Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/e0c395d7-a6d1-39dd-8bf2-b618b0462e61.roa
File:                     e0c395d7-a6d1-39dd-8bf2-b618b0462e61.roa (raw, json)
Hash identifier:          x9/+VqHzJe3tmfaS36uwsOHOtk8PKsuAyWcwiAN/XnM=
Subject key identifier:   D3:6F:19:D2:A4:75:57:39:82:A2:78:E6:5E:65:23:F6:D5:28:6D:5F
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584A86DC06C6E0B4C0EB0A8B8EC0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/e0c395d7-a6d1-39dd-8bf2-b618b0462e61.roa
Signing time:             Tue 15 Jul 2025 13:01:04 +0000
ROA not before:           Tue 15 Jul 2025 13:01:04 +0000
ROA not after:            Mon 13 Oct 2025 13:01:04 +0000
asID:                     30036
IP address blocks:        2604:2e8e:c000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:86:dc:06:c6:e0:b4:c0:eb:0a:8b:8e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jul 15 13:01:04 2025 GMT
            Not After : Oct 13 13:01:04 2025 GMT
        Subject: CN=37d34e2a-6574-44c0-8e23-a2f54f06c4d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:83:97:3e:d8:b6:0d:ff:41:e8:25:1c:05:85:
                    88:2d:0b:11:38:f1:9a:64:f1:d5:cb:03:5f:c6:c0:
                    93:e5:c7:61:5a:85:a1:99:6a:4f:1e:b7:c6:a3:a9:
                    8d:df:c2:21:59:bc:29:29:01:f2:2e:2d:07:70:de:
                    90:09:1b:a3:26:29:ff:ac:dd:f1:88:e8:a8:b0:3e:
                    67:60:9f:0e:e1:dc:db:5b:18:bb:44:2d:b1:f0:3a:
                    3a:2f:bc:f8:d1:de:bd:ee:9d:40:a5:99:63:9a:45:
                    e0:41:14:55:6f:16:d3:2c:d4:ea:bb:1d:61:28:b9:
                    79:5a:99:6b:6b:fd:ba:0e:25:f9:1b:a3:2d:20:90:
                    6f:4a:5d:bb:a5:b0:4f:b0:a1:26:9f:f3:45:ee:64:
                    06:b8:cd:33:4f:c8:92:2a:71:03:5d:88:04:35:da:
                    ad:33:4c:4e:86:25:09:37:0d:df:02:10:15:3e:d5:
                    a2:6f:0b:fa:50:77:56:9a:2f:3d:14:11:90:48:0c:
                    63:c5:0b:48:a5:8f:e1:c9:37:88:73:86:bf:5a:57:
                    86:38:61:53:df:79:fe:bf:b8:d5:ef:02:f1:52:92:
                    47:52:d7:e8:87:f1:ca:a8:0c:bf:84:aa:9d:fd:aa:
                    c4:3c:64:7b:3e:55:5e:e8:49:b1:db:89:87:bf:65:
                    83:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:6F:19:D2:A4:75:57:39:82:A2:78:E6:5E:65:23:F6:D5:28:6D:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/e0c395d7-a6d1-39dd-8bf2-b618b0462e61.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8e:c000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:2e:cd:26:3b:51:31:86:fe:da:f7:fc:83:56:f7:79:3c:c7:
         c9:b6:7b:c2:47:e2:88:c9:c4:9b:db:0b:b7:b3:b7:dd:67:c8:
         f6:68:bd:cf:ed:d8:4d:4f:0b:f9:02:42:f5:24:2a:8b:0b:0f:
         cb:2e:00:d0:63:c1:1a:dd:51:4e:62:ce:b6:08:a8:84:4e:30:
         a1:cb:15:90:34:d6:3c:fb:95:56:73:79:42:f1:f1:b5:41:a0:
         e5:59:69:af:06:dc:f0:74:14:38:79:69:fd:cb:bd:8c:a8:84:
         d4:17:0c:e0:9d:93:8b:b2:b2:4f:43:99:28:bc:fe:03:66:c6:
         af:09:ec:35:13:61:ac:59:cb:16:58:51:76:5a:6c:53:a0:3f:
         17:08:19:c6:50:e4:77:40:91:ee:9c:f6:ce:70:01:15:d8:46:
         0e:4a:15:45:d5:02:42:c3:51:18:de:38:4a:6d:6a:f6:57:d9:
         2b:0e:7b:70:5f:85:68:ab:1c:e9:45:29:8f:9b:bb:06:f8:f0:
         2e:94:8d:9f:f3:66:51:0b:bf:69:51:ab:fe:eb:04:f7:93:09:
         b7:fb:ac:fd:92:ed:63:32:55:7c:a5:5c:11:1b:8e:e4:bd:ec:
         3d:95:0f:f7:18:1d:ad:43:ab:35:48:d9:60:84:40:79:e0:7b:
         d5:8c:56:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 02:00:50 2025 by rpki-client