Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/62da1818-9d22-3a24-ac8d-eb70f104d146.roa
File:                     62da1818-9d22-3a24-ac8d-eb70f104d146.roa (raw, json)
Hash identifier:          zuxipuiHnwCdH5Ke8VKAdv37dxyzdQGGhcSVAapnZe8=
Subject key identifier:   3C:61:09:64:09:2B:98:29:C2:50:A1:A8:46:23:4B:83:A7:66:09:31
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F43285849F2E520125B0D8E27392A56C0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/62da1818-9d22-3a24-ac8d-eb70f104d146.roa
Signing time:             Fri 23 May 2025 13:01:03 +0000
ROA not before:           Fri 23 May 2025 13:01:03 +0000
ROA not after:            Thu 21 Aug 2025 13:01:03 +0000
asID:                     30036
IP address blocks:        2604:2e8e:ac00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f2:e5:20:12:5b:0d:8e:27:39:2a:56:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: May 23 13:01:03 2025 GMT
            Not After : Aug 21 13:01:03 2025 GMT
        Subject: CN=a6d57343-3c69-49f0-9852-0bd56476ac9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:bd:0c:5a:7a:23:fb:4c:ee:f4:26:d5:d2:bb:
                    be:60:ba:4f:4e:c6:20:4f:9e:63:c8:19:df:12:4e:
                    8d:80:54:98:25:1c:4a:38:d3:6a:7d:5c:f8:5f:b0:
                    21:27:88:f6:4b:c7:23:1d:df:02:27:63:df:cd:3d:
                    25:6d:b1:47:11:9e:a2:9d:30:f7:a3:4c:41:27:4d:
                    f0:81:a8:07:1a:d0:7a:5a:2d:c1:25:21:e6:df:47:
                    0d:37:70:a6:89:ba:49:cd:0e:7a:6d:37:0a:bb:d9:
                    3b:64:70:1d:a0:bd:b9:ed:a6:e5:a6:61:9f:fa:7e:
                    ab:ee:f2:66:45:25:ed:9f:ef:66:97:b1:50:b8:d6:
                    0b:8c:87:37:3e:76:ca:2d:a1:eb:44:20:5c:aa:58:
                    c4:55:f7:b5:9f:90:40:72:ae:14:d5:68:11:d0:49:
                    63:77:81:83:0b:fe:96:e7:41:b5:e7:a5:fb:76:01:
                    ed:b3:4b:ae:2c:5d:36:eb:a1:74:01:cb:f0:dc:fe:
                    2b:39:f3:80:34:a7:9e:35:89:65:e6:dd:1a:46:a3:
                    d5:37:d5:a3:a6:73:55:65:6a:ff:06:b4:2a:af:d1:
                    d1:28:fe:45:06:9f:16:aa:67:92:fe:6d:e6:17:fc:
                    7f:36:6d:48:02:31:8c:df:45:85:45:77:3d:10:71:
                    6e:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:61:09:64:09:2B:98:29:C2:50:A1:A8:46:23:4B:83:A7:66:09:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/62da1818-9d22-3a24-ac8d-eb70f104d146.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8e:ac00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:1e:49:71:04:f2:42:02:71:1d:de:e4:46:10:3b:b8:d3:20:
         f2:6f:f9:73:49:62:39:af:9e:a7:78:0b:2c:24:29:06:29:21:
         8e:72:9c:01:bc:54:0a:fe:e7:ff:40:f1:f5:55:ba:e5:6a:64:
         10:f2:d1:85:99:8e:6d:fb:aa:53:5c:44:fd:31:ff:90:1c:98:
         b8:b3:30:d0:ac:ef:ff:90:bb:de:1e:85:29:1c:13:39:82:c7:
         c8:17:af:7e:87:e0:8d:f8:bb:5c:34:da:09:01:db:e7:48:37:
         37:20:b5:88:99:2e:8a:9c:31:d4:09:a7:f1:bf:3d:71:63:d8:
         f1:56:3e:94:20:de:95:58:e0:3e:f3:85:7f:7e:d4:b1:ed:4c:
         83:1c:a3:23:97:cc:cb:57:b0:52:90:6a:49:71:fa:ad:54:44:
         1f:2d:0f:da:d9:e0:51:e0:65:a0:2c:7d:6e:60:2f:59:f8:85:
         19:53:61:b8:eb:5d:49:f9:8a:62:39:17:80:5b:82:18:9b:c4:
         4c:f7:4d:ba:28:1d:2e:42:ab:bf:00:20:01:97:d5:ab:6d:20:
         42:9a:45:18:79:4d:d8:82:68:cb:95:19:32:2d:f9:94:22:4c:
         4b:15:c7:30:8a:6c:e5:4c:f0:b2:8f:f3:fd:06:5f:fe:90:eb:
         81:c0:a1:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 01:11:48 2025 by rpki-client