Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a737e8f4-d940-30fb-a6b2-692495465d85.roa
File:                     a737e8f4-d940-30fb-a6b2-692495465d85.roa (raw, json)
Hash identifier:          yVTe4Cjp6LAsG1vF6mtG3qOuL+z9WPSmArWKAVN1K3Y=
Subject key identifier:   5B:2F:9C:02:0C:EA:6B:C0:45:25:A7:DE:D5:1F:EB:8F:11:11:4E:59
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F43285849A4BA374E135EBFF2553F50C0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a737e8f4-d940-30fb-a6b2-692495465d85.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     30036
IP address blocks:        2604:2e88:6400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:37:4e:13:5e:bf:f2:55:3f:50:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=df2008b5-a041-412a-a5fc-e5436adfc254
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:21:89:c0:c2:cb:bc:df:7c:46:e3:74:50:7c:
                    26:a5:7a:09:8f:7e:1f:d7:4c:31:22:0e:5a:27:34:
                    33:80:e2:8e:3e:f5:20:cb:fe:4e:9b:ec:0f:0f:81:
                    6a:f8:80:60:d9:c0:b8:23:04:e2:23:3b:77:38:87:
                    e9:a2:0a:f7:cb:b7:9d:6d:6f:00:fe:c4:54:a5:7a:
                    53:67:82:bd:43:70:c4:46:9a:20:9f:74:07:65:59:
                    3a:1c:1e:85:39:bf:bc:d8:74:79:91:70:32:aa:62:
                    51:72:aa:8d:30:50:eb:88:89:97:fb:b0:72:8e:98:
                    b8:15:e8:48:e2:ea:60:c8:30:25:a8:1d:82:89:a9:
                    41:5f:bc:52:99:b8:17:d0:08:13:d0:75:82:2b:cc:
                    4d:eb:3a:2a:25:fb:0e:17:2f:34:4d:3e:b1:73:58:
                    7d:dd:9a:47:19:5e:20:a5:36:b6:d7:79:db:1d:38:
                    a8:df:11:e3:35:23:59:74:42:0e:80:e2:dc:a5:68:
                    49:ba:1b:d2:0c:63:e5:9e:47:7f:11:a8:50:5a:ca:
                    b0:44:b6:56:d9:d9:af:04:25:ef:2e:16:0e:16:79:
                    8e:51:1d:e2:45:cb:e9:e7:b5:6a:ed:cb:e4:c0:84:
                    3e:b7:81:ae:6a:05:a3:63:b1:18:5a:e7:29:24:59:
                    60:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:2F:9C:02:0C:EA:6B:C0:45:25:A7:DE:D5:1F:EB:8F:11:11:4E:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a737e8f4-d940-30fb-a6b2-692495465d85.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e88:6400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:f2:54:81:d2:0d:94:89:c6:aa:2f:24:57:1a:db:64:2f:e1:
         62:77:42:85:da:2a:8f:af:d3:d4:af:51:f5:7d:7c:26:2f:2b:
         d5:99:28:ed:f4:41:34:6e:cc:40:ad:93:b2:bf:be:0b:7e:32:
         9e:5e:ea:d3:80:3a:bb:66:5a:49:bd:e8:4c:ea:12:61:0a:73:
         42:65:0b:7a:02:d4:02:43:c5:9e:1d:83:55:cd:ac:47:bf:4e:
         cb:79:37:17:fc:37:64:b5:71:40:58:d4:50:3a:39:55:f1:a4:
         f4:b2:58:e1:92:1b:9c:ad:8a:fc:42:05:c8:f7:45:a7:23:8d:
         68:03:71:94:f4:62:04:23:e0:19:93:f6:56:1d:5c:34:1a:f5:
         db:98:b4:11:cf:7f:a8:3f:d7:0b:aa:09:5b:8f:06:2b:5b:da:
         c4:8f:6d:5a:d7:70:11:55:a7:9d:ff:bf:fc:14:6f:ef:79:db:
         dd:01:c4:32:3b:a0:fe:10:ca:90:cc:f7:2c:ee:40:38:55:8b:
         f0:66:96:d1:ad:94:fd:2e:ce:76:87:4f:0f:b9:e1:fc:02:5d:
         81:5e:7e:23:0c:b3:a0:e4:20:26:52:a0:63:72:34:ad:f2:aa:
         c6:fc:2b:ad:7d:a4:ca:47:96:e3:f4:83:19:90:dd:60:82:d5:
         5f:1c:bc:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:36:08 2025 by rpki-client