Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b54aff74-14f0-3bd2-9926-5516c6566542.roa
File:                     b54aff74-14f0-3bd2-9926-5516c6566542.roa (raw, json)
Hash identifier:          6Up+Kh0L9dfuEx7vz4Nj0aZss5bJvhe4wtBDVhn9i0E=
Subject key identifier:   BE:12:B4:7B:58:1F:27:A6:EC:E2:01:65:11:FA:87:52:DA:85:9B:49
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584AD3A0FB82C95FF11985D57100
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b54aff74-14f0-3bd2-9926-5516c6566542.roa
Signing time:             Tue 12 Aug 2025 01:00:32 +0000
ROA not before:           Tue 12 Aug 2025 01:00:32 +0000
ROA not after:            Mon 10 Nov 2025 02:00:32 +0000
asID:                     30036
IP address blocks:        2604:2e8c:cc00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d3:a0:fb:82:c9:5f:f1:19:85:d5:71:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Aug 12 01:00:32 2025 GMT
            Not After : Nov 10 02:00:32 2025 GMT
        Subject: CN=49b5ebeb-661b-44c8-a647-8ef05bd07fbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:c6:35:41:21:a1:a8:77:e7:09:84:c3:b5:67:
                    c8:ef:dc:d0:09:f1:7c:62:a1:a4:4f:23:34:25:4e:
                    87:48:c6:2b:8a:3e:05:db:90:a0:7a:d2:36:64:13:
                    f5:74:f4:fb:73:71:23:c0:80:c8:91:d8:b8:19:0b:
                    56:4b:4e:87:d4:a3:39:2e:74:71:31:61:89:a3:f1:
                    75:bb:ff:12:13:78:19:23:bd:f7:98:e7:6e:4a:a0:
                    00:97:ea:2c:8e:2d:01:e4:5a:bf:de:2d:a8:dd:9d:
                    76:9c:1d:a2:45:10:e9:0b:3d:9c:74:03:0e:2c:10:
                    bd:71:bb:2a:76:70:e6:98:7f:2a:4f:fc:1b:ef:35:
                    b5:c8:5b:e3:3d:8a:91:2b:0d:c3:0f:97:c3:a4:e6:
                    fb:13:f5:f8:1b:f6:8a:6a:8d:58:82:49:3b:fc:75:
                    e4:95:60:bc:09:bb:aa:4b:bb:a9:a9:46:fe:60:60:
                    0b:f6:29:4a:f4:0b:41:00:1d:07:fa:98:e4:71:3a:
                    66:dd:d4:38:8b:ee:85:02:5b:88:b6:c7:43:56:2e:
                    15:20:e8:d6:03:47:5c:5a:79:37:08:e6:60:55:ce:
                    14:d5:f2:bf:12:f4:65:8f:dc:75:1e:3a:48:0e:51:
                    19:7c:19:c0:35:68:de:a0:85:9c:40:d5:ab:45:4a:
                    e0:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:12:B4:7B:58:1F:27:A6:EC:E2:01:65:11:FA:87:52:DA:85:9B:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b54aff74-14f0-3bd2-9926-5516c6566542.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8c:cc00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:38:71:d5:10:a5:02:2a:6f:11:d2:d4:1a:19:ae:08:2d:01:
         2c:3e:64:5d:26:6d:4a:ce:98:55:aa:12:9d:7b:20:1d:b4:4b:
         11:57:74:a6:fb:36:6b:7c:42:ca:1d:13:9c:b6:4a:e4:0e:2d:
         a8:2c:89:07:71:33:3f:4b:d2:a7:57:01:7b:92:f5:3a:44:3b:
         20:65:7d:bd:9b:6f:4e:8d:66:01:c6:c9:3f:6a:b3:fa:2f:51:
         91:a4:fe:c4:d7:e3:ed:66:1c:0b:dd:98:51:0b:27:54:5e:da:
         3e:35:0c:9a:9a:32:01:2a:29:78:45:36:da:82:41:e2:fa:1e:
         c9:ab:88:03:d0:67:53:fb:03:e0:3a:c3:8f:d7:a9:51:1d:6e:
         00:89:79:ab:e4:d8:3a:c3:3e:0d:40:92:ff:ec:6c:8c:bc:15:
         d9:f2:c2:3e:58:d1:d6:01:52:db:a6:b8:9f:55:03:cc:ed:f4:
         6e:ba:55:5c:72:5d:64:84:3e:eb:e1:a3:b5:6f:3e:d5:db:ad:
         6c:31:84:90:cf:58:1e:41:aa:51:6e:7f:33:57:29:c1:57:10:
         aa:b3:66:0c:66:be:a3:94:61:72:b7:1a:bb:0f:70:cf:64:ae:
         a8:4d:cf:5b:f6:d2:09:ad:29:0a:4e:89:bf:29:62:6d:6b:81:
         2a:00:ea:c0
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWErToPuCyV/xGYXVcQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI1MDgxMjAxMDAzMloXDTI1MTExMDAyMDAzMlowLzEtMCsGA1UEAxMk
NDliNWViZWItNjYxYi00NGM4LWE2NDctOGVmMDViZDA3ZmJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA18Y1QSGhqHfnCYTDtWfI79zQCfF8YqGkTyM0
JU6HSMYrij4F25CgetI2ZBP1dPT7c3EjwIDIkdi4GQtWS06H1KM5LnRxMWGJo/F1
u/8SE3gZI733mOduSqAAl+osji0B5Fq/3i2o3Z12nB2iRRDpCz2cdAMOLBC9cbsq
dnDmmH8qT/wb7zW1yFvjPYqRKw3DD5fDpOb7E/X4G/aKao1Ygkk7/HXklWC8Cbuq
S7upqUb+YGAL9ilK9AtBAB0H+pjkcTpm3dQ4i+6FAluItsdDVi4VIOjWA0dcWnk3
COZgVc4U1fK/EvRlj9x1HjpIDlEZfBnANWjeoIWcQNWrRUrgkwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFL4StHtYHyem7OIBZRH6h1LahZtJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYjU0YWZmNzQtMTRmMC0z
YmQyLTk5MjYtNTUxNmM2NTY2NTQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujMww
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAizhx1RClAipvEdLUGhmuCC0BLD5kXSZtSs6YVaoSnXsgHbRLEVd0
pvs2a3xCyh0TnLZK5A4tqCyJB3EzP0vSp1cBe5L1OkQ7IGV9vZtvTo1mAcbJP2qz
+i9RkaT+xNfj7WYcC92YUQsnVF7aPjUMmpoyASopeEU22oJB4voeyauIA9BnU/sD
4DrDj9epUR1uAIl5q+TYOsM+DUCS/+xsjLwV2fLCPljR1gFS26a4n1UDzO30brpV
XHJdZIQ+6+GjtW8+1dutbDGEkM9YHkGqUW5/M1cpwVcQqrNmDGa+o5Rhcrcauw9w
z2SuqE3PW/bSCa0pCk6JvylibWuBKgDqwA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 16:42:13 2025 by rpki-client