Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/018e7388-b7bd-3c7a-af26-4b85f00e9a40.roa
File:                     018e7388-b7bd-3c7a-af26-4b85f00e9a40.roa (raw, json)
Hash identifier:          PvZxtJGCxTjLFyoVs7TE0IyXHAUIMS9gHQ4EMKNyeUQ=
Subject key identifier:   82:D9:B2:73:CD:7F:D9:96:A1:E2:63:E2:91:3F:2D:D4:55:7A:1C:D4
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584996C499760CC854D184FBC3A0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/018e7388-b7bd-3c7a-af26-4b85f00e9a40.roa
Signing time:             Sun 20 Apr 2025 13:01:01 +0000
ROA not before:           Sun 20 Apr 2025 13:01:01 +0000
ROA not after:            Sat 19 Jul 2025 13:01:01 +0000
asID:                     30036
IP address blocks:        2604:2e88:4000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:96:c4:99:76:0c:c8:54:d1:84:fb:c3:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Apr 20 13:01:01 2025 GMT
            Not After : Jul 19 13:01:01 2025 GMT
        Subject: CN=4e8b82b4-fc3d-485c-a26b-23aded699e38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:5d:ac:a3:27:69:d4:e3:e6:c2:0d:cc:d4:f4:
                    16:bf:95:03:34:6c:09:5f:f2:92:3b:eb:d7:47:32:
                    b8:9d:54:8d:e2:96:ed:ff:5f:61:72:e8:8b:bc:7e:
                    72:36:5f:91:41:52:49:7e:9a:be:32:62:c1:2b:40:
                    ec:87:77:7f:13:57:d4:53:85:ed:29:38:8b:db:94:
                    12:bb:8e:6c:3f:5a:a7:af:35:02:60:da:bf:ca:46:
                    bd:ff:64:2a:af:69:2b:77:76:ae:3c:af:7a:dd:d1:
                    9e:e1:ff:4a:0b:dc:21:ed:ea:3b:e5:66:72:70:7b:
                    fa:e3:73:fb:11:ef:ed:35:93:ca:59:f5:cf:24:98:
                    80:ff:8c:08:bf:ae:1f:36:99:06:3e:92:82:99:88:
                    f9:9a:ec:58:44:3a:b3:03:36:1d:bf:0f:9b:43:d5:
                    af:e4:58:53:ed:c4:52:42:a3:1f:25:28:97:97:be:
                    8d:66:50:1f:9d:ad:77:2e:6a:b7:a9:50:bd:31:c8:
                    bb:16:23:ae:13:cc:ca:f0:76:b1:6d:06:f8:51:60:
                    d1:4d:3b:ff:0e:07:ea:39:b8:e3:76:eb:b6:32:4d:
                    72:b2:3f:82:09:c8:94:ef:0c:8c:0c:8e:f4:74:83:
                    92:1b:f8:71:90:d5:78:3a:a5:c2:7b:20:93:3a:2f:
                    cd:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:D9:B2:73:CD:7F:D9:96:A1:E2:63:E2:91:3F:2D:D4:55:7A:1C:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/018e7388-b7bd-3c7a-af26-4b85f00e9a40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e88:4000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:60:45:80:fb:cc:30:bd:f5:37:48:55:8f:c1:98:ff:ab:db:
         0b:53:f0:62:3e:83:28:e6:6e:2e:3f:10:97:53:18:27:47:13:
         8b:61:a8:24:6c:3c:dc:82:96:c8:1f:fa:75:c3:3d:a1:d5:79:
         cf:34:21:e6:63:7b:0e:4a:86:fe:e1:62:20:c8:a4:bc:71:74:
         d3:d5:15:82:b2:be:d9:38:11:3d:ee:c6:20:bc:7d:08:a3:52:
         6e:4e:74:50:eb:75:c8:26:5f:7d:7f:bc:22:73:4e:85:d4:03:
         72:e4:03:76:7f:00:c1:ec:34:ae:3d:2b:4a:8c:9c:ba:42:49:
         20:05:11:0a:2d:19:2f:cc:b1:6b:e6:86:e4:ad:f6:7c:49:12:
         79:13:32:7a:04:8a:db:14:07:e4:87:e7:a8:49:38:e1:e1:5c:
         2a:b6:1c:76:d3:b0:4f:b4:3a:1d:e9:2c:9f:47:01:cb:b2:52:
         77:e5:7e:a0:3e:4f:ec:15:f1:5a:d3:2d:21:6f:c2:ce:88:55:
         de:30:1a:a2:7b:1d:6d:6f:f3:96:de:aa:40:9f:1f:c0:1a:34:
         01:77:e8:14:72:d8:dc:29:56:72:9b:fd:dd:97:a1:88:a3:46:
         25:76:bb:3b:ea:ab:0c:09:d0:1a:a7:fd:46:75:42:d1:90:23:
         06:89:23:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:33:26 2025 by rpki-client