Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/386697e9-daff-344a-823d-ac4db132b4d8.roa
File:                     386697e9-daff-344a-823d-ac4db132b4d8.roa (raw, json)
Hash identifier:          GMRwiKDE8N6tlrSnnTBvPKR7GRGEPYTsTBvgd/lDq3k=
Subject key identifier:   F6:9B:A2:A0:CD:A8:72:E3:CF:34:41:E5:E6:F1:9B:76:ED:75:CA:DA
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584A8410C42DDBECD3FCD6E307E0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/386697e9-daff-344a-823d-ac4db132b4d8.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     30036
IP address blocks:        2604:2e8b:9000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:10:c4:2d:db:ec:d3:fc:d6:e3:07:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=def6ea26-a616-4379-8d24-e5c6f162717b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:90:2c:46:2d:5c:fd:02:6d:75:ae:db:f1:d4:
                    46:01:6c:66:7f:35:b1:18:40:53:aa:ba:6d:49:74:
                    e8:94:39:e9:9e:c4:90:56:e0:4e:e7:3f:ac:f9:2a:
                    21:d1:7b:04:47:dc:e7:14:94:22:12:49:3c:b7:b6:
                    f7:ff:a6:ae:02:79:38:d7:6e:cd:2b:f7:9e:d9:a7:
                    d2:ec:18:6f:50:fb:74:f0:bc:a2:06:1c:6d:40:83:
                    86:62:9d:c0:de:24:e7:3a:db:50:1f:ac:25:bf:04:
                    a5:a7:e6:c4:c0:63:4a:ee:cb:87:fd:43:85:7a:4c:
                    0e:5b:3d:f2:54:41:ba:68:c5:bc:8f:4f:8d:b1:0b:
                    bc:49:76:1e:c7:93:21:e2:d6:cf:79:12:0c:d2:eb:
                    3b:1c:4c:b7:15:59:06:e3:c9:de:ba:e5:05:c7:26:
                    3a:d0:93:03:a4:59:a6:e2:6c:4f:e8:68:7e:20:97:
                    f1:1a:ef:51:9a:66:e9:6e:7e:c8:37:54:58:6b:4e:
                    44:1e:0a:a0:d6:7f:4c:86:e4:77:d3:09:81:2e:e2:
                    fc:53:81:62:bf:6e:b2:02:94:6f:bd:1d:92:92:2e:
                    15:37:62:b1:7f:a1:2c:73:bb:bc:13:05:00:e5:97:
                    06:bf:0b:b6:02:83:ec:ba:12:c9:31:92:97:1a:a0:
                    0f:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:9B:A2:A0:CD:A8:72:E3:CF:34:41:E5:E6:F1:9B:76:ED:75:CA:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/386697e9-daff-344a-823d-ac4db132b4d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8b:9000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:28:7e:97:22:b7:25:31:f2:f5:a2:14:7d:c5:3e:3e:4b:d7:
         a1:35:5a:e3:ab:13:26:09:0e:43:a0:3a:7a:02:6d:9a:0e:ef:
         7a:07:52:b3:35:21:1a:60:de:33:4a:32:c5:8f:06:02:e6:8a:
         bb:78:36:55:a7:53:5e:9b:98:72:21:3a:0d:39:34:cd:19:10:
         8f:64:a5:d5:30:94:b6:10:27:08:30:a0:a1:41:08:55:a7:ec:
         f0:4e:0c:5e:f3:e2:69:17:15:66:ae:53:af:6f:1d:dc:53:82:
         70:d9:db:44:c5:ea:77:80:8d:2c:9d:10:4d:18:59:c1:dc:c3:
         ce:50:3a:f8:c9:a6:5a:9e:56:e2:5a:f9:36:42:6c:f6:1c:e4:
         27:4e:ff:ad:15:8a:20:8d:e4:33:bb:75:cd:91:fd:e4:c5:9c:
         13:77:36:38:24:69:c4:df:c0:ba:f3:57:0c:84:3e:dc:60:f6:
         3e:fc:07:6f:ea:3d:f0:89:66:76:f1:83:89:29:a9:16:80:dc:
         44:bd:55:d4:ce:07:61:9b:fb:d3:cf:0c:3d:5f:64:34:5d:ba:
         22:12:e1:43:b1:03:a2:01:f2:73:a4:01:f5:14:39:5f:75:3f:
         91:67:1a:7c:71:47:fc:a3:96:c7:ec:c3:73:79:f2:96:d6:40:
         2d:a4:9e:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 05:14:10 2025 by rpki-client