Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/68d99f85-b937-338f-9406-78fc948e527c.roa
File:                     68d99f85-b937-338f-9406-78fc948e527c.roa (raw, json)
Hash identifier:          w1Szjra3pnNit/4edUeZ8G+zkS7NR5aIrTNv0lEYWaM=
Subject key identifier:   3F:E4:28:DF:88:DE:53:84:7E:1A:4B:7B:1D:52:F7:A5:C6:22:FA:CA
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584AEBC66853AAD58B9259A33400
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/68d99f85-b937-338f-9406-78fc948e527c.roa
Signing time:             Wed 20 Aug 2025 16:35:29 +0000
ROA not before:           Wed 20 Aug 2025 16:35:29 +0000
ROA not after:            Tue 18 Nov 2025 17:35:29 +0000
asID:                     19905
IP address blocks:        2604:2e87:b000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:eb:c6:68:53:aa:d5:8b:92:59:a3:34:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Aug 20 16:35:29 2025 GMT
            Not After : Nov 18 17:35:29 2025 GMT
        Subject: CN=0238bae7-cd0b-4591-85d9-728f25d4477c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:4d:5f:e5:85:a5:01:31:70:89:eb:a4:73:5b:
                    37:4d:2e:22:f0:66:2c:b9:53:ec:c2:fa:5b:a4:b7:
                    e2:bc:37:b8:62:1c:4e:a9:da:50:d3:58:cd:05:92:
                    c4:85:36:74:43:f8:43:8c:7c:31:58:63:b3:0a:f4:
                    57:30:d9:1f:97:cb:97:26:13:2d:f3:8d:35:cf:ef:
                    ef:6c:54:d1:b8:ca:a8:b0:c5:2a:92:43:93:dc:df:
                    9e:78:7d:25:a4:11:ba:51:0d:15:d9:f1:bd:f4:af:
                    24:49:6c:c2:9d:b4:2b:ec:6c:be:1e:48:d7:28:47:
                    4f:6b:38:09:12:d0:80:03:04:56:7f:09:1e:f6:81:
                    9c:91:03:cc:db:ab:46:3f:b2:38:db:b1:23:8c:84:
                    22:2c:26:8f:c6:ad:cf:72:cc:65:e6:b5:97:73:38:
                    45:67:9b:59:67:12:39:9d:48:5d:51:0b:42:a8:9e:
                    b3:62:ad:1f:e0:90:fb:e1:18:68:84:7b:84:b6:36:
                    b1:07:7e:47:7b:97:f3:cb:ac:59:16:0b:62:26:b1:
                    25:91:7e:d7:41:01:9c:9a:e5:16:7e:58:00:0a:1c:
                    10:b5:eb:aa:c6:5c:f6:70:d1:0f:47:97:af:90:58:
                    ff:55:da:b5:ac:86:b0:72:66:f5:04:d8:e5:08:96:
                    99:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:E4:28:DF:88:DE:53:84:7E:1A:4B:7B:1D:52:F7:A5:C6:22:FA:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/68d99f85-b937-338f-9406-78fc948e527c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e87:b000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:4a:bf:0a:dc:75:1e:bc:99:47:db:44:25:cf:a6:a5:c8:4b:
         07:ec:fc:6b:b5:82:53:6c:8d:41:83:6e:c7:e4:f6:86:f8:b6:
         c1:a3:e0:dd:84:70:ca:8e:d7:88:f5:05:0a:10:0e:48:38:fa:
         80:c1:e1:bd:f0:0f:99:f6:8d:fb:30:22:6b:30:dc:65:63:ed:
         c9:b7:73:6e:5a:b9:4f:a1:f7:99:b5:d7:0d:fd:80:4a:4f:05:
         95:7e:47:45:89:db:0c:e6:8f:4e:f8:cd:ae:87:c2:75:45:34:
         9a:c8:d8:67:23:c5:8e:76:c5:99:b4:56:d9:80:33:92:8c:9f:
         1e:20:58:12:1c:c3:f9:c2:57:9b:ac:8c:c0:fc:e9:c5:33:42:
         dd:25:dd:3a:75:84:8f:e4:94:e3:29:e9:1b:de:c4:59:f0:cd:
         ca:bc:7c:2e:d3:c5:ef:e1:3b:e0:2c:1d:b1:84:2c:4d:68:b5:
         d9:e3:3c:c9:bb:57:93:d8:8d:af:9f:e6:50:f9:a1:86:15:7a:
         33:c4:ce:fd:25:1b:1d:99:c5:06:c3:13:9a:0a:70:41:5f:c2:
         fc:d9:30:d9:13:02:af:1e:d5:5a:9b:20:25:2d:63:3e:62:45:
         f5:4f:40:90:2e:3c:46:8a:b1:6e:40:30:53:fe:45:7e:cd:ac:
         25:84:49:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 08:24:59 2025 by rpki-client