Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ae54fc58-a9c4-3f95-a27c-55b2084b7029.roa
File:                     ae54fc58-a9c4-3f95-a27c-55b2084b7029.roa (raw, json)
Hash identifier:          XKnLy9lMutWuJ0apDldNryPSv0RnENdBAu/Bxsz8NHI=
Subject key identifier:   9B:43:11:CC:5C:B7:22:57:30:E6:7F:86:87:0F:0A:33:89:DA:D5:53
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584B6201F75543C1AD36E1DAA100
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ae54fc58-a9c4-3f95-a27c-55b2084b7029.roa
Signing time:             Thu 02 Oct 2025 01:00:31 +0000
ROA not before:           Thu 02 Oct 2025 01:00:31 +0000
ROA not after:            Wed 31 Dec 2025 02:00:31 +0000
asID:                     19905
IP address blocks:        2604:2e8a:1800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:62:01:f7:55:43:c1:ad:36:e1:da:a1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Oct  2 01:00:31 2025 GMT
            Not After : Dec 31 02:00:31 2025 GMT
        Subject: CN=70698f8a-945c-478c-8166-cf4b4ceac6a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:bf:66:e5:07:2b:f1:60:45:5e:81:11:fe:b5:
                    d1:0a:a6:11:c6:e0:bb:35:dc:09:59:42:5a:6d:8b:
                    17:d1:13:e7:be:d6:c0:69:26:d7:48:a3:88:45:26:
                    af:c2:e7:45:b9:58:f1:f7:8d:d2:82:dc:a5:f3:b5:
                    86:37:35:be:d2:d2:24:c7:1f:97:11:77:c2:03:ac:
                    18:dc:db:49:fa:8f:7c:ba:ee:c2:11:5f:b4:93:74:
                    c6:9a:27:6a:fb:5c:28:34:0a:74:f8:d6:99:76:52:
                    77:6d:d1:33:b7:c3:1a:6f:f1:75:c8:71:e3:5d:6c:
                    21:ee:d7:2a:30:52:e1:cf:89:50:f9:77:62:4f:d0:
                    43:58:6e:be:a2:ba:b2:cb:1c:38:88:5c:31:84:4d:
                    18:a4:6e:24:91:7f:e0:22:b1:91:d8:0e:1b:be:2a:
                    48:5c:aa:0d:1a:fe:1a:c6:5a:e8:b3:3e:19:f0:4a:
                    94:86:37:79:be:c9:7a:02:d0:dd:b4:15:98:66:dd:
                    78:94:3a:4f:89:6e:de:89:ef:a6:37:c8:41:f4:c1:
                    96:af:81:af:ee:d7:30:aa:62:33:69:68:3c:1e:a5:
                    d1:55:ec:03:09:50:3a:e8:af:4a:45:cd:95:f6:90:
                    f4:c9:f8:98:58:a7:51:7e:cc:f3:f7:9c:b5:a8:69:
                    dc:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:43:11:CC:5C:B7:22:57:30:E6:7F:86:87:0F:0A:33:89:DA:D5:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ae54fc58-a9c4-3f95-a27c-55b2084b7029.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8a:1800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:10:bf:68:0e:f1:8a:9f:a4:63:7b:14:0d:cb:9f:56:6e:cd:
         64:79:4e:a0:cf:4e:ea:ce:6f:4d:19:0e:74:a3:f8:aa:cd:07:
         fb:77:a5:f2:90:6b:1d:41:37:4d:19:dd:cd:65:f7:2d:34:cc:
         69:09:ce:bc:ad:d5:0f:7a:f4:39:b4:81:94:4e:83:aa:f6:15:
         25:25:cd:f3:a1:0c:29:3b:a2:dc:a4:a5:0c:ca:25:0c:b8:78:
         f5:89:28:63:42:59:85:05:0e:7d:23:e7:63:b6:ea:c7:f5:06:
         78:94:af:ec:5a:13:ff:2c:d3:c4:d6:65:ac:14:6a:5e:52:70:
         82:72:30:48:ec:74:95:d8:c1:18:a4:b5:13:70:9b:b5:54:48:
         a1:8b:70:12:83:52:cd:83:b2:9e:fb:37:27:bd:be:b9:17:c0:
         5f:ef:7f:53:f0:6e:88:9b:e4:ea:36:ce:af:c9:b1:59:49:f3:
         6f:05:8d:b2:7b:c3:0e:9b:68:77:33:4d:d9:8b:8d:15:95:90:
         9a:20:6c:bc:0f:0f:b1:ba:0e:83:49:54:4b:6b:ea:f7:ab:ac:
         e9:08:42:80:a5:9b:18:1d:63:a0:a4:0a:19:4d:3a:98:36:0f:
         28:f9:7a:d6:8b:8e:7c:62:10:82:e6:56:8b:51:cd:d3:a5:1c:
         9c:8f:ab:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:23:57 2025 by rpki-client