Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/35833895-0e41-32bf-815e-27e190285c7d.roa
File:                     35833895-0e41-32bf-815e-27e190285c7d.roa (raw, json)
Hash identifier:          nlkFGZF7xvZtLTuLreQmBixHEsY9pmPZzjGHd/ugfUE=
Subject key identifier:   5F:1F:7E:EE:BC:21:FC:66:63:90:57:0D:B9:29:08:4A:D0:3B:1B:88
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F43285849A4BA38BA643526A6BACBF200
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/35833895-0e41-32bf-815e-27e190285c7d.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     30036
IP address blocks:        2604:2e8b:fc00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:38:ba:64:35:26:a6:ba:cb:f2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=6cde761f-82f2-4bde-8765-5d0c1a395962
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ff:96:79:6c:68:85:6d:80:01:98:0c:9f:50:
                    20:b0:23:c9:b1:6a:88:2e:05:c6:51:5f:5b:b7:58:
                    07:6a:69:30:44:e7:dc:a2:9c:49:83:07:a5:82:76:
                    83:fb:67:b1:7e:f5:2e:2b:d0:98:fd:f9:e9:5e:93:
                    a7:7a:40:92:29:3b:a2:43:d3:f7:9a:c9:e6:af:f6:
                    d0:e9:3c:dd:f9:46:7e:ad:fd:bf:d6:9f:9e:58:3b:
                    bf:f9:20:b9:38:e7:df:13:ad:ef:c0:ce:46:f9:92:
                    db:ce:a8:0e:ea:e3:ca:aa:1a:ce:7c:64:1e:aa:96:
                    f0:22:84:05:97:01:aa:98:4e:5f:5e:bf:ab:87:df:
                    ff:f5:76:af:01:f8:b4:ce:b1:e2:a5:a4:07:ea:21:
                    34:8a:29:ed:c4:b2:f2:3b:7f:45:eb:b6:58:af:32:
                    c5:41:3f:7e:e5:fe:e3:43:18:f4:86:3e:21:2d:85:
                    78:02:18:53:1d:d6:be:cf:c6:cc:c0:c2:6b:eb:d0:
                    a8:3a:d5:d8:e5:74:7c:08:ee:8d:65:9c:3f:91:de:
                    09:03:be:49:26:f6:d3:8e:ab:1d:ae:ba:a5:1a:1d:
                    66:88:1f:f0:5f:59:2b:15:66:04:c0:78:41:51:df:
                    57:e4:0b:3c:31:70:87:ed:03:5b:a7:08:08:e0:53:
                    a6:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:1F:7E:EE:BC:21:FC:66:63:90:57:0D:B9:29:08:4A:D0:3B:1B:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/35833895-0e41-32bf-815e-27e190285c7d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8b:fc00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:34:26:c0:30:04:8e:72:b1:e6:90:77:3d:ba:67:a2:ed:04:
         e2:17:f4:4e:73:84:19:d0:6c:4d:94:29:e0:f8:76:a3:0c:8d:
         92:b6:d2:51:df:fd:85:98:f7:93:7a:58:27:eb:4a:c8:c6:4a:
         cd:5b:86:08:0f:7e:94:8c:69:07:2c:1c:de:13:d6:22:69:9e:
         5e:46:a4:9d:c3:e1:82:c6:74:55:68:30:9e:f1:ce:5b:8f:d2:
         c9:b0:9d:de:6b:b2:df:d2:d7:1e:2c:27:af:d8:59:2f:d9:34:
         08:8a:56:db:96:0e:96:82:f1:9e:00:66:2e:98:c0:00:18:50:
         4b:6d:eb:b6:33:93:6d:1f:d0:c4:2e:75:2d:c7:77:db:2c:1b:
         d2:42:a2:60:f8:88:7f:65:5b:8c:57:06:fb:d0:b2:95:a3:e1:
         71:f4:c2:86:84:18:be:c2:52:a1:d1:98:4f:3b:ab:42:7b:1d:
         2e:18:12:a5:a4:0e:81:06:4a:8b:85:fd:59:5f:6a:f8:23:1c:
         22:96:ed:6d:d7:c1:11:66:53:5d:9c:47:7c:6a:b9:a1:81:43:
         ee:a0:1e:eb:99:6b:da:6e:b1:a3:77:ab:ed:5a:f6:05:40:62:
         6e:e2:1f:6e:d3:bc:ff:e5:66:8a:93:d8:b3:78:f9:0e:6c:54:
         ea:d8:e2:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:33:20 2025 by rpki-client