Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2e348530-00eb-3412-ab33-98cd25071483.roa
File:                     2e348530-00eb-3412-ab33-98cd25071483.roa (raw, json)
Hash identifier:          892N8IK3iSHBLFbau+caki1ThCVISdhUP8eMrq3xy/M=
Subject key identifier:   99:97:9A:F3:55:77:0D:19:60:79:75:AB:04:A6:CD:5A:9A:52:8B:69
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F43285849A8E9DAF86735E937FF007680
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2e348530-00eb-3412-ab33-98cd25071483.roa
Signing time:             Sun 27 Apr 2025 01:00:46 +0000
ROA not before:           Sun 27 Apr 2025 01:00:46 +0000
ROA not after:            Sat 26 Jul 2025 01:00:46 +0000
asID:                     30036
IP address blocks:        2604:2e8d:b400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a8:e9:da:f8:67:35:e9:37:ff:00:76:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Apr 27 01:00:46 2025 GMT
            Not After : Jul 26 01:00:46 2025 GMT
        Subject: CN=21f731dc-7f87-401e-bdad-696b7cf4102e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:09:aa:e8:41:9c:26:c5:b7:ae:43:f8:45:0c:
                    eb:fb:84:20:16:30:83:f3:8d:a9:34:14:ea:eb:f2:
                    23:46:fd:10:ca:7d:13:31:d7:e2:86:50:47:4c:74:
                    0a:5d:a2:b3:fe:8c:c4:a2:bc:93:88:bc:81:9d:1b:
                    dc:22:8c:ab:ac:bc:52:03:aa:86:88:9f:47:b2:a2:
                    33:ab:ea:6b:d7:15:85:4a:22:60:30:8b:f0:99:6c:
                    21:16:5c:09:d4:13:af:64:67:49:a6:6f:f5:e6:9c:
                    2c:1a:06:3b:0d:4e:1a:da:7b:48:31:16:1d:30:4f:
                    d4:f3:3f:d9:69:e5:0c:cb:cd:5a:2e:57:e1:87:b2:
                    b2:e3:a4:70:b9:fa:09:59:a2:97:e2:52:ca:94:0e:
                    c0:04:9b:2d:dd:d0:ce:27:34:62:54:8c:64:43:13:
                    6b:c0:c2:11:16:a1:89:28:11:b8:fe:4b:a7:2e:f3:
                    a1:0c:ca:b3:87:7d:45:8d:93:15:4b:75:40:c8:6f:
                    95:f4:61:3e:4c:aa:05:4b:5b:81:d4:aa:68:bc:b1:
                    1d:5b:82:d8:b2:48:32:05:a3:31:4e:7b:18:0f:5e:
                    de:67:47:97:3b:b4:41:95:80:96:bd:fc:63:75:92:
                    1b:96:f7:35:d6:03:77:6c:d5:c5:ae:32:bc:bd:13:
                    59:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:97:9A:F3:55:77:0D:19:60:79:75:AB:04:A6:CD:5A:9A:52:8B:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2e348530-00eb-3412-ab33-98cd25071483.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8d:b400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:16:1f:ec:cb:ce:b1:78:23:5d:59:a4:12:c1:fb:25:ad:59:
         05:b7:ce:15:d4:28:33:4e:4a:86:89:22:3b:09:3e:3f:e3:8f:
         25:d5:4b:03:b0:1d:9b:3a:60:15:b0:9f:7c:47:36:36:79:b7:
         c1:bd:0f:59:4b:d6:0e:2b:f0:9c:97:61:3c:dc:02:c5:21:f7:
         85:31:b5:66:4c:14:74:36:4b:da:5c:ba:dd:23:9a:af:12:d0:
         12:66:dd:97:15:ac:9e:71:7e:71:5a:43:dc:a6:18:35:cd:34:
         fe:59:4f:9e:bc:54:53:7f:6c:00:64:49:d8:d2:be:eb:15:6f:
         0b:f8:eb:10:af:61:cd:66:04:ff:ba:75:88:ff:95:9b:d8:f5:
         d1:97:00:79:0b:80:fb:ed:75:f3:c8:2c:34:d7:92:d3:e6:ce:
         9f:c5:7c:f1:78:f1:62:ad:e1:90:81:1a:5b:bb:73:c4:9f:b1:
         ce:83:b1:d1:fa:6d:1a:6d:70:25:7b:84:84:58:96:83:90:9b:
         2c:d5:73:21:06:9c:be:48:84:13:10:48:d5:84:4c:85:5f:45:
         c2:d5:5e:bd:f0:a4:dd:17:f6:05:d0:5d:35:a7:f0:a4:8a:9c:
         63:d3:68:16:fa:d5:49:38:86:16:17:93:68:84:6d:1e:a9:e7:
         20:f3:0a:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 03:58:35 2025 by rpki-client