Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/7636049c-7776-38c7-b741-08939ec4dc7c.roa
File:                     7636049c-7776-38c7-b741-08939ec4dc7c.roa (raw, json)
Hash identifier:          NqFFjJ/yRPRmcSXjqkIXUg1ERtvrU8QRt579rT94H20=
Subject key identifier:   7A:22:4D:19:A2:54:0E:ED:36:1A:6F:18:10:76:C9:0B:91:54:77:51
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584A81463A49A069D9E728B72680
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/7636049c-7776-38c7-b741-08939ec4dc7c.roa
Signing time:             Sun 13 Jul 2025 13:01:03 +0000
ROA not before:           Sun 13 Jul 2025 13:01:03 +0000
ROA not after:            Sat 11 Oct 2025 13:01:03 +0000
asID:                     30036
IP address blocks:        2604:2e8b:dc00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:81:46:3a:49:a0:69:d9:e7:28:b7:26:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jul 13 13:01:03 2025 GMT
            Not After : Oct 11 13:01:03 2025 GMT
        Subject: CN=6a6d9df3-7ff4-4e3b-ac29-4d3aadaafd32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:45:60:b6:67:6f:9a:8a:c1:58:e0:24:8f:78:
                    5a:c1:aa:8c:2a:57:01:e3:31:ea:44:ac:55:d0:c5:
                    11:33:60:c2:85:90:a2:4c:f0:83:a5:43:3c:da:0c:
                    b2:e1:ed:09:6d:12:89:0b:4b:97:e4:8f:94:d7:12:
                    d2:2e:5b:ff:db:4c:90:b5:1f:ff:1b:eb:5a:f4:e2:
                    67:73:fd:06:19:35:06:af:19:b8:80:5b:f5:e2:4a:
                    54:5c:54:1f:3f:ca:cd:91:0c:b9:2b:3f:0f:05:c5:
                    cc:b1:4c:b4:e7:f1:33:8d:24:43:8a:7d:6e:c4:1f:
                    c0:ab:96:9a:9b:6e:4c:37:f8:be:13:52:45:ed:11:
                    4c:96:40:45:52:53:64:24:da:df:ce:9c:8f:cf:b4:
                    f0:1f:76:96:34:68:84:4e:7a:bf:5e:c8:75:4c:52:
                    67:7c:0e:e1:da:9e:11:d7:ed:ff:60:26:f6:ae:78:
                    9a:47:a8:57:28:aa:5b:f2:43:52:51:6e:39:04:60:
                    8d:2b:67:bd:93:13:11:4e:95:5b:44:1a:c0:71:e7:
                    0f:01:e0:ba:e8:af:d0:39:4b:0e:f3:50:32:aa:72:
                    44:b0:02:92:d0:ea:ff:56:0e:cb:0b:45:88:ce:fa:
                    b1:62:5c:37:31:fe:37:18:44:a5:f6:81:b6:1d:a0:
                    85:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:22:4D:19:A2:54:0E:ED:36:1A:6F:18:10:76:C9:0B:91:54:77:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/7636049c-7776-38c7-b741-08939ec4dc7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8b:dc00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:a9:b2:bd:46:e0:fe:69:8d:e6:9e:26:c4:f9:2a:db:c1:03:
         22:d9:ba:9f:3c:06:a6:a3:e5:57:91:b6:87:70:df:01:59:50:
         a4:29:70:8f:66:da:ed:10:e2:1a:6d:a2:dd:43:c2:2a:60:49:
         70:86:08:82:2f:50:d4:8d:88:28:be:d4:97:d5:02:70:fd:cf:
         b2:7e:e2:41:6d:08:af:6d:03:9e:92:04:86:55:bf:7b:74:cf:
         29:a3:d9:d5:1d:3a:d7:8f:c4:d4:4c:c8:60:7b:1c:ed:f9:02:
         02:86:f6:98:27:2d:1e:22:e1:36:7e:2c:85:2f:24:98:99:bb:
         06:6f:1a:2a:2c:28:e5:0f:ff:2d:7f:ca:42:48:a0:2a:d4:4e:
         94:8c:e9:97:07:e5:50:c7:a6:22:86:21:f1:69:a3:7b:ad:66:
         1b:db:be:60:a3:9b:50:4d:81:83:17:d5:71:8e:b0:88:19:74:
         38:11:81:ba:21:da:bd:6c:d1:05:3f:a9:97:e5:ff:d1:30:af:
         3b:66:bb:7d:2e:36:91:4f:20:3c:a7:25:03:cd:35:40:e2:f2:
         3b:98:b0:aa:fd:e6:0e:cf:ca:ca:2c:c9:fc:3f:0a:2f:10:eb:
         d7:ab:30:5c:60:60:11:b0:b1:7f:4c:d9:b4:66:c0:16:3c:3d:
         62:f7:cd:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:12:47 2025 by rpki-client