Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/e56b873b-21fa-3bf2-8461-47fa444ec022.roa
File:                     e56b873b-21fa-3bf2-8461-47fa444ec022.roa (raw, json)
Hash identifier:          m13bYUxyEfFWDbbYSDVI7ev4qD1mwtZmwh0NH1rdvFE=
Subject key identifier:   AB:FF:4F:EE:F7:7C:6C:40:38:51:B6:A2:ED:86:CF:47:29:D8:46:5A
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584A750365F283F7FB06544A8BE0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/e56b873b-21fa-3bf2-8461-47fa444ec022.roa
Signing time:             Wed 09 Jul 2025 03:37:11 +0000
ROA not before:           Wed 09 Jul 2025 03:37:11 +0000
ROA not after:            Tue 07 Oct 2025 03:37:11 +0000
asID:                     19905
IP address blocks:        2604:2e87:5800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:75:03:65:f2:83:f7:fb:06:54:4a:8b:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jul  9 03:37:11 2025 GMT
            Not After : Oct  7 03:37:11 2025 GMT
        Subject: CN=a1a0d0e7-8f1f-45b8-8545-8155f20902bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:41:1e:7e:a7:f8:bb:89:9b:6d:7a:0b:d9:8a:
                    46:c5:9b:ae:15:e0:1e:bc:16:8b:a4:12:1e:f4:4d:
                    7c:5e:9b:f4:fd:5e:e4:ef:04:c0:ec:ec:20:ba:10:
                    52:6a:45:fb:7e:47:f3:f9:49:67:d3:a6:66:20:3e:
                    7b:93:b4:01:e2:87:0c:5c:35:21:ce:76:f3:d9:3a:
                    7b:83:54:cb:14:d7:bb:37:5a:8f:30:00:dc:a6:ff:
                    92:9d:56:8d:ad:30:95:ed:ae:26:f9:fb:c7:69:da:
                    b3:f8:b4:19:bd:08:b8:0d:ab:eb:ea:ac:32:b4:54:
                    58:83:e9:be:ea:5c:81:2a:14:16:cb:de:c6:f3:91:
                    1f:76:55:43:35:da:82:d9:ab:97:44:b7:1f:42:ae:
                    74:56:ef:85:fe:8e:d3:cb:2a:64:1d:be:8d:09:64:
                    2a:5f:74:9f:99:74:0c:31:a9:60:2d:5f:04:56:07:
                    b5:a9:d1:19:e6:6a:4b:d7:8b:a0:a0:77:c2:d9:ea:
                    56:5c:e1:73:9d:4f:58:11:7f:22:ca:d2:14:30:46:
                    14:d0:08:12:3e:0b:5e:68:bc:04:53:9a:da:e4:d7:
                    18:2e:10:95:94:0f:a4:72:7c:17:64:a1:67:ed:e7:
                    84:74:06:c1:50:dc:f7:3a:fb:28:e3:21:f1:c0:52:
                    d2:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:FF:4F:EE:F7:7C:6C:40:38:51:B6:A2:ED:86:CF:47:29:D8:46:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/e56b873b-21fa-3bf2-8461-47fa444ec022.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e87:5800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:5f:44:0f:68:86:a5:fe:b8:90:92:14:be:a0:8a:2c:c5:1b:
         b4:7d:c3:e4:58:e1:4a:7c:45:21:54:62:4d:97:0a:7b:52:f2:
         8b:99:53:6c:72:79:97:88:4b:ef:e5:05:5c:04:6a:6e:d9:83:
         d3:cd:ed:be:7b:ad:02:09:50:72:7f:25:49:83:d5:b1:0e:f5:
         41:82:6b:96:5c:b6:82:c9:7b:53:21:a4:33:51:d0:b5:ba:ea:
         08:48:26:66:7f:26:b8:e8:8d:3e:01:07:59:29:0a:3b:93:73:
         a5:1c:c8:1f:e3:11:ea:cf:23:f1:dd:3d:b8:ea:54:3d:9e:1b:
         0d:e2:13:67:6a:71:7b:c5:3e:53:6c:28:32:bb:68:a0:ae:d7:
         90:c2:35:c6:6b:ba:9e:0c:01:d5:c5:0b:f5:0a:68:18:0f:5b:
         77:b0:47:f1:f1:7c:45:37:0d:22:b0:00:7a:81:d3:59:ca:e2:
         e5:49:e1:82:46:74:97:e1:56:42:d6:7a:60:ef:7f:5e:3b:25:
         a3:81:46:4f:fc:53:e7:eb:86:a7:ec:6a:5f:df:82:7a:9e:a2:
         a3:22:f9:9c:87:e3:18:83:92:87:cb:cf:be:09:7e:15:b5:12:
         64:18:c1:e3:15:08:22:80:0c:8c:f9:49:61:bb:44:8a:51:52:
         5b:e4:87:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 06:45:51 2025 by rpki-client