Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/283700c8-ff0e-3b4f-8b03-b2d80ba72228.roa
File:                     283700c8-ff0e-3b4f-8b03-b2d80ba72228.roa (raw, json)
Hash identifier:          AKHXRFinzd5qzGPjCeTmrEPAjH0CUVVWm0+Ym00GMzE=
Subject key identifier:   0D:5A:84:FC:4E:5B:0C:DA:3E:0A:C9:E2:82:8C:B4:10:72:CF:39:8E
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584996C49A8E5625890D4FA46500
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/283700c8-ff0e-3b4f-8b03-b2d80ba72228.roa
Signing time:             Sun 20 Apr 2025 13:01:01 +0000
ROA not before:           Sun 20 Apr 2025 13:01:01 +0000
ROA not after:            Sat 19 Jul 2025 13:01:01 +0000
asID:                     30036
IP address blocks:        2604:2e88:8c00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:96:c4:9a:8e:56:25:89:0d:4f:a4:65:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Apr 20 13:01:01 2025 GMT
            Not After : Jul 19 13:01:01 2025 GMT
        Subject: CN=593cd1c4-4945-4c79-9b2e-f8e0254c82ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:b7:ca:35:d2:43:f1:3b:cb:87:02:e8:81:0a:
                    0c:12:50:08:5a:43:78:7a:c5:20:1e:0a:06:ae:25:
                    a5:a4:d4:a1:dc:3f:84:78:78:5b:5c:62:a5:2e:dc:
                    95:3d:8e:ac:11:5d:ce:5f:98:86:c3:61:2b:fe:60:
                    14:ef:d2:db:38:59:bc:e9:4e:9d:f1:75:e9:90:4e:
                    74:d6:96:3f:89:59:14:0b:0b:26:aa:58:93:80:fa:
                    65:b4:cc:a4:ae:45:73:9b:b1:f3:fd:39:06:7b:a2:
                    98:a3:a0:44:e3:2d:c9:c0:e1:11:f9:2c:ae:a4:94:
                    97:94:50:8c:01:a5:2a:13:4b:50:ca:ba:0b:a1:16:
                    18:23:24:3e:0f:59:87:4a:40:db:cb:fe:7b:a3:c5:
                    36:31:aa:54:93:5b:84:04:81:cd:2f:34:f7:ac:8c:
                    c4:6b:c8:a2:e8:77:d1:4a:a7:51:f5:66:d2:2f:b9:
                    b4:73:2c:9a:a7:6f:5e:61:ab:92:53:82:7d:5f:6d:
                    bf:a9:0b:b0:4a:c4:ca:81:43:2e:c5:8c:c5:49:15:
                    f3:19:46:16:39:d9:d4:69:4e:b2:a4:f6:e1:0e:70:
                    17:88:be:2f:57:1f:2a:c6:20:d6:7f:e9:b8:dc:4d:
                    7d:d4:57:ee:7a:70:81:32:bf:d9:dd:c6:a3:f0:25:
                    73:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:5A:84:FC:4E:5B:0C:DA:3E:0A:C9:E2:82:8C:B4:10:72:CF:39:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/283700c8-ff0e-3b4f-8b03-b2d80ba72228.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e88:8c00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:4a:a2:66:fd:54:1b:69:06:9e:38:08:b8:f3:92:c5:64:8e:
         c9:8e:ae:b2:87:de:98:1a:53:2a:97:a1:30:6c:18:fa:45:4d:
         47:fa:5e:30:c9:41:a0:2a:27:47:a7:91:1d:7a:b8:4e:1a:12:
         7c:4b:25:47:ae:37:c4:23:58:e4:c6:57:dc:e1:ab:e2:9e:c3:
         9f:7b:6f:23:55:56:97:be:e3:a6:39:b1:57:58:be:0b:f2:a8:
         de:e2:c2:2f:41:c3:0a:0d:e2:2e:5d:be:72:67:af:96:1e:d1:
         3a:53:a4:e7:44:46:82:b3:98:cd:39:3d:e5:a2:65:e5:1e:24:
         ec:0a:78:75:5c:e1:89:d5:90:81:8c:1c:c0:7e:be:b8:3f:c4:
         5d:1e:d8:6a:0a:29:d9:03:f8:b6:6f:10:cc:9c:01:57:ab:42:
         b4:21:f7:f0:5b:c1:e1:40:18:b4:fd:a1:d9:0c:41:e7:6e:67:
         5f:19:91:b1:26:21:eb:da:21:cb:81:27:70:31:36:1b:fb:a9:
         30:b0:14:34:cb:1d:e1:48:04:20:29:1d:c6:10:a1:f9:f2:4d:
         05:37:cf:5e:40:e4:f3:88:5c:20:52:30:26:f0:17:68:25:61:
         2a:7a:61:43:c3:0d:a7:c7:fd:cb:89:ff:d7:9f:10:ce:2e:df:
         db:77:a4:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:09:38 2025 by rpki-client