Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c37c3f8a-b3df-3062-8f89-06b362e16716.roa
File:                     c37c3f8a-b3df-3062-8f89-06b362e16716.roa (raw, json)
Hash identifier:          G4lVin+P2DRodSqle3P7y4GcbPZHlj69NGTyk4gdiRQ=
Subject key identifier:   9E:30:AB:F1:02:C4:2D:65:6E:7D:8A:68:FC:8C:7B:77:DC:C3:28:AC
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F43285849A4BA1AA0F6991D01C5673F80
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c37c3f8a-b3df-3062-8f89-06b362e16716.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     30036
IP address blocks:        2604:2e8e:8000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:1a:a0:f6:99:1d:01:c5:67:3f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=dbecb840-6efa-404a-a607-4adec4e636c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:fd:dd:43:ad:c4:ff:ac:ab:e6:01:d8:3b:7e:
                    71:8f:ed:c3:8b:db:d3:36:6a:d3:64:33:2a:3c:24:
                    8c:96:8f:8c:7b:c3:16:40:b6:92:de:af:ef:ce:a7:
                    5a:38:f3:bb:e6:70:2c:87:0e:66:ed:74:ba:79:09:
                    d6:96:6b:0b:41:71:27:56:7f:95:7e:90:12:fe:93:
                    9c:a4:dc:14:41:bb:9b:09:6e:12:b9:35:81:a8:1b:
                    bd:ab:ce:89:a4:38:7a:2a:20:26:96:6d:07:98:17:
                    4a:30:7f:d0:2f:eb:fc:1d:d7:5e:77:2c:cc:56:ce:
                    15:9a:c5:58:ec:5c:35:69:84:0e:76:b6:84:b8:77:
                    04:84:42:8f:8f:9c:c7:80:15:a4:60:3c:66:b5:20:
                    77:0a:42:30:65:ba:38:da:55:da:9d:67:1d:ef:15:
                    86:da:aa:2e:ca:95:73:11:d4:e1:f7:3d:e4:ae:59:
                    31:d6:8f:f0:bd:ed:6e:ac:8e:f6:a6:65:31:b7:62:
                    2d:c1:b1:62:8a:11:47:59:81:78:e2:7b:f7:50:b7:
                    e1:6a:85:49:9e:10:80:67:b8:ce:dc:c8:80:4b:96:
                    88:a2:aa:d9:f4:68:77:9b:15:3e:7c:4e:27:1a:e0:
                    19:30:1f:58:9a:be:92:2c:b5:fb:aa:f9:73:e3:cc:
                    19:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:30:AB:F1:02:C4:2D:65:6E:7D:8A:68:FC:8C:7B:77:DC:C3:28:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c37c3f8a-b3df-3062-8f89-06b362e16716.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8e:8000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:30:24:43:6c:1f:03:08:41:64:27:13:45:08:04:3f:96:fb:
         a2:44:82:84:a6:cf:fb:ef:86:af:30:d3:61:35:1d:d1:bb:70:
         bb:23:ba:a1:35:72:f7:fa:6a:c4:a9:7e:5a:64:c6:e5:d1:4f:
         8c:0e:1d:89:10:aa:22:9d:99:a3:66:43:38:f2:f1:4b:15:e7:
         f1:38:a8:9e:92:0c:d0:71:3b:b2:03:a9:2b:67:93:68:0b:70:
         e3:09:12:ee:cb:d1:15:f3:a2:f8:a7:85:4a:68:07:3a:0d:42:
         50:48:dd:d6:e0:ea:9b:e4:c7:22:b2:01:f4:de:4a:08:8c:31:
         a4:e4:f1:09:8a:8c:0f:50:aa:4c:bc:11:41:68:f0:bf:ab:f4:
         d3:3a:c1:58:72:98:41:c1:b9:1e:c4:da:99:b8:35:a8:5e:f9:
         be:29:a1:8f:4f:9b:da:a5:7a:f3:86:2d:d3:94:92:bd:92:32:
         50:ed:93:e8:ba:ca:a5:5e:34:ed:f1:01:ef:21:ad:7a:f8:e6:
         fe:e8:06:f5:49:fb:87:04:a3:37:03:d6:7a:a9:11:63:e4:72:
         1c:6a:14:b3:0e:37:48:0d:8e:3a:7b:cb:da:06:d7:a3:c3:98:
         c0:a4:17:35:99:ad:5f:53:b9:c3:ae:31:37:92:cf:26:a5:e9:
         4d:87:16:c1
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEmkuhqg9pkdAcVnP4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk
ZGJlY2I4NDAtNmVmYS00MDRhLWE2MDctNGFkZWM0ZTYzNmM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/3dQ63E/6yr5gHYO35xj+3Di9vTNmrTZDMq
PCSMlo+Me8MWQLaS3q/vzqdaOPO75nAshw5m7XS6eQnWlmsLQXEnVn+VfpAS/pOc
pNwUQbubCW4SuTWBqBu9q86JpDh6KiAmlm0HmBdKMH/QL+v8HddedyzMVs4VmsVY
7Fw1aYQOdraEuHcEhEKPj5zHgBWkYDxmtSB3CkIwZbo42lXanWcd7xWG2qouypVz
EdTh9z3krlkx1o/wve1urI72pmUxt2ItwbFiihFHWYF44nv3ULfhaoVJnhCAZ7jO
3MiAS5aIoqrZ9Gh3mxU+fE4nGuAZMB9Ymr6SLLX7qvlz48wZjQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFJ4wq/ECxC1lbn2KaPyMe3fcwyisMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYzM3YzNmOGEtYjNkZi0z
MDYyLThmODktMDZiMzYyZTE2NzE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujoAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEASTAkQ2wfAwhBZCcTRQgEP5b7okSChKbP+++GrzDTYTUd0btwuyO6
oTVy9/pqxKl+WmTG5dFPjA4diRCqIp2Zo2ZDOPLxSxXn8TionpIM0HE7sgOpK2eT
aAtw4wkS7svRFfOi+KeFSmgHOg1CUEjd1uDqm+THIrIB9N5KCIwxpOTxCYqMD1Cq
TLwRQWjwv6v00zrBWHKYQcG5HsTambg1qF75vimhj0+b2qV684Yt05SSvZIyUO2T
6LrKpV407fEB7yGtevjm/ugG9Un7hwSjNwPWeqkRY+RyHGoUsw43SA2OOnvL2gbX
o8OYwKQXNZmtX1O5w64xN5LPJqXpTYcWwQ==
-----END CERTIFICATE-----
Generated at Sun Apr 27 04:10:01 2025 by rpki-client