Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0f7884a6-ed57-3fce-b2c0-5d8c64e4a1b0.roa
File:                     0f7884a6-ed57-3fce-b2c0-5d8c64e4a1b0.roa (raw, json)
Hash identifier:          w8XxWOexcVOED3j3TsUVc0DSPIJXtl1rNjgkfJouwa0=
Subject key identifier:   95:BB:2D:76:16:00:09:41:F0:B9:B7:80:B5:A6:CB:FA:CD:62:D7:93
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584A8410E680CE1038A373382F00
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0f7884a6-ed57-3fce-b2c0-5d8c64e4a1b0.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     30036
IP address blocks:        2604:2e8a:2400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:10:e6:80:ce:10:38:a3:73:38:2f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=e7dd7570-9751-4093-9982-ed1c80efe436
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:13:c8:a5:f0:fe:a9:34:c8:c7:3a:5d:82:88:
                    37:63:3f:10:f5:97:f3:67:e3:a2:fb:fb:bc:27:40:
                    4d:41:30:42:9a:d2:ce:4e:1b:85:20:c7:39:5a:1a:
                    4a:4d:dd:47:c1:1e:02:18:95:9d:41:2c:bd:ae:1f:
                    65:05:0a:85:c8:f7:63:1a:c2:eb:6e:6b:b1:6c:a6:
                    37:8d:a8:dc:47:e5:eb:99:2a:28:c6:50:d3:ef:02:
                    a3:97:df:50:fa:b8:72:50:96:a0:3f:ad:3a:b7:4a:
                    a9:81:64:24:d0:7d:cc:ad:bf:ce:60:b6:95:a3:33:
                    fd:81:6a:86:fe:35:82:0f:50:83:33:06:92:ec:f3:
                    11:5b:33:41:b5:a8:f4:7b:7e:af:8f:2c:b8:7e:1f:
                    21:16:14:70:22:92:2e:c7:f7:9f:71:3e:c5:8e:63:
                    84:76:b2:69:5d:a2:35:8e:55:50:aa:08:12:f7:63:
                    0d:b3:dc:49:6c:72:0a:ab:7f:62:fa:5f:6a:ba:ef:
                    67:fb:0d:85:f9:d8:ca:dd:a5:df:ab:03:f4:62:1f:
                    1c:24:25:40:4a:60:46:74:be:72:af:df:5d:40:95:
                    88:05:88:91:d0:b3:e5:a4:b7:06:9e:f1:dd:4a:e5:
                    03:1d:16:83:d4:25:5e:d1:f8:43:47:ad:c2:cd:47:
                    8d:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:BB:2D:76:16:00:09:41:F0:B9:B7:80:B5:A6:CB:FA:CD:62:D7:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0f7884a6-ed57-3fce-b2c0-5d8c64e4a1b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8a:2400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:5c:a0:18:87:f6:2e:0a:98:43:3d:24:4f:fc:b2:95:11:97:
         ae:e4:d6:c8:c9:23:28:72:85:6c:6b:54:4c:2f:01:91:a8:90:
         ce:14:c5:13:dd:d0:98:fc:5a:b8:26:00:b5:f1:30:3f:65:23:
         ec:d5:31:f4:fa:79:53:1d:80:3c:bb:05:12:cc:a0:41:90:46:
         38:d3:2e:e2:5e:f6:70:c6:cf:f6:09:23:28:c2:51:2d:a1:5e:
         9a:58:05:cd:d8:59:0a:be:36:91:e3:62:d6:c4:cc:b5:41:e3:
         9a:b0:18:a0:98:75:5e:0f:c9:62:5d:37:0e:93:cb:68:a0:86:
         b9:14:26:6c:32:db:c1:c7:81:c6:41:26:f6:8f:3c:08:1c:dc:
         30:29:83:98:cc:c0:20:f5:b3:98:23:10:11:49:d9:d6:99:ec:
         9a:0b:66:c7:7f:b4:8b:36:1f:7e:d5:4e:21:6b:26:6f:75:d4:
         31:8a:df:42:28:c8:f8:fc:85:86:37:bf:54:0a:b0:5a:d8:94:
         1c:96:db:5d:8c:21:b6:c6:a1:c9:7f:75:ff:79:dd:79:01:ec:
         6b:e9:a3:27:4a:e9:1b:6c:e6:7d:cc:9f:e8:1a:20:26:62:76:
         e4:b3:26:61:48:30:b6:c4:10:5e:3e:93:09:31:d2:cc:80:aa:
         06:37:e6:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 13:09:58 2025 by rpki-client