Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/86e2062f-04a5-3fdb-83ac-1e849962be54.roa
File:                     86e2062f-04a5-3fdb-83ac-1e849962be54.roa (raw, json)
Hash identifier:          ioYn0HYLBclGzF46pyWm2Mi/X3pWXtTLssXDmU4wn94=
Subject key identifier:   73:8A:3B:3A:D6:EC:CF:83:6D:76:BB:8F:C6:1A:72:F3:FA:7E:90:04
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584B821E2053EF3AA70B1B48D100
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/86e2062f-04a5-3fdb-83ac-1e849962be54.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     30036
IP address blocks:        2604:2e8d:d000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1e:20:53:ef:3a:a7:0b:1b:48:d1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=eac70fcd-4977-4231-b9af-2c216ba37996
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:28:0b:2f:16:fc:9b:8f:13:8f:6c:1d:de:68:
                    3e:9c:03:0e:42:59:3a:94:d5:8c:65:01:9e:15:8c:
                    68:17:91:aa:39:98:43:66:d2:37:14:6d:0e:35:c2:
                    be:7f:ac:6b:85:56:e8:7b:75:da:cb:e4:92:38:c6:
                    68:ee:43:09:54:22:3b:14:60:e7:3c:5e:c4:1b:1a:
                    fa:94:a9:ad:25:7f:4f:c1:cd:83:8c:ba:dd:5f:2e:
                    36:dd:d6:97:13:f9:36:31:e4:af:a0:bf:c8:1c:69:
                    29:35:f0:48:38:1b:8a:aa:9c:08:ff:9f:4c:d8:4a:
                    24:ce:ac:a5:04:e9:80:e5:bd:80:d8:c8:52:a3:9e:
                    ff:45:65:91:5a:81:2c:68:0c:91:31:22:b5:a1:ea:
                    bf:22:c5:5b:63:a3:29:f4:d5:65:1b:fe:ad:4c:2a:
                    84:40:f1:1e:29:40:e1:8a:d9:c6:c5:b0:43:29:26:
                    1d:0b:17:49:38:18:ff:66:f6:bc:fc:e0:28:a6:67:
                    75:c2:88:0f:2d:10:e0:3a:8a:20:40:70:35:bc:47:
                    67:a2:6a:72:32:b9:f7:23:2c:45:22:81:e1:75:55:
                    4b:13:ca:75:02:49:7a:9b:48:43:7e:35:6a:c3:9d:
                    60:5b:75:af:0f:c6:96:35:2d:de:5a:a7:8a:f1:57:
                    f8:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:8A:3B:3A:D6:EC:CF:83:6D:76:BB:8F:C6:1A:72:F3:FA:7E:90:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/86e2062f-04a5-3fdb-83ac-1e849962be54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8d:d000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:63:ab:af:e1:39:65:b3:98:2f:91:f7:ba:39:da:2e:09:3d:
         df:cd:a0:84:07:ca:a6:d8:b8:3c:d6:2f:2a:9e:78:ea:d4:69:
         15:c7:83:6c:17:4b:92:f4:12:1e:d2:35:0c:0a:8e:26:8d:8f:
         bb:fe:1c:f2:6f:6f:67:99:f1:1a:95:ba:5b:4a:ba:91:7d:c6:
         2e:e3:57:f6:94:b6:67:2a:dd:16:1c:c7:8e:5e:95:e2:a5:94:
         ac:5e:93:a8:37:76:b9:e9:50:af:7f:09:36:4d:e3:7f:52:a0:
         a8:ac:be:c2:42:06:77:eb:34:e6:1d:cf:f1:a0:2f:83:f1:0c:
         f3:9e:93:1d:30:e9:1d:25:31:02:68:46:6b:be:9b:82:d8:51:
         08:c5:3c:30:7d:e0:96:01:03:8b:62:ab:e5:00:17:7c:c1:48:
         41:54:9c:94:5e:71:ce:e7:d8:ff:17:0a:bd:e9:29:98:7f:f9:
         ee:08:8f:89:0d:22:b9:82:93:fb:85:c9:91:cc:df:a4:80:00:
         4d:73:24:36:ad:16:b1:b1:58:99:3a:a0:c5:ff:df:e3:09:ac:
         5a:f5:fe:56:e5:07:1c:b2:89:b0:54:7d:0b:00:fc:22:a5:02:
         27:5e:64:15:27:08:e6:99:7b:57:fe:0a:2f:e9:3b:e9:17:e8:
         28:db:27:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:24:43 2025 by rpki-client