Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d1f26942-1468-3231-a4ef-8ec2a1d9617d.roa
File:                     d1f26942-1468-3231-a4ef-8ec2a1d9617d.roa (raw, json)
Hash identifier:          hL96YTjnu2INJypqLtiabzm1LexnjqELVFV+vieCTy4=
Subject key identifier:   56:86:B4:BD:4A:AF:B5:B2:01:6C:F9:18:07:36:AC:5F:DE:AC:AB:32
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584A8410F34D3A40C26CEF47BC80
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d1f26942-1468-3231-a4ef-8ec2a1d9617d.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     30036
IP address blocks:        2604:2e8e:1000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:10:f3:4d:3a:40:c2:6c:ef:47:bc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=313552f6-f06e-4209-ac09-f7d6916e139b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:da:c8:d4:4d:3a:86:81:96:dc:b1:47:b7:46:
                    87:56:92:4e:95:ce:4b:d1:de:80:de:85:a8:1c:a6:
                    0e:4f:48:d5:9d:e7:d0:f6:82:39:36:6a:ba:0b:70:
                    31:65:da:c1:57:f7:21:02:b9:66:ec:63:ed:0a:88:
                    ef:cd:c5:e8:d5:88:ad:b4:c6:04:57:18:6c:a4:5f:
                    90:98:6d:ac:ee:99:58:28:21:27:9d:59:6e:b6:54:
                    ac:9e:80:91:47:14:9c:e0:20:b0:fb:f5:ab:81:d6:
                    70:29:83:ba:83:1e:a7:97:6a:2f:3b:95:af:ab:8c:
                    a1:56:ea:ce:45:f5:c0:ad:41:18:38:16:dc:e3:f3:
                    7e:32:ee:9c:18:b2:db:b0:bc:4c:be:6f:cb:44:7a:
                    f0:97:93:4c:9b:6b:4a:e1:a2:30:fc:6b:cf:44:73:
                    9e:2a:18:d3:dd:7b:6e:58:eb:2d:82:2a:46:f1:65:
                    56:a3:01:ed:90:ae:7b:48:d5:1a:25:67:1d:29:7e:
                    55:ef:04:ca:86:98:bd:2e:69:80:76:9f:5e:85:5a:
                    b6:58:4b:ae:38:e5:8d:ce:2e:54:9f:18:b1:b6:63:
                    7f:15:3f:22:9a:6b:4c:97:73:63:fc:07:a9:bd:cc:
                    25:01:9d:dc:d1:1c:e8:f1:9d:c7:44:0f:98:10:df:
                    39:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:86:B4:BD:4A:AF:B5:B2:01:6C:F9:18:07:36:AC:5F:DE:AC:AB:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d1f26942-1468-3231-a4ef-8ec2a1d9617d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8e:1000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:7a:4c:4f:d1:2c:90:7b:2d:22:29:21:31:2b:a7:b8:c5:40:
         05:0a:9d:99:b5:5e:7c:1b:a2:33:89:b2:1f:ad:62:c6:58:99:
         bd:5e:13:e7:13:fd:7e:c9:64:6b:36:af:88:e2:15:f5:90:c1:
         61:93:b0:f2:82:3a:7b:b0:0b:e6:1c:7a:23:64:ef:35:54:ee:
         1e:e6:c6:fb:03:25:34:d0:fe:99:b3:2e:6a:d5:32:87:bd:a7:
         60:35:b6:df:75:39:0d:ff:0f:36:b8:65:19:41:d4:c4:9a:71:
         5f:c1:ef:1a:1a:a2:41:fd:60:e7:cc:b6:64:05:68:a3:24:f6:
         f2:d1:40:a0:15:29:03:95:27:42:5b:dd:08:fb:f4:73:a0:1b:
         4c:19:32:71:65:cf:8e:4f:0c:b3:ff:77:f6:a7:0a:e7:49:5c:
         13:26:c4:36:63:cd:81:7d:cc:a0:81:ad:f0:e5:85:2d:f5:83:
         e7:d7:71:17:34:6f:01:a6:0e:5f:80:1d:f9:aa:8d:d2:5e:f5:
         40:63:81:dd:a2:da:e2:39:fe:cb:4a:2d:5a:36:10:60:80:e2:
         01:76:fb:12:c1:3d:ca:83:12:3a:56:38:73:4e:81:5a:de:05:
         cf:c4:d4:5e:7c:d4:09:d5:bf:31:1c:ac:dc:69:97:a2:38:1f:
         fa:6c:b5:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 02:01:24 2025 by rpki-client