Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4a5c3aae-7e4d-3b68-abbe-e12fd2c2f719.roa
File:                     4a5c3aae-7e4d-3b68-abbe-e12fd2c2f719.roa (raw, json)
Hash identifier:          12tgaKv4L9OlilyXCRAbh33bJGJ2xLMQJJ6LMyenH7I=
Subject key identifier:   42:33:41:24:E4:49:5E:AE:49:F1:30:05:B7:74:99:0D:F6:52:0C:73
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584A8410C3D4F15B6138C0DA3B20
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4a5c3aae-7e4d-3b68-abbe-e12fd2c2f719.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     30036
IP address blocks:        2604:2e8a:1c00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:10:c3:d4:f1:5b:61:38:c0:da:3b:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=7a0fc3e1-6b6b-4172-a2b0-b3635fe0aa8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:23:79:4b:e1:f2:3a:4a:82:bc:18:54:71:46:
                    69:be:ad:14:68:4c:b5:e9:4f:b7:ff:75:30:ee:13:
                    b6:00:3b:90:8a:03:1c:21:77:e3:41:87:e2:28:d3:
                    8a:b1:54:40:cc:15:0f:5b:e4:ca:01:da:42:53:25:
                    ab:b9:ae:8e:63:ec:1c:a0:8b:10:7d:2b:6f:85:ef:
                    be:8d:8e:ff:f8:22:6e:b4:8e:10:49:7a:67:be:9b:
                    df:79:a1:2e:c2:c7:6b:7c:62:28:50:a3:ee:f5:4b:
                    79:c5:3e:47:6a:6f:e2:8c:cd:62:e9:ae:ef:e1:93:
                    cf:74:78:5b:b7:4c:d2:9b:f1:00:02:57:64:bc:86:
                    13:71:1e:a9:cb:1e:5e:5b:76:2b:d5:ec:e2:83:74:
                    92:79:43:5f:1e:8c:35:6f:3e:be:43:67:b8:52:87:
                    65:f3:4f:e7:bc:65:d0:0d:52:ff:56:54:93:ca:a1:
                    5b:4d:3f:39:03:7b:c1:e6:05:c9:81:ec:32:81:81:
                    93:e4:ea:cc:fb:4f:d3:01:b7:55:71:55:ad:a6:88:
                    d1:74:1e:4d:82:6b:54:55:cb:9e:7a:be:48:a9:d1:
                    e5:47:1b:6e:1e:71:a1:0f:31:76:97:f9:02:3c:12:
                    1a:ca:cd:2e:ee:10:9c:7e:ff:13:a9:25:e3:42:73:
                    7e:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:33:41:24:E4:49:5E:AE:49:F1:30:05:B7:74:99:0D:F6:52:0C:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4a5c3aae-7e4d-3b68-abbe-e12fd2c2f719.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8a:1c00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:e5:b2:1a:9d:d7:bc:48:44:46:2c:89:c4:6e:42:7f:8b:d7:
         94:90:38:53:0e:ba:80:43:44:1c:da:44:3a:42:6f:3c:c6:50:
         b2:42:86:b4:da:64:92:bb:0c:86:6a:d8:b1:61:53:fb:27:e7:
         7f:d8:71:f7:38:a0:47:6a:ba:e5:f4:e8:ea:d5:6b:04:b4:55:
         95:01:ab:c3:06:92:f7:7d:df:19:3e:f2:2e:77:e7:64:0c:23:
         3e:a6:f0:38:3a:89:ed:02:a5:15:d9:6a:70:be:9d:fd:5b:f0:
         87:66:e8:2e:8a:99:0b:af:e2:c8:f5:7e:4e:c8:96:6b:67:40:
         64:54:bd:bb:a0:fa:41:36:b3:72:91:b1:59:99:a1:2b:ec:35:
         ad:9b:c2:97:eb:c7:15:a1:f1:23:a8:64:27:09:4a:d5:5e:ba:
         6b:aa:dd:d2:b5:47:df:b1:47:12:9e:be:63:78:8e:ee:37:73:
         3f:97:f0:be:5e:c1:9d:93:8d:15:a7:fc:07:53:af:c6:c8:ee:
         39:54:d2:83:3c:c2:9e:16:c0:9a:cf:a7:58:9c:02:c3:cf:23:
         ee:51:ed:53:16:60:e2:0b:22:19:89:86:c5:9a:7b:5d:77:96:
         5f:d9:4a:f7:ef:bd:5a:77:07:61:40:48:b9:73:a9:61:1d:32:
         05:0b:2f:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:19:16 2025 by rpki-client