Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cb075658-cb9a-35ee-a8cc-6daa1b8f5193.roa
File:                     cb075658-cb9a-35ee-a8cc-6daa1b8f5193.roa (raw, json)
Hash identifier:          tvsoeoKRTt58GebYF5l2eITdpd0e0EZkMA5T9Ro/IP8=
Subject key identifier:   E1:F7:2C:41:51:32:5E:1F:57:4E:28:BB:29:62:97:C1:1B:6F:C1:CD
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F43285849C20A048338F3FBC3FAFDB300
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cb075658-cb9a-35ee-a8cc-6daa1b8f5193.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     30036
IP address blocks:        2604:2e8d:d400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 May 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:04:83:38:f3:fb:c3:fa:fd:b3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=647c0d9c-b469-4150-b19b-cd56893c8bda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ee:ea:c4:a9:b3:d1:29:ff:ef:30:36:80:68:
                    74:de:bd:ab:7e:2e:52:91:f0:61:d5:11:ab:b1:06:
                    9c:7e:d0:00:dd:2f:fb:11:79:aa:88:29:94:d2:77:
                    03:c8:89:d4:0f:55:1b:17:b0:1c:56:e6:61:53:12:
                    ea:78:9a:82:fb:35:e7:30:1a:38:db:2c:b7:6b:72:
                    8b:b5:15:a7:11:e7:6c:2a:f2:0d:0a:6f:8c:79:61:
                    39:71:6a:c1:f0:e5:c7:4e:a1:b0:05:fe:1b:1e:73:
                    9f:54:5a:69:be:e9:61:8c:2f:7e:52:ec:c6:e5:de:
                    19:9f:47:37:2c:c3:5d:f8:4c:ec:f5:39:62:22:00:
                    41:cc:5b:8f:e2:57:a0:51:3b:bd:56:17:f1:2e:09:
                    04:a2:3d:65:92:5b:85:21:92:c2:f8:73:c3:89:33:
                    97:c6:9b:b1:29:4b:f4:1c:96:47:fa:ad:77:1d:0a:
                    d3:9c:fa:d0:d0:c4:a3:d4:7a:d0:2b:43:94:5b:e4:
                    b4:ba:05:25:cb:99:55:73:fb:8b:3c:93:81:b1:f3:
                    2c:ef:3f:39:49:6f:31:b5:fd:eb:15:7a:b0:5b:73:
                    77:69:cb:c3:43:cb:6f:71:1a:30:5e:c1:f1:e8:67:
                    92:ec:11:67:33:26:61:6a:c2:5f:54:1c:92:1b:87:
                    30:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:F7:2C:41:51:32:5E:1F:57:4E:28:BB:29:62:97:C1:1B:6F:C1:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cb075658-cb9a-35ee-a8cc-6daa1b8f5193.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8d:d400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:a5:24:4d:c1:a6:48:23:82:80:bd:02:22:b3:0a:29:c3:e4:
         36:41:01:27:72:3c:ff:9d:d2:c1:45:ab:33:8c:8a:63:f0:dc:
         2b:3e:e2:0c:0b:dd:77:8f:1e:5f:a3:f0:d2:16:56:24:6e:46:
         3d:c6:95:fb:8a:f2:d2:e2:e5:95:2d:a7:4a:5d:4b:32:c4:46:
         ed:aa:ad:a7:e6:bc:ce:05:ed:80:3c:4b:e2:d7:6a:4a:c9:d7:
         13:18:2e:2f:37:e0:71:b1:4f:f7:23:1a:1a:fa:6d:6d:e2:43:
         f2:64:3a:f0:f7:69:c9:d7:45:9b:03:aa:bd:a2:bc:3b:9a:a9:
         58:6b:c9:6c:5c:ed:00:a3:02:cb:69:30:92:47:08:34:81:97:
         8a:39:56:26:1e:94:88:fe:55:a1:71:a2:a3:62:24:59:90:9c:
         e3:82:c2:f5:8a:d6:bd:97:13:85:db:fc:cc:75:5c:01:0d:1d:
         ed:3b:a0:ee:16:89:b5:5e:f9:48:e2:a7:b1:30:54:9e:a1:db:
         bb:47:2c:10:bf:d8:3b:ad:34:9f:ba:cd:4e:34:34:58:b4:52:
         97:56:c1:6f:da:14:f8:14:64:66:42:bb:7b:14:a1:f0:66:7b:
         bb:09:20:fc:3b:79:82:87:55:3d:a4:d3:66:8a:45:6f:01:bd:
         dc:d1:a6:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 01:28:08 2025 by rpki-client