Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/080f916a-a185-3cdc-a56f-7fcee45bb198.roa
File:                     080f916a-a185-3cdc-a56f-7fcee45bb198.roa (raw, json)
Hash identifier:          0VdDcFbbMGJUlHI9L8eZdxeCxjysk5evSKafipwqhzE=
Subject key identifier:   5F:03:87:D4:48:0F:57:1F:E7:2F:EA:E6:AC:62:FF:AE:46:A1:58:19
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F43285849A4BA3853663C3914FD2D8580
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/080f916a-a185-3cdc-a56f-7fcee45bb198.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     30036
IP address blocks:        2604:2e8a:8000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:38:53:66:3c:39:14:fd:2d:85:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=def70e45-8e62-4eeb-af45-f45f97e45afd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:d3:b0:ef:c5:b9:32:7d:7f:3a:b2:d9:cf:da:
                    20:61:40:e2:c5:c3:4c:4f:96:4d:b9:e8:1b:99:12:
                    08:3e:2b:91:33:8d:0f:b5:fb:e1:08:d0:25:cf:d5:
                    3d:9b:c6:5d:1a:21:49:8c:4a:1b:cb:46:a1:87:a0:
                    53:29:be:49:42:e2:1d:a0:87:e1:a7:a5:ec:63:b6:
                    e8:dd:74:cd:91:aa:fc:90:bc:a0:c9:31:ec:28:c8:
                    2b:82:b5:84:8e:64:f1:a9:02:db:e3:b2:25:be:25:
                    0c:96:1e:1e:f4:10:71:76:77:f7:e1:f1:cb:b3:8d:
                    06:5a:d1:e9:5f:8a:5e:db:a3:9f:df:22:7d:9b:01:
                    b0:19:d8:d8:1f:3f:43:10:c2:3f:48:bf:11:81:bc:
                    66:88:84:11:0c:49:3e:11:ed:f6:24:c1:c4:ab:51:
                    e2:24:b5:a2:45:fb:c9:d6:5d:28:74:42:ed:ae:5d:
                    07:3a:8b:fd:c9:f5:1b:3e:a9:c5:1c:d1:5d:58:14:
                    08:52:cf:0a:09:37:30:cf:8d:9c:d2:20:23:6b:c9:
                    e3:77:6b:22:25:6a:ff:fd:19:60:7f:bc:7b:f5:89:
                    88:0b:12:83:6c:03:03:59:19:72:90:ff:48:92:0a:
                    f4:02:1a:eb:76:f0:ab:53:a3:97:66:27:3f:73:71:
                    f1:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:03:87:D4:48:0F:57:1F:E7:2F:EA:E6:AC:62:FF:AE:46:A1:58:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/080f916a-a185-3cdc-a56f-7fcee45bb198.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8a:8000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:91:fb:fb:c1:04:cb:6a:2d:3d:4c:0e:98:0a:3d:ac:6b:64:
         e8:8c:1a:dc:89:3a:84:cd:d9:08:3b:51:85:98:d9:f0:bf:73:
         a9:37:54:e0:99:ab:19:93:71:f2:29:30:bc:38:92:b4:a4:f8:
         47:88:5b:0b:33:d5:52:b5:42:67:09:4d:34:f8:14:e9:bf:59:
         44:33:03:f4:76:5e:f9:13:37:85:6e:7f:54:b4:7f:38:be:c0:
         17:86:a2:1e:9d:31:a8:8d:c2:1c:c0:0c:11:d0:2c:b1:82:33:
         d6:f9:86:2e:29:5e:f0:6e:8f:dd:fd:11:61:52:34:8b:bf:9a:
         b9:aa:d9:cb:57:31:27:5e:e9:00:5b:10:42:2c:16:c7:df:ef:
         7f:fa:0a:4a:93:ca:36:26:54:22:44:49:6f:e6:a7:42:94:30:
         b7:5c:45:34:fc:24:14:b3:a1:57:cc:81:d0:e1:29:6f:07:90:
         07:f4:90:6d:f2:10:ca:4d:41:03:76:b1:07:88:e6:c8:c5:36:
         79:a7:6f:6c:b7:60:12:23:89:83:5f:5b:3d:53:15:1a:73:a7:
         15:70:38:50:1e:54:f3:a3:ce:23:b8:15:b5:f2:1a:c4:2f:35:
         aa:18:46:c6:62:eb:d4:cf:2f:d4:14:07:22:5c:bd:e9:0d:a9:
         c8:70:89:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 13:43:59 2025 by rpki-client