Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4419fb65-2457-3093-8790-33acd058af32.roa
File:                     4419fb65-2457-3093-8790-33acd058af32.roa (raw, json)
Hash identifier:          ng3YY9U0c9t8d3bHDgHN6/7DtZ7ottavI1SEfJ3DqCg=
Subject key identifier:   16:4E:E3:6D:31:38:2C:89:72:A6:99:B0:52:7A:D6:AA:B3:03:A7:77
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F43285849A4BA0B7333172C48EB680500
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4419fb65-2457-3093-8790-33acd058af32.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     30036
IP address blocks:        2604:2e8a:bc00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:0b:73:33:17:2c:48:eb:68:05:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=5ced0450-9849-4ea3-9713-049f6b41e3c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:5a:66:6d:4d:8f:b9:28:ac:13:2b:56:3c:49:
                    d4:fb:5b:90:d4:83:31:d1:2a:50:78:74:5b:83:fc:
                    f5:97:70:2b:7a:66:03:91:a8:1e:78:26:cf:cf:2b:
                    83:a8:e4:7d:64:7b:e4:f1:f1:dc:d5:da:7a:c9:c1:
                    c4:e4:17:b8:18:d6:8d:d3:e0:6f:5d:b1:8b:b9:ab:
                    3b:18:e4:2b:8d:02:d3:a7:f9:e0:0b:8e:6e:95:ee:
                    25:e5:0c:65:21:75:8b:5a:f4:97:a8:8b:c5:17:19:
                    28:25:b8:6c:4d:88:c5:80:4f:7e:c3:c3:4c:8f:75:
                    47:7a:22:2b:f4:69:79:85:57:aa:e5:95:ad:dd:41:
                    8c:b2:52:56:01:c1:3c:c2:b2:e4:19:87:f2:a3:b6:
                    4a:c2:e4:65:4e:95:66:ea:8d:35:f0:57:3b:16:3d:
                    f4:bf:27:f8:a3:54:e5:cc:ff:4e:6f:47:b0:b6:11:
                    02:6c:a0:32:e8:66:b8:5f:ba:87:97:05:46:75:6a:
                    89:a9:17:0e:af:12:91:47:0b:de:93:99:69:76:a2:
                    38:35:4e:db:2d:8a:da:70:1f:77:36:9c:aa:b3:0d:
                    6c:30:48:78:08:f1:40:9b:08:43:33:94:2e:09:b7:
                    18:7b:98:50:0a:60:3c:db:c3:42:a6:b1:de:02:e5:
                    96:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:4E:E3:6D:31:38:2C:89:72:A6:99:B0:52:7A:D6:AA:B3:03:A7:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4419fb65-2457-3093-8790-33acd058af32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8a:bc00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:c4:f1:13:69:0b:f4:93:d8:d5:ad:8e:33:f7:41:ff:d6:35:
         f8:e7:da:da:5f:f5:67:24:24:65:88:2e:31:3a:55:4f:21:99:
         b2:9a:88:2b:14:e7:03:7a:ae:7a:ff:da:90:4d:e7:0b:31:0a:
         d0:f6:1f:47:52:91:cb:c8:a6:75:82:b9:36:68:a7:33:a4:67:
         9e:e2:38:c5:08:bd:22:3d:e6:e2:cd:af:45:31:9d:47:4c:8d:
         ea:28:34:b4:e9:78:ad:11:67:aa:03:a6:79:aa:cb:92:49:bf:
         7b:d0:96:f6:75:44:23:26:e5:bf:6f:57:fe:63:04:7b:b2:bb:
         eb:c0:b7:c5:4f:35:22:71:3a:b4:87:ba:2a:a2:38:88:3d:1c:
         2b:a1:61:ad:64:16:df:ec:a0:da:71:58:84:b1:eb:f1:38:f0:
         3e:08:30:4e:f4:61:00:59:1a:bd:47:90:f7:ea:03:4a:a5:3e:
         f2:e1:cb:18:ec:75:1b:a7:d5:e5:e1:54:48:3c:d0:dc:a9:96:
         3c:d4:43:eb:ae:c2:96:28:ce:c0:41:cc:31:50:ad:b5:ae:84:
         9b:a8:b9:09:0f:8d:b5:17:ae:dd:1b:89:34:c8:d5:a8:ce:cc:
         f5:18:a9:d5:30:1f:62:fe:04:8e:3a:6d:d3:68:0b:38:4c:34:
         4b:2f:4c:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:43:09 2025 by rpki-client