Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/fcd0f538-be21-3f37-8b95-da810b4284fb.roa
File:                     fcd0f538-be21-3f37-8b95-da810b4284fb.roa (raw, json)
Hash identifier:          6d9jjqT1iF4EAf76ECJ4D22Fvkv1+hYF/jGEarmXhEQ=
Subject key identifier:   26:89:32:21:FB:ED:1F:5C:A4:2C:F1:A0:7E:EB:70:76:02:B0:54:EF
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584B64CC8265D4354C9964528800
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/fcd0f538-be21-3f37-8b95-da810b4284fb.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     30036
IP address blocks:        2604:2e89:9400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cc:82:65:d4:35:4c:99:64:52:88:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=b20b3675-03ce-49a0-abdf-556bc7def75a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:24:19:ff:12:7c:39:eb:b3:1d:d3:36:c4:2d:
                    0d:a1:bb:c6:e2:cb:9b:58:58:19:8f:80:1c:1e:6c:
                    df:88:38:78:32:80:ee:b3:8c:b0:63:5a:c6:28:af:
                    0e:47:a1:13:62:6a:d1:4f:18:e7:6b:f7:fe:9c:ab:
                    60:6b:65:75:55:74:c5:fb:ee:fe:e1:84:8c:c8:68:
                    46:89:dc:00:b8:cc:e2:d3:43:16:f5:27:7d:46:a4:
                    2f:1c:9b:2d:b7:6d:ee:86:1c:00:dc:8a:a8:dd:b8:
                    f8:74:c8:5a:ac:47:17:60:c7:2f:94:45:f5:73:85:
                    4c:3a:bc:20:03:9d:f9:d3:a4:24:0c:4b:20:bf:34:
                    87:2c:35:4c:8c:d9:09:91:86:97:d9:65:69:ec:05:
                    0f:7b:1d:4c:2e:11:53:c0:dc:a7:0d:79:60:69:25:
                    f8:e0:b3:d0:f2:03:49:c6:82:fc:fe:5f:73:f4:78:
                    5d:d6:84:ee:d0:d9:46:4c:5b:0a:f2:ff:2b:a0:89:
                    85:91:b9:49:e9:be:93:2e:91:9f:f0:37:73:03:65:
                    eb:11:0f:0c:c5:05:b0:9a:22:f2:e2:af:2f:3f:23:
                    6a:19:21:ba:c2:0b:4c:21:eb:ec:e2:be:94:c7:4c:
                    2e:42:98:27:b9:04:ab:88:1f:89:56:ef:33:f1:a2:
                    f8:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:89:32:21:FB:ED:1F:5C:A4:2C:F1:A0:7E:EB:70:76:02:B0:54:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/fcd0f538-be21-3f37-8b95-da810b4284fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e89:9400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:30:9e:5a:d0:b0:aa:f0:9b:2c:13:ab:cf:bf:c9:95:2c:73:
         79:54:bf:b6:dc:1a:26:80:38:e0:35:6c:fe:f5:ca:dc:42:ed:
         cf:af:d4:62:01:49:b8:3c:bc:f9:eb:bc:0b:60:f6:d9:97:c4:
         70:ec:47:5e:3f:38:e9:08:24:5d:51:6f:28:eb:cf:ea:b9:29:
         d5:55:6a:fa:87:c5:cb:b9:5f:8f:5a:47:00:89:38:55:ba:5f:
         55:e1:2e:85:2a:aa:17:74:e7:f3:e2:3c:c8:85:99:33:54:ba:
         56:b8:fb:8b:6a:4d:b1:77:bd:68:8d:90:d7:87:fa:ec:9d:53:
         10:6c:13:f4:c4:4c:ad:db:88:cc:2f:cd:21:50:1e:f3:81:10:
         fc:a9:96:c9:b3:50:ed:08:c2:d8:d2:07:78:d5:df:28:4f:c2:
         d3:c4:23:13:ea:84:ad:fb:00:84:e7:6f:b7:31:42:3a:6a:7c:
         a0:80:9b:4a:73:91:22:f2:51:75:ad:90:39:76:6b:93:12:f3:
         f7:5d:16:e3:6a:30:bf:41:b0:d2:43:73:01:eb:83:94:c3:56:
         bf:28:74:e9:84:83:34:fd:fd:46:64:89:32:c1:ee:11:b3:94:
         3f:34:7f:31:75:51:75:46:87:57:e5:42:f4:d7:f4:7c:75:e5:
         b7:38:ba:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 07:18:07 2025 by rpki-client