Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5728fbcf-a19d-3dd3-869f-491b05083389.roa
File:                     5728fbcf-a19d-3dd3-869f-491b05083389.roa (raw, json)
Hash identifier:          zIRD7BwJUKWbdTveRZJRYLYjQWJ/FS2nNedARAX5qXk=
Subject key identifier:   63:45:EB:2F:A0:EB:74:50:AC:AF:7A:5C:0B:47:6A:DF:83:CD:6E:5E
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584A814664AC533772FBD9C75700
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5728fbcf-a19d-3dd3-869f-491b05083389.roa
Signing time:             Sun 13 Jul 2025 13:01:03 +0000
ROA not before:           Sun 13 Jul 2025 13:01:03 +0000
ROA not after:            Sat 11 Oct 2025 13:01:03 +0000
asID:                     30036
IP address blocks:        2604:2e8e:e800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:81:46:64:ac:53:37:72:fb:d9:c7:57:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jul 13 13:01:03 2025 GMT
            Not After : Oct 11 13:01:03 2025 GMT
        Subject: CN=188550b9-81ee-4bcf-bc28-43a4d6f5abb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:fc:c3:13:a0:5b:01:9b:6d:8b:64:f5:d5:1e:
                    b5:44:51:dd:df:e7:a9:20:50:31:82:c5:02:60:7c:
                    30:cd:8e:d5:c7:0e:e6:d7:da:ff:96:8e:15:21:d7:
                    fe:ad:bc:3a:bd:e4:23:20:3a:c2:dd:5a:89:b5:e6:
                    72:e2:8b:49:00:c5:9c:ec:a0:9a:ce:54:5d:a7:1b:
                    48:e1:4e:ba:3d:bc:35:8d:d8:21:44:a3:79:29:d2:
                    ee:11:82:54:35:34:23:a9:5d:be:10:ee:0f:3d:8b:
                    64:38:82:fc:d9:58:5a:89:94:ad:8f:a7:2c:31:55:
                    5a:af:7b:ed:83:9e:ad:18:f7:6c:c8:1b:22:b7:34:
                    2a:af:96:fb:bb:ff:a1:35:0a:84:66:2e:17:5b:9e:
                    09:d9:6a:7e:c9:6a:22:a5:c4:f3:2f:55:f8:ab:ca:
                    91:6e:64:c2:e2:b1:53:d6:86:d1:7c:a4:d5:d0:20:
                    fd:c7:a7:db:99:24:c7:7f:23:50:ba:cc:b2:6c:74:
                    88:6a:f3:9c:26:d6:4e:4c:61:5e:af:8c:ff:dc:67:
                    90:75:6b:c6:f5:61:b4:b2:42:e1:fa:8b:01:de:57:
                    d7:85:a5:83:6c:e2:36:00:cf:76:0b:0c:e6:60:cb:
                    78:c0:f9:2a:b5:39:5d:1b:c0:a1:31:6f:95:3e:53:
                    29:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:45:EB:2F:A0:EB:74:50:AC:AF:7A:5C:0B:47:6A:DF:83:CD:6E:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5728fbcf-a19d-3dd3-869f-491b05083389.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8e:e800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:79:23:0c:3c:19:e7:2f:54:4d:f4:b0:86:ee:6b:f1:be:ad:
         a4:c8:fa:fa:06:3b:fc:08:94:ef:2c:67:60:35:f4:5f:0a:c8:
         23:1d:c8:a3:47:50:1d:bc:a5:37:a3:43:0c:45:18:20:db:16:
         ee:a9:eb:ca:e9:1d:b2:85:8c:54:fb:ee:0e:1c:6f:07:0d:4a:
         61:62:c2:31:e6:6e:22:3f:a1:59:63:8a:1e:26:38:a5:0f:ac:
         d0:cd:7d:be:ea:01:28:ed:94:5f:75:4d:a7:cf:52:30:98:69:
         fb:0c:03:ca:75:c1:db:5d:c5:55:3c:0d:a2:35:6f:1d:52:e8:
         0c:7e:9a:57:48:1b:7f:d7:41:06:f0:85:f0:d2:82:5d:0b:83:
         3f:46:61:6c:fe:13:8c:2f:96:6d:ca:be:97:64:f7:e4:3f:e7:
         89:fa:72:28:34:72:b5:a3:d2:9b:dc:8d:92:5e:9d:ae:1e:63:
         ad:40:cd:a4:a2:04:89:e4:98:a3:ad:bc:25:26:58:ca:1c:0f:
         f1:12:06:d4:e3:09:a2:ca:31:db:6e:81:52:be:cb:fd:9f:6f:
         7c:09:a0:51:41:3e:70:22:54:8b:94:96:22:f1:f8:5b:3d:65:
         b5:de:5e:23:38:98:90:a6:68:d0:29:c3:12:d1:32:f3:4f:72:
         54:9c:74:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:58:40 2025 by rpki-client