Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0e5c07a6-6ae9-35c0-a4e4-d37f059b590e.roa
File:                     0e5c07a6-6ae9-35c0-a4e4-d37f059b590e.roa (raw, json)
Hash identifier:          BHdkpv0fKEMzl7JcYE4kiMrtGExkgdx6bJC3gQ5LV6w=
Subject key identifier:   CB:DD:0B:68:96:D9:09:25:DC:34:6B:69:1C:67:A5:67:6F:A8:2C:64
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584A612B0832D28F4E43F4F89BC0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0e5c07a6-6ae9-35c0-a4e4-d37f059b590e.roa
Signing time:             Wed 02 Jul 2025 01:00:49 +0000
ROA not before:           Wed 02 Jul 2025 01:00:49 +0000
ROA not after:            Tue 30 Sep 2025 01:00:49 +0000
asID:                     19905
IP address blocks:        2604:2e8d:f800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:61:2b:08:32:d2:8f:4e:43:f4:f8:9b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jul  2 01:00:49 2025 GMT
            Not After : Sep 30 01:00:49 2025 GMT
        Subject: CN=72ec267f-7ed2-4642-b256-e04bb4086c0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:14:b1:18:11:da:d0:36:b8:01:21:8c:15:d0:
                    ed:79:df:5f:32:6a:89:50:0e:26:d1:5d:07:23:3d:
                    6c:2c:8f:7b:28:e4:8f:3a:29:e9:5e:12:fe:1d:45:
                    de:d0:36:2c:8e:5d:0b:fb:c9:ee:56:5b:f2:de:24:
                    ce:1d:c7:9f:f7:be:a4:7c:7d:62:86:5c:e7:e7:8c:
                    7d:8b:65:b5:e3:c3:46:ca:aa:ab:5e:c3:f4:7c:1f:
                    e4:d2:ae:81:27:1c:ee:80:cc:70:1a:71:9c:d7:5a:
                    ef:9a:98:40:70:eb:12:09:9b:fa:bf:2a:fe:7d:f7:
                    55:32:fc:25:7c:4e:95:bf:fa:86:9a:b4:5e:16:2b:
                    e6:a6:1b:9e:e0:c2:5d:97:3e:dd:8a:88:8a:99:f9:
                    96:a0:b4:8b:01:6e:27:50:03:7d:6a:e8:13:b0:0a:
                    85:34:0f:02:3f:d8:1e:a3:02:52:f7:fc:fb:70:f8:
                    0a:e9:5e:a6:1b:a3:d4:c3:4a:9f:1c:c3:40:a6:07:
                    a8:4e:35:66:40:4b:bc:35:40:32:54:81:47:d0:c1:
                    b8:4e:76:40:39:c8:1c:38:4d:47:8a:95:75:bf:4c:
                    d7:27:14:dd:6e:59:6f:71:c1:a9:69:27:dd:e7:b2:
                    a1:59:4b:3f:e0:a7:b3:40:93:ee:4c:45:ae:c6:7e:
                    f4:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:DD:0B:68:96:D9:09:25:DC:34:6B:69:1C:67:A5:67:6F:A8:2C:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0e5c07a6-6ae9-35c0-a4e4-d37f059b590e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8d:f800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:8a:88:a0:9f:92:86:e3:0a:38:1c:23:3e:04:0d:29:39:74:
         a9:23:76:5c:ce:b9:2f:e1:6a:7d:72:94:07:9c:08:1a:ec:20:
         a3:a4:b2:6d:1e:db:fb:94:d2:3c:1b:dd:67:f4:ce:56:52:77:
         c5:e3:9b:6f:fb:f3:ff:5a:c9:73:5c:e0:ff:6c:6f:70:a5:ec:
         8b:05:7b:31:2e:f9:99:84:e5:95:29:2a:cb:ba:b3:92:9a:f2:
         04:19:dd:fa:43:e0:70:9f:a9:21:41:cc:5a:27:5f:35:19:ef:
         c3:de:28:e7:25:42:62:d6:fd:d9:15:e4:39:a9:dc:95:b7:34:
         2a:79:02:46:67:ed:7c:ea:38:6c:f2:32:a8:af:62:7e:60:1a:
         26:cc:b5:65:7e:19:b0:b7:36:df:d1:89:1b:e1:bf:8d:5a:2b:
         0b:f3:c2:0c:b2:26:be:38:cc:d2:9b:cb:c4:9c:da:ae:fe:eb:
         f2:29:bd:e6:ce:d4:eb:fe:bd:46:8d:16:96:3d:00:f9:94:9d:
         ce:ee:4f:97:8e:29:17:72:4b:93:9e:34:ac:06:39:06:ab:63:
         73:31:b1:32:42:5c:73:ef:5e:84:09:52:a5:0f:ca:c9:d6:a6:
         9d:e1:8f:c6:70:a2:16:d2:9c:bc:71:81:e5:c1:ae:f6:36:70:
         21:df:a3:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 06:37:16 2025 by rpki-client