Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ccc480b2-9563-3e36-9156-86ffe6b7c2cb.roa
File:                     ccc480b2-9563-3e36-9156-86ffe6b7c2cb.roa (raw, json)
Hash identifier:          n/uCcWDgf/f0ozM9aiVHMA8wzFxjDtaMIZq+b2t+rQo=
Subject key identifier:   CC:05:04:54:D2:5F:C2:52:38:18:4C:13:FE:89:08:CF:8C:B9:92:EA
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584A1F900E1D79B7DCB49701E500
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ccc480b2-9563-3e36-9156-86ffe6b7c2cb.roa
Signing time:             Sun 08 Jun 2025 13:01:01 +0000
ROA not before:           Sun 08 Jun 2025 13:01:01 +0000
ROA not after:            Sat 06 Sep 2025 13:01:01 +0000
asID:                     30036
IP address blocks:        2604:2e8b:4400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1f:90:0e:1d:79:b7:dc:b4:97:01:e5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jun  8 13:01:01 2025 GMT
            Not After : Sep  6 13:01:01 2025 GMT
        Subject: CN=eed0bfe0-79b6-45db-89fe-76721058c02f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:22:fe:16:23:10:7b:1c:bc:d1:f3:4f:f7:19:
                    70:35:6a:73:cc:f5:e0:bc:f0:be:87:4f:02:ca:ba:
                    b6:23:ee:47:91:07:35:3c:b5:92:9a:3f:7a:2c:41:
                    20:f1:2a:5b:1b:ec:5e:ee:9d:59:df:f5:9d:c2:e1:
                    6c:1e:f5:5b:42:b8:65:d1:e5:be:b9:85:79:ae:65:
                    e0:03:49:d4:cd:c0:6e:53:cd:a2:d8:e7:ae:7b:24:
                    14:81:36:b3:94:d6:49:7f:82:13:1c:82:4b:8f:5d:
                    f5:66:f9:1f:93:35:44:2a:0d:78:bc:fe:94:65:02:
                    11:d4:23:5d:4c:3b:b2:fd:a3:3d:23:6c:20:2e:b8:
                    6c:19:6a:cb:7a:8e:6c:65:81:2b:29:2d:59:1d:eb:
                    91:69:5a:df:27:d1:53:bb:98:44:df:06:21:c4:9c:
                    6d:06:c3:06:38:49:d2:ae:21:56:31:b2:93:f8:f2:
                    5a:60:ca:3f:49:c0:93:f4:fe:4e:10:e6:a3:57:07:
                    b6:32:f3:79:c9:f6:36:26:7a:a0:89:21:d4:bc:d2:
                    6c:8f:66:f1:01:ce:30:17:00:e0:58:03:5b:d4:9f:
                    68:c1:83:94:00:3a:4e:6d:9a:45:56:1f:ad:f2:87:
                    22:26:aa:e9:28:a5:e8:4e:8e:77:96:d4:d2:68:e4:
                    db:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:05:04:54:D2:5F:C2:52:38:18:4C:13:FE:89:08:CF:8C:B9:92:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ccc480b2-9563-3e36-9156-86ffe6b7c2cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8b:4400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:77:9e:86:73:de:fe:fe:4d:17:1e:df:9f:81:12:ae:d9:56:
         4f:e7:47:b2:a3:e7:85:42:fd:00:71:6a:8d:6d:25:5a:0b:ff:
         b8:51:7d:e4:61:28:56:34:dd:64:8f:15:d2:a3:ee:8a:50:0a:
         9b:fa:cd:62:8e:ae:8a:16:e2:ab:a2:73:d1:3d:9e:31:74:1c:
         00:5a:27:37:8e:59:10:68:66:1b:08:c8:a9:26:27:57:e0:23:
         de:40:de:e0:a9:ab:90:72:81:bf:8b:5b:6b:cd:b3:9d:06:11:
         b0:7c:91:2e:97:1e:d3:0c:36:bf:1b:d2:7e:9d:28:e3:f0:98:
         12:78:4c:05:e0:9a:5f:54:48:ba:b8:6a:4e:67:1f:34:cd:96:
         39:ad:d3:18:b1:38:72:14:cd:5c:b2:96:22:74:ee:90:99:bf:
         58:32:d7:8e:ac:c0:08:65:d5:f4:5b:38:36:16:b2:b4:b0:8e:
         26:e0:9f:53:ed:60:86:d3:25:d9:90:2c:b3:f8:fa:d7:fb:d7:
         cf:0f:6c:29:e7:92:e8:75:3a:14:54:0f:94:0c:5c:a8:63:54:
         27:8c:5e:13:3d:1a:e5:81:73:33:b8:0b:75:3f:9a:ae:13:a3:
         4d:df:a6:de:65:4c:3a:b9:fa:70:0a:8f:89:f6:6f:38:f8:ce:
         bf:2f:6f:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 16:22:19 2025 by rpki-client