Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/38fdca3c-b8e9-3031-9757-154c2b7d75ec.roa
File:                     38fdca3c-b8e9-3031-9757-154c2b7d75ec.roa (raw, json)
Hash identifier:          LRY0L7VM4wLFbAoVWVzvXtODNXM8wYRjQsp+Hy6zOKY=
Subject key identifier:   B5:09:D0:6B:21:4B:C7:02:0A:B4:71:97:DF:C4:53:5B:8B:4D:7B:D8
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F43285848C580689530C2391D72C7BCC0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/38fdca3c-b8e9-3031-9757-154c2b7d75ec.roa
Signing time:             Tue 04 Feb 2025 13:59:52 +0000
ROA not before:           Tue 04 Feb 2025 13:59:52 +0000
ROA not after:            Mon 05 May 2025 12:59:52 +0000
asID:                     30036
IP address blocks:        2604:2e8e:400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:80:68:95:30:c2:39:1d:72:c7:bc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Feb  4 13:59:52 2025 GMT
            Not After : May  5 12:59:52 2025 GMT
        Subject: CN=de79fd7f-e628-4311-9739-77db65c55bde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:e8:ef:f0:af:8e:82:6e:92:21:75:64:af:c9:
                    6d:e4:12:04:7d:de:02:0f:36:8b:91:02:85:1f:c7:
                    ec:70:a2:f6:83:64:51:2e:96:93:ef:34:b5:c4:e4:
                    a7:91:a7:fa:29:11:52:95:59:ac:4e:51:9b:49:d0:
                    fb:4b:f6:54:f1:7c:c9:d5:ad:81:ad:d1:87:a2:15:
                    fe:53:6b:56:84:92:ff:a2:9f:da:7b:1d:9a:fb:f0:
                    83:2f:6f:c4:d0:8b:e0:32:9d:01:54:bb:59:33:2c:
                    c4:58:8f:9e:5a:49:fe:b2:14:b3:71:ca:6c:f0:a1:
                    fa:6d:c7:cd:f4:c2:25:47:e7:cf:23:b9:74:5d:19:
                    a5:a2:da:fe:fc:38:4e:c2:89:72:a5:a9:55:06:ee:
                    23:82:36:ce:7b:d7:60:73:ae:4e:da:80:e3:90:c2:
                    d8:81:4c:0d:f0:ae:8b:7b:0c:0e:c7:05:8f:de:70:
                    51:4a:05:24:31:1d:64:13:be:3f:25:5b:df:17:85:
                    3b:72:95:76:f5:d8:27:bf:ca:15:e9:06:e4:40:bd:
                    f1:35:74:29:a8:3d:55:f8:99:e8:cf:cf:a6:ae:f0:
                    00:5a:61:81:cb:03:3e:04:32:d4:dc:c8:3e:34:f0:
                    45:e1:07:47:cb:0a:20:4d:25:db:83:4f:21:a4:51:
                    7d:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:09:D0:6B:21:4B:C7:02:0A:B4:71:97:DF:C4:53:5B:8B:4D:7B:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/38fdca3c-b8e9-3031-9757-154c2b7d75ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8e:400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:0c:d5:67:33:7d:6a:23:80:ed:87:5c:a8:94:d2:7e:0d:16:
         b7:fc:17:3e:48:bf:3f:87:a3:47:30:53:35:91:fc:8c:bd:23:
         37:0c:93:e1:fd:95:da:7d:73:f3:6a:6b:be:8c:e0:d5:84:a8:
         49:e2:5f:1d:3c:8b:e6:a8:1c:1c:2e:38:e7:ed:9e:aa:33:62:
         e7:0d:76:65:2b:87:c9:0c:29:4d:5f:f2:98:b3:11:ce:d3:f2:
         84:ef:87:22:b1:9b:05:b4:88:5d:fd:39:f2:2c:1f:f6:2a:52:
         b2:05:00:1e:c3:0e:5b:6b:98:0c:cc:31:35:46:2b:dd:58:d6:
         70:6e:94:26:66:9f:c8:14:69:58:06:19:ee:d6:1a:1f:c9:8b:
         b8:7e:db:8b:49:e7:b2:43:34:b6:d1:fb:19:87:dc:f2:42:16:
         a3:10:aa:21:c2:99:37:60:d2:d2:19:23:48:6b:1c:dc:12:54:
         dc:23:fa:8d:61:5d:3d:65:cd:55:f5:cb:6a:a9:fe:cf:78:97:
         86:6f:ba:16:60:32:ba:ea:4d:7e:d5:9d:d3:eb:89:9e:23:fc:
         f9:d5:c2:6f:e1:4f:6f:10:ff:b8:2a:3a:d8:95:f2:ca:7d:86:
         4e:13:69:76:b8:bd:af:56:5a:ba:7d:53:eb:2b:39:5f:8d:fc:
         64:91:6e:b5
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEjFgGiVMMI5HXLHvMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI1MDIwNDEzNTk1MloXDTI1MDUwNTEyNTk1MlowLzEtMCsGA1UEAxMk
ZGU3OWZkN2YtZTYyOC00MzExLTk3MzktNzdkYjY1YzU1YmRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjejv8K+Ogm6SIXVkr8lt5BIEfd4CDzaLkQKF
H8fscKL2g2RRLpaT7zS1xOSnkaf6KRFSlVmsTlGbSdD7S/ZU8XzJ1a2BrdGHohX+
U2tWhJL/op/aex2a+/CDL2/E0IvgMp0BVLtZMyzEWI+eWkn+shSzccps8KH6bcfN
9MIlR+fPI7l0XRmlotr+/DhOwolypalVBu4jgjbOe9dgc65O2oDjkMLYgUwN8K6L
ewwOxwWP3nBRSgUkMR1kE74/JVvfF4U7cpV29dgnv8oV6QbkQL3xNXQpqD1V+Jno
z8+mrvAAWmGBywM+BDLU3Mg+NPBF4QdHywogTSXbg08hpFF9RQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFLUJ0GshS8cCCrRxl9/EU1uLTXvYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMzhmZGNhM2MtYjhlOS0z
MDMxLTk3NTctMTU0YzJiN2Q3NWVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujgQw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAYQzVZzN9aiOA7YdcqJTSfg0Wt/wXPki/P4ejRzBTNZH8jL0jNwyT
4f2V2n1z82prvozg1YSoSeJfHTyL5qgcHC445+2eqjNi5w12ZSuHyQwpTV/ymLMR
ztPyhO+HIrGbBbSIXf058iwf9ipSsgUAHsMOW2uYDMwxNUYr3VjWcG6UJmafyBRp
WAYZ7tYaH8mLuH7bi0nnskM0ttH7GYfc8kIWoxCqIcKZN2DS0hkjSGsc3BJU3CP6
jWFdPWXNVfXLaqn+z3iXhm+6FmAyuupNftWd0+uJniP8+dXCb+FPbxD/uCo62JXy
yn2GThNpdri9r1Zaun1T6ys5X438ZJFutQ==
-----END CERTIFICATE-----
Generated at Wed Apr 9 00:06:32 2025 by rpki-client