Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0456ae36-c9c2-3efb-8b73-a3ef8cb67949.roa
File:                     0456ae36-c9c2-3efb-8b73-a3ef8cb67949.roa (raw, json)
Hash identifier:          r8OyuzprW7XmTKabETLPtteQZU85RvizGYK8Zrt+BjE=
Subject key identifier:   88:03:86:CC:ED:05:23:26:A5:D9:55:5C:0D:FB:60:3B:9B:7B:BA:3E
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584A814649953A9CC1086C4A1200
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0456ae36-c9c2-3efb-8b73-a3ef8cb67949.roa
Signing time:             Sun 13 Jul 2025 13:01:03 +0000
ROA not before:           Sun 13 Jul 2025 13:01:03 +0000
ROA not after:            Sat 11 Oct 2025 13:01:03 +0000
asID:                     30036
IP address blocks:        2604:2e8c:b800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:81:46:49:95:3a:9c:c1:08:6c:4a:12:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jul 13 13:01:03 2025 GMT
            Not After : Oct 11 13:01:03 2025 GMT
        Subject: CN=0282ca3d-a571-4eec-b780-2588d120289d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:fa:34:3f:50:c2:da:dd:ad:69:75:03:df:0f:
                    de:3b:06:5b:04:2d:c7:0e:86:23:7c:8e:59:5e:d4:
                    31:a3:7c:81:07:2f:fc:bf:a4:ee:cb:8d:65:c5:db:
                    d4:89:51:3c:09:cb:ee:76:5c:87:f9:ec:65:59:0e:
                    26:e5:6f:04:34:c3:cd:a4:11:58:52:95:28:ea:01:
                    af:e5:ed:35:eb:eb:f6:e9:05:19:82:bf:e3:68:3e:
                    e7:e6:e3:2c:f6:52:97:22:4f:7e:73:18:40:3f:ce:
                    6c:1a:fc:94:7a:7e:b3:c3:f4:98:91:26:e8:9c:b3:
                    8b:99:9a:f3:36:a9:7f:1d:97:f5:f9:aa:b9:69:02:
                    2c:b2:43:46:8e:46:ce:5b:63:50:19:1a:1b:81:97:
                    1a:cc:d5:7e:d1:b8:05:03:c1:af:ac:20:c3:56:9a:
                    c2:79:ed:5a:c1:4b:e2:d9:92:5b:b4:f7:00:57:06:
                    1b:ac:c7:e6:5e:9f:75:cf:b2:c9:06:be:6f:33:d5:
                    12:0e:ab:14:56:5c:54:54:98:bc:01:97:f6:a0:df:
                    c9:2f:5b:f1:30:b8:85:1e:81:19:88:c2:bb:c6:43:
                    90:69:16:c1:3c:f4:bd:7e:64:44:08:c6:ce:93:52:
                    a7:15:c0:b9:93:c1:b8:e3:e3:dc:ec:eb:bf:e0:56:
                    82:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:03:86:CC:ED:05:23:26:A5:D9:55:5C:0D:FB:60:3B:9B:7B:BA:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0456ae36-c9c2-3efb-8b73-a3ef8cb67949.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8c:b800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:ca:a8:e9:d5:31:7e:30:f1:de:ae:99:3d:d8:14:dd:23:c5:
         56:2a:32:25:74:90:8b:81:57:9e:62:f3:6a:81:1d:a8:92:90:
         52:9c:70:7c:de:9e:75:be:47:8c:b8:d8:84:56:ba:b8:da:3f:
         19:14:b9:0a:4c:31:50:2c:18:21:e4:6d:b4:17:51:13:16:84:
         af:9c:d8:10:2b:ad:58:c4:42:1f:f2:b7:da:23:29:26:b8:7a:
         02:de:a9:12:82:e9:5c:f9:1d:cd:ef:11:f5:ae:01:41:84:d5:
         90:c9:c4:70:48:8d:c6:31:1e:4a:71:41:47:e3:16:87:b4:6d:
         e9:26:55:36:f0:14:7a:7d:0b:68:a3:72:7f:82:a8:53:8d:8a:
         bf:e4:6c:73:bb:97:2c:dc:12:dd:4b:86:24:c4:e5:54:7b:44:
         df:39:6b:26:8b:10:04:fb:3f:02:1f:83:84:d5:33:bc:c6:11:
         e3:49:ac:18:47:61:b5:50:cc:47:4e:de:dd:04:11:01:4c:38:
         64:57:bb:8e:35:15:f5:65:94:23:07:92:de:9f:a7:00:6e:32:
         33:b0:c6:50:8d:88:c2:12:bc:63:13:e8:3b:f8:31:6f:bb:a9:
         83:ab:29:a3:3b:e4:30:bf:ab:9d:a9:d7:eb:79:ab:3e:22:8d:
         3a:ee:0e:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:00:06 2025 by rpki-client