Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/54a3b59b-c811-3e3f-9347-9eadb65c4fd4.roa
File:                     54a3b59b-c811-3e3f-9347-9eadb65c4fd4.roa (raw, json)
Hash identifier:          5oemY4sxS+nq/bC7wjpX4gj9dv44A10otEODhV3IDYM=
Subject key identifier:   E7:FC:4D:FA:DA:87:3F:C3:C0:5C:62:1C:7E:EF:4F:DC:20:18:C2:9B
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F43285849A4BA48807E5280B4F3BEB440
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/54a3b59b-c811-3e3f-9347-9eadb65c4fd4.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     30036
IP address blocks:        2604:2e8d:8c00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:48:80:7e:52:80:b4:f3:be:b4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=b5939096-9d71-47de-be01-4d04c85360b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:87:c1:4d:f6:d5:91:1e:e9:03:f8:69:ff:89:
                    98:54:3a:24:b6:9d:82:40:42:c9:f4:55:71:7c:22:
                    1c:73:18:b9:73:67:82:fb:97:48:a6:53:94:d3:ad:
                    9c:09:f9:05:35:e1:ee:78:24:50:ba:9a:e7:24:88:
                    8d:1b:66:03:81:5c:70:96:31:c4:b2:12:13:c1:d6:
                    2f:e5:97:d8:2c:c1:eb:c8:c0:08:7e:a0:3c:50:3f:
                    49:8d:4c:78:0f:e2:85:06:16:ac:e9:d4:0e:f7:bf:
                    5d:85:a0:98:9c:dc:69:d8:3a:92:e4:10:3f:41:b1:
                    42:2a:30:21:54:9d:56:f2:f1:7e:85:be:71:ff:27:
                    37:60:49:ad:ce:47:ac:ac:02:5d:13:f2:1f:02:f1:
                    0a:1a:41:ee:f5:d6:9c:05:ee:68:fe:b7:c5:80:11:
                    be:58:13:61:11:a6:09:c6:8f:6a:e3:70:f1:ff:37:
                    6f:f0:1d:46:c3:cb:4f:1b:99:a8:83:1d:83:dc:13:
                    b5:fe:01:85:84:d4:70:14:df:27:99:8f:cf:fe:9f:
                    31:d7:14:61:ab:05:a6:3f:96:1d:55:bf:bc:e5:0f:
                    20:42:22:3d:b9:a6:e6:ab:a3:f0:66:8c:bc:ce:45:
                    ea:4a:77:93:9d:ca:a8:84:06:b0:2c:38:06:16:59:
                    2b:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:FC:4D:FA:DA:87:3F:C3:C0:5C:62:1C:7E:EF:4F:DC:20:18:C2:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/54a3b59b-c811-3e3f-9347-9eadb65c4fd4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8d:8c00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:27:64:24:cb:33:92:25:08:c9:95:35:d2:d8:67:8a:73:f4:
         ab:03:57:ad:0f:b3:b2:79:b1:9e:ec:c1:17:d2:dd:47:20:56:
         44:d1:48:0d:90:17:46:ba:7c:ca:06:1f:be:5c:a9:db:e8:cb:
         8a:3d:8d:76:bd:ad:cb:73:17:10:1a:be:0f:c6:04:34:b6:e4:
         61:51:05:1e:13:11:69:89:6c:1a:1e:7f:2a:06:03:31:8b:ff:
         f0:54:67:14:ad:39:89:cd:2f:c0:38:94:7f:01:91:ec:b3:ce:
         2c:27:e1:e2:b0:56:0a:53:1c:cd:f3:13:dc:96:2a:4a:d6:46:
         9e:5d:6b:0d:97:e0:79:e3:6b:10:dd:5c:0e:4d:99:47:da:9c:
         d8:5b:93:8d:68:e5:fe:d7:74:35:95:d0:55:15:ca:5f:26:70:
         ef:be:ef:16:e6:3d:53:3a:6c:18:23:f1:a3:bc:d5:39:88:66:
         13:81:7a:3b:a2:6f:41:4f:9b:fb:d9:73:5e:6b:07:67:76:ff:
         4b:77:f2:62:d2:a5:89:3f:7d:f9:04:17:b0:53:15:45:87:23:
         8c:f6:e4:2c:33:38:62:05:2a:9a:b7:15:d1:49:80:91:12:09:
         27:81:16:6d:ff:4a:63:33:7a:0e:1f:30:19:f0:2f:fb:3b:86:
         4b:17:b8:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:40:11 2025 by rpki-client