Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d3ffb04f-58cc-3480-bc5b-1cf3b93195b0.roa
File:                     d3ffb04f-58cc-3480-bc5b-1cf3b93195b0.roa (raw, json)
Hash identifier:          jWd00mgfEBISxccK000fjjdp5c8hlfIcehHB6HEij8A=
Subject key identifier:   4B:30:38:C8:F8:09:35:0C:97:98:B8:AB:B4:68:D0:17:8B:31:4F:07
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584B609C8C8582E07227484E7230
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d3ffb04f-58cc-3480-bc5b-1cf3b93195b0.roa
Signing time:             Wed 01 Oct 2025 13:00:41 +0000
ROA not before:           Wed 01 Oct 2025 13:00:41 +0000
ROA not after:            Tue 30 Dec 2025 14:00:41 +0000
asID:                     19905
IP address blocks:        2604:2e87::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:60:9c:8c:85:82:e0:72:27:48:4e:72:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Oct  1 13:00:41 2025 GMT
            Not After : Dec 30 14:00:41 2025 GMT
        Subject: CN=0424a498-161e-4b4d-a785-5a757bf18a95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:22:fc:74:f0:5d:ec:56:81:44:24:f8:10:6e:
                    ad:e9:72:e6:ff:6e:ac:7b:d0:9c:5f:01:5f:40:07:
                    50:b9:66:86:c6:84:2a:3b:08:ad:e2:8c:3e:f3:de:
                    8b:9d:7e:0e:62:22:d2:a7:4f:4f:8b:43:5b:b8:c7:
                    ce:a3:16:5d:4c:e0:f3:75:11:60:a5:6a:e9:8c:81:
                    b9:ec:87:df:af:78:ec:58:14:ef:ba:6f:08:c6:1d:
                    37:3f:2b:7b:87:7f:0c:12:28:fd:37:a2:2b:41:33:
                    b0:93:43:00:58:80:ed:51:be:5c:d2:32:69:1e:2e:
                    b1:70:dc:02:2e:9a:5f:45:e0:c8:08:71:05:89:6b:
                    41:1f:3a:99:93:e1:0b:90:a3:58:80:ab:7c:59:cd:
                    d8:fc:10:20:6d:81:dc:a3:c5:02:a7:32:00:ad:11:
                    6f:0a:24:ce:8a:de:8b:45:22:8d:db:70:ac:14:b5:
                    5d:e4:53:0d:65:60:4f:81:f5:eb:9a:11:ad:24:04:
                    b4:dc:2d:b3:19:d6:8b:14:fc:15:54:d1:f1:9f:8e:
                    98:33:c9:56:b8:2e:b4:d1:5b:fa:45:ae:74:e5:0f:
                    32:21:51:37:9e:4e:ac:25:b1:de:4f:9f:04:3c:44:
                    1e:7d:dc:ce:b6:9c:6e:b1:98:d1:c7:b5:5f:fe:d2:
                    61:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:30:38:C8:F8:09:35:0C:97:98:B8:AB:B4:68:D0:17:8B:31:4F:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d3ffb04f-58cc-3480-bc5b-1cf3b93195b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e87::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:b3:1c:39:e1:f1:9d:3c:ff:e3:12:d8:68:ee:3a:d5:f8:8f:
         b4:b8:ae:49:91:90:0a:5e:33:93:57:25:31:00:fb:70:19:ff:
         51:54:80:2c:b9:90:03:c1:2c:34:a4:17:40:1f:22:0a:3e:7a:
         95:2a:c9:dc:1f:e3:15:d3:78:a5:5f:b0:0e:61:7b:2f:96:d4:
         73:71:26:56:e6:26:47:c7:09:a7:28:45:42:25:81:44:f1:86:
         d8:06:f6:21:d8:d0:13:8e:75:52:e7:37:68:c3:63:24:8d:11:
         f7:d7:bf:46:10:75:5b:fd:11:0c:5c:16:f5:57:37:f5:54:97:
         0b:99:ad:04:bf:82:84:9c:36:21:9f:b4:e8:ba:bc:2e:ba:fe:
         45:0b:ba:cb:4b:29:3e:48:70:d3:ee:10:80:8b:c5:7f:3b:ea:
         3e:99:a3:35:3a:ed:04:32:b5:59:ef:da:a2:69:99:ec:bb:bd:
         af:56:4c:b8:8e:75:bf:db:ba:8c:55:e0:4d:e0:05:7b:19:88:
         53:de:e4:f1:4f:44:e0:cd:e4:1e:b3:3e:95:53:a6:bb:48:ea:
         e9:52:34:55:06:72:64:86:93:fa:eb:63:97:4e:53:aa:1c:d6:
         da:60:56:d2:2e:dd:55:2f:9a:c7:10:bd:63:34:8a:13:0d:73:
         f0:03:07:25
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEtgnIyFguByJ0hOcjAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI1MTAwMTEzMDA0MVoXDTI1MTIzMDE0MDA0MVowLzEtMCsGA1UEAxMk
MDQyNGE0OTgtMTYxZS00YjRkLWE3ODUtNWE3NTdiZjE4YTk1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxyL8dPBd7FaBRCT4EG6t6XLm/26se9CcXwFf
QAdQuWaGxoQqOwit4ow+896LnX4OYiLSp09Pi0NbuMfOoxZdTODzdRFgpWrpjIG5
7Iffr3jsWBTvum8Ixh03Pyt7h38MEij9N6IrQTOwk0MAWIDtUb5c0jJpHi6xcNwC
LppfReDICHEFiWtBHzqZk+ELkKNYgKt8Wc3Y/BAgbYHco8UCpzIArRFvCiTOit6L
RSKN23CsFLVd5FMNZWBPgfXrmhGtJAS03C2zGdaLFPwVVNHxn46YM8lWuC600Vv6
Ra505Q8yIVE3nk6sJbHeT58EPEQefdzOtpxusZjRx7Vf/tJhoQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFEswOMj4CTUMl5i4q7Ro0BeLMU8HMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvZDNmZmIwNGYtNThjYy0z
NDgwLWJjNWItMWNmM2I5MzE5NWIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuhwAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAdrMcOeHxnTz/4xLYaO461fiPtLiuSZGQCl4zk1clMQD7cBn/UVSA
LLmQA8EsNKQXQB8iCj56lSrJ3B/jFdN4pV+wDmF7L5bUc3EmVuYmR8cJpyhFQiWB
RPGG2Ab2IdjQE451Uuc3aMNjJI0R99e/RhB1W/0RDFwW9Vc39VSXC5mtBL+ChJw2
IZ+06Lq8Lrr+RQu6y0spPkhw0+4QgIvFfzvqPpmjNTrtBDK1We/aommZ7Lu9r1ZM
uI51v9u6jFXgTeAFexmIU97k8U9E4M3kHrM+lVOmu0jq6VI0VQZyZIaT+utjl05T
qhzW2mBW0i7dVS+axxC9YzSKEw1z8AMHJQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:52:26 2025 by rpki-client