Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/55faf23e-db71-3a98-a34c-c0e180b980fc.roa
File:                     55faf23e-db71-3a98-a34c-c0e180b980fc.roa (raw, json)
Hash identifier:          dKW5Fwnyr6bfPToDN3GeCC0OcIZWyL5Zzk86E8jyRAw=
Subject key identifier:   5C:78:DB:91:16:D4:F2:4B:E7:CA:EE:D2:F7:11:54:28:85:D8:2D:B0
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584B6201FC4A5314A3391244FC80
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/55faf23e-db71-3a98-a34c-c0e180b980fc.roa
Signing time:             Thu 02 Oct 2025 01:00:31 +0000
ROA not before:           Thu 02 Oct 2025 01:00:31 +0000
ROA not after:            Wed 31 Dec 2025 02:00:31 +0000
asID:                     19905
IP address blocks:        2604:2e8b:ec00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:62:01:fc:4a:53:14:a3:39:12:44:fc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Oct  2 01:00:31 2025 GMT
            Not After : Dec 31 02:00:31 2025 GMT
        Subject: CN=983feb19-0266-4932-a5de-ffca294253db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ac:7a:6f:92:ea:5f:29:45:0c:a3:21:80:d8:
                    5f:26:6d:7f:90:70:43:03:8e:62:ad:72:6e:88:d7:
                    27:b5:b4:a8:29:94:15:27:b7:8a:d3:03:86:43:e6:
                    de:f8:62:c3:81:04:fe:5d:97:79:5e:e8:12:54:96:
                    da:1e:13:a0:ec:2d:a8:86:41:fe:cd:47:3e:36:a0:
                    89:c1:f3:08:50:ff:32:1f:03:1f:9f:e1:ca:65:09:
                    50:09:5b:3d:00:79:90:ed:57:3e:95:22:5e:2a:29:
                    f2:90:9a:0e:f1:4a:14:e4:3d:55:0c:cf:0e:70:fa:
                    ab:58:92:ad:a2:67:bc:4d:61:78:c4:bb:e5:bb:a8:
                    a0:49:6f:b6:13:29:46:ae:aa:7c:a8:a9:65:01:11:
                    dc:6c:b2:07:d1:aa:6b:ea:11:ff:f3:f7:ef:9a:c1:
                    44:f3:43:2d:7b:f3:d7:c7:09:a9:7e:2c:3d:92:81:
                    5a:58:3c:00:70:fc:3c:eb:f3:e7:a3:db:1f:0e:43:
                    06:df:16:3f:e2:cf:b8:e7:9a:d7:bc:21:a8:06:98:
                    e7:fb:c3:17:52:d1:c3:51:4c:07:f9:c4:b8:f7:1a:
                    1c:17:72:19:c5:a3:37:47:6f:17:0c:8b:ee:4e:a2:
                    9f:ff:99:a9:0b:0a:54:de:51:4c:82:9a:c0:e3:c7:
                    8c:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:78:DB:91:16:D4:F2:4B:E7:CA:EE:D2:F7:11:54:28:85:D8:2D:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/55faf23e-db71-3a98-a34c-c0e180b980fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8b:ec00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:c9:8a:1f:ae:40:30:24:d9:aa:33:b5:11:ab:05:e7:1c:4a:
         04:ab:05:93:2a:36:cb:7e:62:ca:bc:c9:51:68:e3:e6:d5:76:
         de:e0:21:8f:77:27:db:30:31:1c:c9:28:e7:d8:05:62:49:f6:
         2c:b6:f8:b1:c6:77:8c:f3:b9:09:ff:7b:cf:71:b2:d0:d7:84:
         e3:59:eb:c2:71:e9:53:67:d5:42:6c:75:c9:e9:fc:c5:ac:10:
         f3:26:2e:9d:74:3c:17:1b:0e:0d:71:1f:84:6a:68:20:43:a4:
         23:a1:e6:32:cd:58:c7:14:b5:88:4f:45:bc:b8:93:f2:5a:4f:
         d3:e4:2e:3d:fd:cd:7f:2f:96:ee:4d:ad:de:f9:81:92:1f:00:
         90:e3:8d:10:c6:56:97:ce:fe:c8:3c:bb:cd:55:0c:c2:f9:66:
         f1:e6:b7:b8:74:fa:ad:49:fb:1e:59:d6:db:b6:c1:d9:05:91:
         3c:a7:3c:41:96:2d:70:62:06:01:19:f8:52:6f:88:07:ae:79:
         6e:94:04:dc:a4:36:fb:d2:1f:a1:e1:05:c1:09:d4:6f:5c:66:
         d9:fe:05:c1:7d:2b:1c:71:80:e7:d6:ab:62:44:61:80:e7:82:
         a2:c4:7d:20:d7:0c:94:4c:40:f1:c2:ed:4a:46:49:87:ec:ef:
         7e:72:69:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:19:51 2025 by rpki-client