Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/23b91f5f-e9f4-38d3-8eac-03f2ab20216b.roa
File:                     23b91f5f-e9f4-38d3-8eac-03f2ab20216b.roa (raw, json)
Hash identifier:          N+9P7hyxueGMyblYR0rlw7Pt7lb14Rsz3fbZZeJphxs=
Subject key identifier:   A3:90:7F:CF:FE:CA:05:DD:DC:C1:5B:94:4B:12:55:EC:30:A2:01:6E
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584AD3A0FBE19EF88366FAD40EC0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/23b91f5f-e9f4-38d3-8eac-03f2ab20216b.roa
Signing time:             Tue 12 Aug 2025 01:00:32 +0000
ROA not before:           Tue 12 Aug 2025 01:00:32 +0000
ROA not after:            Mon 10 Nov 2025 02:00:32 +0000
asID:                     30036
IP address blocks:        2604:2e8d:c00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d3:a0:fb:e1:9e:f8:83:66:fa:d4:0e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Aug 12 01:00:32 2025 GMT
            Not After : Nov 10 02:00:32 2025 GMT
        Subject: CN=6585247d-7e8c-4c60-ab59-d964caac8a62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:23:2b:b4:0a:60:ad:0b:da:1b:c1:f0:16:16:
                    95:66:b0:f9:45:73:39:b4:82:af:0a:38:12:63:83:
                    26:de:89:19:de:c1:91:df:f4:97:37:07:f4:fc:98:
                    2d:a2:72:32:3d:2a:63:db:15:df:2f:95:40:af:a9:
                    5d:9d:08:e2:95:80:31:33:e5:7b:79:e4:fb:1b:57:
                    3b:05:65:53:5d:27:42:f9:15:cf:82:b7:af:38:7b:
                    23:a9:31:e1:55:91:7c:5c:6c:95:b5:60:d9:4e:42:
                    f1:5d:53:9d:aa:d3:8f:7f:67:c5:d9:91:ac:ac:2f:
                    43:3e:65:d6:1c:ea:b4:b9:ef:18:5d:15:a1:6e:58:
                    9a:3b:0a:db:62:72:1b:c3:22:30:bc:13:d8:fe:04:
                    fd:69:a9:4b:3e:8b:9b:e6:1b:3d:28:b0:f1:b3:2d:
                    8f:91:53:1a:2e:6e:f7:dc:e7:9b:21:a4:73:76:d0:
                    72:ac:cd:09:f8:0f:d4:af:40:f1:83:63:55:f5:76:
                    e0:91:ba:de:a8:16:e9:25:f2:82:42:43:5d:cd:74:
                    9a:cf:2e:08:17:1c:67:0b:6e:56:43:fe:28:81:5d:
                    ca:7b:9e:e5:b5:6c:96:16:77:29:f7:f1:31:a5:de:
                    d3:ab:a6:65:fa:22:71:ff:2c:fa:df:03:88:9c:f0:
                    48:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:90:7F:CF:FE:CA:05:DD:DC:C1:5B:94:4B:12:55:EC:30:A2:01:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/23b91f5f-e9f4-38d3-8eac-03f2ab20216b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8d:c00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:53:33:7a:df:85:c6:5c:16:97:49:b7:38:f5:b8:c2:5a:8b:
         b3:21:91:a7:8e:ca:ed:0b:36:65:74:cb:9f:97:45:59:cd:b4:
         aa:77:74:6f:74:65:ea:80:e1:7e:6b:a1:fd:7d:4c:59:a6:27:
         64:36:8c:39:95:39:4e:a6:50:ce:8a:e9:0c:bf:eb:23:62:31:
         f4:51:c0:08:6a:71:26:23:59:a6:48:98:a0:45:09:60:80:fe:
         da:b5:d1:8e:ab:51:42:d6:81:79:5a:c6:d5:eb:4d:11:30:20:
         11:1b:78:e2:5f:f7:39:44:c9:f5:57:ce:6c:3e:33:19:ed:a8:
         a5:fa:5a:96:52:eb:0a:47:60:ec:14:d2:11:43:66:bc:e8:20:
         3c:39:a7:64:e1:c7:93:73:43:a8:ff:f8:95:87:4c:11:d4:1b:
         75:8b:45:2f:fe:35:de:65:5d:75:71:80:ef:29:de:5a:d9:57:
         51:ab:57:c2:05:31:1f:76:9c:ad:0b:ff:f7:a9:9e:e5:65:67:
         7b:50:21:86:8f:99:93:cd:ed:d4:a8:2a:ea:c5:bf:56:87:88:
         09:64:c4:11:c5:6f:56:97:f3:f1:99:58:b9:f3:eb:f1:4a:da:
         df:42:bc:6f:e1:7b:5f:0a:a7:4c:a0:cf:b5:11:7c:92:49:aa:
         81:ca:28:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:25:43 2025 by rpki-client