9S9U
wKbSxGytB0mduQ3NO0g1egBIGrqZ+rtJWg==
-----END CERTIFICATE-----
Generated at Sat Oct 11 07:19:12 2025 by rpki-client