Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/33286010-159b-3688-9580-dfdcb4e4b055.roa
File:                     33286010-159b-3688-9580-dfdcb4e4b055.roa (raw, json)
Hash identifier:          Q9pN0Fyq0MilXl60l2x38QkAd9MvA8w3e4rX8+9j4ik=
Subject key identifier:   46:42:A2:E7:31:B0:D8:CF:1B:6F:9C:F7:FA:2B:2A:38:A6:0B:1C:14
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584AA0C77C4AA15580E39AEB2900
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/33286010-159b-3688-9580-dfdcb4e4b055.roa
Signing time:             Thu 24 Jul 2025 19:52:02 +0000
ROA not before:           Thu 24 Jul 2025 19:52:02 +0000
ROA not after:            Wed 22 Oct 2025 19:52:02 +0000
asID:                     30036
IP address blocks:        2604:2e87:7800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a0:c7:7c:4a:a1:55:80:e3:9a:eb:29:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jul 24 19:52:02 2025 GMT
            Not After : Oct 22 19:52:02 2025 GMT
        Subject: CN=8e4d12bf-e2a2-4ca8-811a-b74d79d261a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ba:35:25:31:27:29:e3:23:8c:a2:5d:92:b3:
                    cf:fa:cc:3f:66:38:58:d0:a7:d2:f5:ce:e3:59:49:
                    76:60:fb:58:71:83:b6:f2:76:7a:10:73:28:c6:67:
                    f8:71:9e:3a:0b:df:ee:80:06:5b:15:31:d7:db:43:
                    f5:f7:87:e2:03:d0:03:e7:97:c7:6e:2a:27:cd:86:
                    64:0d:5e:35:4c:3c:c8:73:8a:1d:77:2c:94:51:10:
                    27:bf:bc:4f:70:88:83:db:01:27:47:f7:8f:a1:e7:
                    31:ce:73:8c:22:4f:13:f8:50:a0:24:09:28:1f:9f:
                    fa:02:88:71:18:84:61:86:1e:c1:05:83:ee:77:5c:
                    e5:05:af:48:51:fd:34:a7:cd:4d:f4:89:be:f3:a4:
                    2a:78:a7:43:93:71:f6:51:61:93:58:b2:78:71:f9:
                    dc:47:14:6e:0c:f6:df:b3:ad:63:9d:9f:2e:29:7c:
                    fc:d7:85:7a:a8:16:60:72:76:93:ab:a2:24:e3:b2:
                    0c:4a:7c:77:56:ec:f5:d3:99:ed:e4:03:d6:87:e8:
                    cd:f5:e6:83:6a:ea:ac:c8:6b:08:47:21:96:3e:db:
                    bb:d0:ca:d0:e6:3c:2d:90:1d:ce:e3:56:4a:72:fb:
                    45:47:8a:f1:8a:78:00:b0:78:a4:77:e2:3b:ff:d4:
                    34:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:42:A2:E7:31:B0:D8:CF:1B:6F:9C:F7:FA:2B:2A:38:A6:0B:1C:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/33286010-159b-3688-9580-dfdcb4e4b055.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e87:7800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:3a:64:5c:f9:12:56:bf:6b:87:b4:62:59:08:64:f9:c9:2e:
         c1:cf:4a:75:3b:cd:49:97:4c:5b:bb:88:92:1d:5d:46:8a:5d:
         05:0e:13:8e:b3:4d:83:ce:46:ab:c9:f9:40:9b:82:d7:d3:88:
         4f:00:4e:06:8d:5b:2f:24:e8:63:11:e7:19:4f:b3:ef:ea:69:
         63:5b:b6:d6:8e:f6:8a:32:42:d1:6f:02:c4:8d:51:6f:13:77:
         9b:20:97:0c:c0:a4:cc:ef:3f:68:98:bb:ce:9c:20:2f:5f:df:
         3b:81:21:31:aa:c8:b0:35:8e:61:c7:7a:c0:82:57:3a:78:1c:
         c3:82:aa:de:65:bb:67:40:c4:b1:9c:1e:1d:b5:7d:3e:f9:37:
         df:03:08:d4:be:a8:d2:3a:a0:7a:00:60:c2:f3:92:f1:59:56:
         7e:04:65:11:1c:57:60:67:5f:30:2f:a4:6a:6c:2a:70:eb:d0:
         48:c2:ed:1e:66:bb:38:84:64:60:54:ed:07:79:ce:06:67:61:
         5e:b7:29:52:75:5a:9a:b9:50:50:ab:2b:3e:99:37:fe:9f:c5:
         54:00:3c:5a:a2:d2:2f:85:61:84:9f:74:f5:3b:eb:1a:f5:d4:
         d6:b4:81:2c:88:79:29:09:78:bc:0f:f0:14:88:cc:44:24:c5:
         18:52:9a:3c
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEqgx3xKoVWA45rrKQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI1MDcyNDE5NTIwMloXDTI1MTAyMjE5NTIwMlowLzEtMCsGA1UEAxMk
OGU0ZDEyYmYtZTJhMi00Y2E4LTgxMWEtYjc0ZDc5ZDI2MWE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7o1JTEnKeMjjKJdkrPP+sw/ZjhY0KfS9c7j
WUl2YPtYcYO28nZ6EHMoxmf4cZ46C9/ugAZbFTHX20P194fiA9AD55fHbionzYZk
DV41TDzIc4oddyyUURAnv7xPcIiD2wEnR/ePoecxznOMIk8T+FCgJAkoH5/6Aohx
GIRhhh7BBYPud1zlBa9IUf00p81N9Im+86QqeKdDk3H2UWGTWLJ4cfncRxRuDPbf
s61jnZ8uKXz814V6qBZgcnaTq6Ik47IMSnx3Vuz105nt5APWh+jN9eaDauqsyGsI
RyGWPtu70MrQ5jwtkB3O41ZKcvtFR4rxingAsHikd+I7/9Q0TQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFEZCoucxsNjPG2+c9/orKjimCxwUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMzMyODYwMTAtMTU5Yi0z
Njg4LTk1ODAtZGZkY2I0ZTRiMDU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuh3gw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEANDpkXPkSVr9rh7RiWQhk+ckuwc9KdTvNSZdMW7uIkh1dRopdBQ4T
jrNNg85Gq8n5QJuC19OITwBOBo1bLyToYxHnGU+z7+ppY1u21o72ijJC0W8CxI1R
bxN3myCXDMCkzO8/aJi7zpwgL1/fO4EhMarIsDWOYcd6wIJXOngcw4Kq3mW7Z0DE
sZweHbV9Pvk33wMI1L6o0jqgegBgwvOS8VlWfgRlERxXYGdfMC+kamwqcOvQSMLt
Hma7OIRkYFTtB3nOBmdhXrcpUnVamrlQUKsrPpk3/p/FVAA8WqLSL4VhhJ909Tvr
GvXU1rSBLIh5KQl4vA/wFIjMRCTFGFKaPA==
-----END CERTIFICATE-----
Generated at Fri Aug 8 21:02:57 2025 by rpki-client