Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b553cfac-daaf-3d07-9cb1-0580a34c8003.roa
File:                     b553cfac-daaf-3d07-9cb1-0580a34c8003.roa (raw, json)
Hash identifier:          UHALtBA+/J2XASEwM9ZUCD5vnSIpY0UxuIYs3WhY6s8=
Subject key identifier:   EC:7A:40:46:3C:57:69:61:E3:4E:42:9A:2B:D7:51:D2:8B:72:1A:E2
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F43285849F2E5248ABE5752F3525A9100
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b553cfac-daaf-3d07-9cb1-0580a34c8003.roa
Signing time:             Fri 23 May 2025 13:01:03 +0000
ROA not before:           Fri 23 May 2025 13:01:03 +0000
ROA not after:            Thu 21 Aug 2025 13:01:03 +0000
asID:                     30036
IP address blocks:        2604:2e80:800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f2:e5:24:8a:be:57:52:f3:52:5a:91:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: May 23 13:01:03 2025 GMT
            Not After : Aug 21 13:01:03 2025 GMT
        Subject: CN=22a6f916-3795-4dcb-a078-9fbb3d48837c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:fd:ba:c9:9f:9d:5a:c8:df:ba:4c:6d:1b:18:
                    38:d2:87:5f:b2:ff:12:f4:ae:6a:2b:d2:bd:33:39:
                    6a:81:e7:55:44:90:df:b3:d7:06:9c:29:ad:20:e5:
                    e3:13:d5:cb:89:e2:29:af:34:bf:43:e8:9b:23:09:
                    16:61:fc:c9:bd:fc:24:b8:85:be:5d:b1:b1:49:c0:
                    07:f0:ad:7b:b3:ba:34:8f:72:72:eb:7a:86:15:d4:
                    0f:36:57:d0:8a:2f:db:a3:10:ba:1e:d1:ff:7d:8a:
                    60:5d:7d:2d:10:d3:a5:b3:6b:41:ef:22:b5:72:a4:
                    df:ea:d5:bc:26:93:f0:ea:2e:d7:3f:5a:14:d1:d8:
                    2d:85:6a:00:43:83:fc:63:21:3b:94:4c:28:43:4b:
                    3b:54:57:62:5b:03:c5:bc:36:fd:b1:ef:44:3b:c9:
                    d8:20:c2:f7:99:75:4b:fb:6f:11:95:c9:28:5c:45:
                    1c:41:55:80:c3:ef:e1:ca:cf:0c:d5:7f:d2:f4:4e:
                    d2:46:99:e8:c4:7a:28:aa:27:dc:4f:a6:fc:9a:ba:
                    2d:5d:4d:1f:c3:ea:2a:6e:fb:7e:98:78:f0:ac:3b:
                    17:20:f8:08:5b:f2:3d:8d:0d:84:a1:ee:b4:48:6a:
                    9e:9c:d3:c3:ee:52:f6:59:d1:b8:7e:66:55:36:8a:
                    07:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:7A:40:46:3C:57:69:61:E3:4E:42:9A:2B:D7:51:D2:8B:72:1A:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b553cfac-daaf-3d07-9cb1-0580a34c8003.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e80:800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:1c:de:bb:e7:cc:1a:11:1e:8c:49:90:6e:d8:53:b4:68:eb:
         63:35:5b:eb:a3:16:b4:72:4c:6e:da:fd:38:98:48:48:43:77:
         1b:e1:67:db:ae:9c:18:80:92:9b:b4:7b:4c:bb:11:61:b2:d7:
         9f:60:79:c6:21:00:83:e5:10:66:8a:38:a5:55:2f:eb:7e:8d:
         a3:63:e2:ef:b8:14:7e:89:53:ec:ea:82:ab:85:bb:23:f1:b2:
         5e:e0:b4:6c:12:98:b1:08:d1:fc:b3:0d:86:19:81:34:d1:1e:
         99:5c:5b:5c:53:df:55:2b:84:3e:75:61:a2:94:c7:72:45:ad:
         6e:5f:b5:ed:44:09:ff:c7:a7:fd:b1:f3:58:40:94:f3:a5:0d:
         86:99:0d:49:19:23:33:df:3f:42:21:b2:68:ec:70:b0:fa:86:
         b3:c3:3b:0b:76:9b:e8:9e:dc:71:2a:b1:06:1a:64:78:99:e4:
         8e:26:59:7f:a6:ad:df:7c:44:2a:64:d5:9f:78:a2:1b:c4:b9:
         fb:fc:52:47:07:21:35:15:cf:a7:e0:c8:af:79:b6:0d:80:63:
         d4:13:3d:ef:79:87:11:84:8e:ac:c2:1d:12:8f:c1:df:7c:da:
         2e:2e:1c:bc:04:72:ad:ce:d8:26:21:93:c5:9a:19:06:be:d2:
         5f:7c:02:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 14:30:15 2025 by rpki-client