Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a41da2d8-6d56-3524-b868-acd5274597fb.roa
File:                     a41da2d8-6d56-3524-b868-acd5274597fb.roa (raw, json)
Hash identifier:          u8Y62ETgc927tEVvDBdN20+iX2uQ/HKD1uVG8bIqWho=
Subject key identifier:   33:9F:6F:62:79:2D:FF:73:9B:1D:6E:6E:03:05:BB:BD:B7:82:53:D7
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F43285849F2E52469A89C23FDAA788740
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a41da2d8-6d56-3524-b868-acd5274597fb.roa
Signing time:             Fri 23 May 2025 13:01:03 +0000
ROA not before:           Fri 23 May 2025 13:01:03 +0000
ROA not after:            Thu 21 Aug 2025 13:01:03 +0000
asID:                     30036
IP address blocks:        2604:2e80::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f2:e5:24:69:a8:9c:23:fd:aa:78:87:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: May 23 13:01:03 2025 GMT
            Not After : Aug 21 13:01:03 2025 GMT
        Subject: CN=a42ab0a9-ebfd-4302-8ede-a4753ab692ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:9c:42:3d:80:18:3e:fb:07:70:cc:36:16:af:
                    eb:6f:f9:2d:32:17:8f:30:37:59:bd:66:97:3b:0a:
                    45:4f:ba:86:e3:35:90:42:81:f9:eb:4a:60:82:00:
                    07:88:13:2b:1f:f0:65:10:73:16:bb:63:34:7e:d7:
                    5a:42:f3:f8:f3:00:a6:6f:d4:05:fd:e3:16:4e:ce:
                    a3:ee:b0:e6:fa:10:5a:1f:67:4f:4e:eb:55:76:da:
                    73:de:6e:41:f3:86:22:1e:e5:eb:d2:f9:01:eb:27:
                    9a:1f:4e:b7:41:72:e7:8b:f4:e1:2f:7d:b5:4e:e8:
                    21:d2:23:1e:7a:cc:44:c3:b5:c6:15:9c:61:57:85:
                    26:fa:60:b4:84:8d:a7:ce:f7:bb:9f:25:01:0b:b7:
                    ef:f8:37:1d:48:9e:38:34:c4:e5:0b:27:0d:f0:a2:
                    bb:97:46:30:ed:fc:53:7b:bc:78:57:ec:3f:6e:d7:
                    cf:cd:14:45:32:1d:ce:8a:9c:04:28:3b:2a:6a:92:
                    82:87:1b:94:be:3f:bb:74:97:4a:76:01:58:df:2d:
                    c0:6b:98:ad:dc:d9:8a:c5:87:95:92:9d:8e:f9:51:
                    72:40:14:4c:2a:6e:bf:0e:e4:b3:d6:ec:27:3d:72:
                    93:af:85:d1:3a:0c:bc:fc:c5:f8:2a:9f:72:8c:91:
                    7e:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:9F:6F:62:79:2D:FF:73:9B:1D:6E:6E:03:05:BB:BD:B7:82:53:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a41da2d8-6d56-3524-b868-acd5274597fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e80::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:de:3f:3b:c6:b5:a2:b2:b2:2b:36:b1:2e:78:ca:e7:95:eb:
         c2:a0:3e:30:5c:30:c1:f1:96:75:fc:3e:16:ff:bc:61:ae:e4:
         17:7f:87:a4:8b:47:43:5b:9a:ec:85:17:c9:32:ea:0d:28:f0:
         7b:1f:02:af:8c:91:63:b7:fe:7f:1d:37:ea:01:60:c3:46:74:
         1f:df:e2:83:67:94:69:85:c0:8e:3a:8f:e3:77:f3:7c:07:ea:
         0c:39:b6:51:6d:f9:65:be:27:0b:c3:92:25:ac:97:18:eb:be:
         0f:67:0f:89:7c:6e:32:1a:d7:82:91:c4:84:13:91:3f:67:84:
         1b:f9:de:23:73:f6:bf:87:64:1c:55:6c:15:2e:19:4e:b9:43:
         e6:ed:68:00:c5:d8:98:51:15:7d:c4:7a:aa:7e:27:78:35:e1:
         3a:40:b5:eb:e4:59:0d:8f:f8:18:94:66:9e:ec:3d:2d:b8:ac:
         17:0a:41:bb:5a:9f:41:57:ec:50:12:b1:8b:64:ec:3f:d8:9a:
         69:03:d8:47:30:96:78:6f:a6:5f:66:6b:d5:8f:9f:2d:28:2f:
         e4:9c:d1:df:cb:64:95:51:6a:b2:29:f7:db:ff:ea:be:0a:58:
         6f:66:dc:3e:b1:f0:59:6b:99:23:1c:1e:30:56:98:2c:da:60:
         82:49:0b:21
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEny5SRpqJwj/ap4h0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI1MDUyMzEzMDEwM1oXDTI1MDgyMTEzMDEwM1owLzEtMCsGA1UEAxMk
YTQyYWIwYTktZWJmZC00MzAyLThlZGUtYTQ3NTNhYjY5MmVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ZxCPYAYPvsHcMw2Fq/rb/ktMhePMDdZvWaX
OwpFT7qG4zWQQoH560pgggAHiBMrH/BlEHMWu2M0ftdaQvP48wCmb9QF/eMWTs6j
7rDm+hBaH2dPTutVdtpz3m5B84YiHuXr0vkB6yeaH063QXLni/ThL321Tugh0iMe
esxEw7XGFZxhV4Um+mC0hI2nzve7nyUBC7fv+DcdSJ44NMTlCycN8KK7l0Yw7fxT
e7x4V+w/btfPzRRFMh3OipwEKDsqapKChxuUvj+7dJdKdgFY3y3Aa5it3NmKxYeV
kp2O+VFyQBRMKm6/DuSz1uwnPXKTr4XROgy8/MX4Kp9yjJF+jQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFDOfb2J5Lf9zmx1ubgMFu723glPXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYTQxZGEyZDgtNmQ1Ni0z
NTI0LWI4NjgtYWNkNTI3NDU5N2ZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQugAAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEALt4/O8a1orKyKzaxLnjK55XrwqA+MFwwwfGWdfw+Fv+8Ya7kF3+H
pItHQ1ua7IUXyTLqDSjwex8Cr4yRY7f+fx036gFgw0Z0H9/ig2eUaYXAjjqP43fz
fAfqDDm2UW35Zb4nC8OSJayXGOu+D2cPiXxuMhrXgpHEhBORP2eEG/neI3P2v4dk
HFVsFS4ZTrlD5u1oAMXYmFEVfcR6qn4neDXhOkC16+RZDY/4GJRmnuw9LbisFwpB
u1qfQVfsUBKxi2TsP9iaaQPYRzCWeG+mX2Zr1Y+fLSgv5JzR38tklVFqsin32//q
vgpYb2bcPrHwWWuZIxweMFaYLNpggkkLIQ==
-----END CERTIFICATE-----
Generated at Tue Jun 17 01:26:27 2025 by rpki-client