Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d05bdb78-ac47-3af4-a4b6-ea2fe78a882a.roa
File:                     d05bdb78-ac47-3af4-a4b6-ea2fe78a882a.roa (raw, json)
Hash identifier:          QFMn2FlfV1+zJVJ6T2VHMgr+xRpxEc3nbPWdKklgNm8=
Subject key identifier:   8A:9B:91:53:51:7E:CD:01:AB:63:3E:DE:FA:D5:43:14:3A:17:9E:B1
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584A71EB24CDD4DE4243317C0200
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d05bdb78-ac47-3af4-a4b6-ea2fe78a882a.roa
Signing time:             Tue 08 Jul 2025 01:00:51 +0000
ROA not before:           Tue 08 Jul 2025 01:00:51 +0000
ROA not after:            Mon 06 Oct 2025 01:00:51 +0000
asID:                     19905
IP address blocks:        2604:2e8a:ac00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:71:eb:24:cd:d4:de:42:43:31:7c:02:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jul  8 01:00:51 2025 GMT
            Not After : Oct  6 01:00:51 2025 GMT
        Subject: CN=9437e4cf-b301-4f20-8c14-e0fbf122b765
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:18:88:09:50:ca:31:54:78:fe:82:b2:5b:64:
                    35:d9:04:32:69:14:95:1e:df:4d:46:c0:67:0c:66:
                    70:31:21:d7:0c:5c:79:54:30:32:17:89:fc:02:70:
                    3f:19:54:fe:c3:20:16:79:a1:69:de:41:91:f6:bb:
                    e0:cb:a6:eb:de:03:01:6d:15:b7:7d:ad:01:5b:6a:
                    fe:04:aa:34:8b:ac:ab:ee:f2:97:08:08:99:64:11:
                    82:46:fc:dd:74:12:30:2d:b8:b9:76:57:5c:3f:d6:
                    3b:8c:af:c3:d8:02:26:5f:6e:c5:af:24:1e:59:d8:
                    c6:40:79:e2:56:e6:7a:8f:79:55:03:92:84:30:1b:
                    29:2d:da:a1:ec:24:66:e3:b6:da:33:bf:06:2c:cd:
                    a8:d6:c4:e7:3b:ca:23:50:1f:6a:67:4c:89:69:b6:
                    0d:03:61:09:87:33:e1:ff:f9:38:a7:af:22:e3:3b:
                    ac:ae:c7:41:62:b9:df:cb:51:0d:ef:69:f6:ed:9d:
                    6a:b6:8e:02:06:19:8c:1a:62:a7:b8:78:c6:b9:4f:
                    e0:75:54:26:d8:81:f8:3a:9b:c6:a5:c7:91:11:9d:
                    60:c9:74:4f:9f:45:75:0a:ae:42:3d:01:6c:9d:ae:
                    49:25:69:1e:f0:41:e3:17:ac:89:48:60:f0:a2:8a:
                    01:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:9B:91:53:51:7E:CD:01:AB:63:3E:DE:FA:D5:43:14:3A:17:9E:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d05bdb78-ac47-3af4-a4b6-ea2fe78a882a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8a:ac00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:83:2d:92:75:b2:1f:33:a2:f3:e7:59:dc:bc:70:58:41:ec:
         fb:36:a3:db:b7:87:2b:59:e8:a2:90:d2:35:9e:f3:de:02:32:
         4c:31:8d:d2:88:ef:73:de:21:11:13:cf:6e:be:c5:8c:5a:f4:
         9f:6b:09:bc:92:a0:b6:5c:86:88:7a:6b:ce:a2:1d:8b:08:5a:
         9e:6e:0b:fb:61:47:b6:96:6d:73:1d:e8:4e:13:a2:7b:89:6a:
         30:0f:2e:18:f6:cb:1c:53:aa:cb:0a:71:c2:db:ed:1a:e4:dc:
         73:13:67:a3:c9:b8:22:d9:58:d0:47:a2:70:cf:cd:3e:e5:63:
         cb:21:66:59:37:c6:d7:03:32:0f:4d:5f:1f:1d:5a:62:78:a5:
         93:cf:0b:51:55:60:83:b3:fa:b9:c5:d5:29:ae:79:df:61:64:
         31:a6:37:12:ec:49:19:f9:b4:b9:b7:b2:f6:10:7c:83:df:18:
         f1:a5:99:2c:e6:9e:6a:0b:d8:47:b4:81:50:b7:d0:85:6c:de:
         f4:77:a7:40:42:f7:65:fb:58:8a:19:f2:1f:1d:89:da:c0:a6:
         9e:92:83:3d:2c:26:f8:8d:d9:88:12:3e:33:a2:e2:9b:b1:8e:
         c9:42:89:d2:61:0c:69:f8:41:10:4f:23:41:18:5a:f4:33:60:
         9f:75:3b:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 06:39:49 2025 by rpki-client