Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3a06b869-7c12-34cf-8f57-99e8d5ab6b95.roa
File:                     3a06b869-7c12-34cf-8f57-99e8d5ab6b95.roa (raw, json)
Hash identifier:          qUEU72bdSO7t9807yxtbPiA7FI0A2jslqL1QX2EDjoc=
Subject key identifier:   96:01:FA:7B:74:E2:93:2F:6D:89:CF:16:12:8C:2D:EE:58:89:DE:D0
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F43285848C577E2404C9B766A6A4F6600
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3a06b869-7c12-34cf-8f57-99e8d5ab6b95.roa
Signing time:             Tue 04 Feb 2025 13:42:41 +0000
ROA not before:           Tue 04 Feb 2025 13:42:41 +0000
ROA not after:            Mon 05 May 2025 12:42:41 +0000
asID:                     30036
IP address blocks:        2604:2e8b:c800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:77:e2:40:4c:9b:76:6a:6a:4f:66:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Feb  4 13:42:41 2025 GMT
            Not After : May  5 12:42:41 2025 GMT
        Subject: CN=6203280b-5d99-4e2b-a554-6ec2a1c47b56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ec:2f:a0:94:0f:6a:3f:76:99:8d:65:ef:05:
                    24:34:af:33:b2:48:83:43:5b:2c:70:cb:a8:88:8c:
                    5a:16:36:05:38:82:45:d4:8a:82:95:b2:38:c7:b6:
                    fb:b9:eb:8d:32:1a:64:29:d4:51:7a:5b:ea:49:d4:
                    31:3e:6f:10:3e:31:87:d2:5d:8d:6a:8d:b4:5c:73:
                    b0:b7:02:a9:49:34:9a:bf:67:ee:29:a9:2e:4d:d4:
                    c2:5c:77:cf:18:77:8d:85:0f:95:90:ff:9b:7f:23:
                    34:82:46:9b:3f:6b:b4:33:29:44:bc:cc:b8:2b:67:
                    01:5a:b7:12:23:20:64:c6:d1:d6:63:9d:5a:40:6d:
                    20:d5:46:95:6d:2d:31:19:d7:29:fa:c7:34:72:2d:
                    db:2f:37:dd:2a:04:b2:6b:a0:0a:5a:6f:18:b8:fa:
                    26:f1:f6:46:83:28:ee:14:13:a1:48:6d:ca:00:60:
                    a0:1e:45:33:09:02:ad:da:d0:08:29:53:07:1a:b3:
                    78:ef:d0:a7:42:3f:f2:ea:e1:b3:aa:84:9f:f7:1a:
                    4a:ca:0e:15:83:c3:c4:ac:7a:38:4e:f4:7a:19:14:
                    d0:31:65:c9:da:7b:07:41:b1:f0:ea:88:7f:3d:5a:
                    3f:95:a7:c3:80:77:2b:8e:dc:6d:65:39:ed:a6:63:
                    ed:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:01:FA:7B:74:E2:93:2F:6D:89:CF:16:12:8C:2D:EE:58:89:DE:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3a06b869-7c12-34cf-8f57-99e8d5ab6b95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8b:c800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:8a:e0:ea:f8:92:4f:79:f8:99:2d:22:3d:34:8b:72:a4:15:
         c8:11:22:64:ed:7e:a4:94:9c:5a:2a:0f:3c:43:48:79:92:25:
         e8:6b:1f:ee:4a:fd:f2:7e:e2:8b:59:1e:b1:be:35:f5:62:cd:
         c0:42:c2:fc:f4:9c:22:1c:73:65:cc:e1:89:47:a1:9c:1e:e6:
         ce:25:e1:6a:fa:03:f7:fc:67:a2:19:ec:df:b6:01:18:6d:af:
         ce:6d:c0:78:d5:31:d8:69:5a:4e:c4:46:e0:ee:58:91:34:79:
         c3:87:2e:8c:56:80:89:56:5b:81:57:a5:de:62:ad:92:d2:1f:
         47:f4:4f:24:71:8d:11:e4:8a:0b:f7:c3:67:32:8c:1e:3d:b7:
         e5:36:63:8a:04:8a:17:19:4c:73:b4:74:ca:f5:c4:81:de:56:
         38:ed:74:22:c6:f3:33:e6:96:0c:a3:a1:69:20:a7:c4:38:e2:
         00:78:8d:a7:3f:b2:f2:0a:31:06:3b:ef:31:74:f3:3a:fe:cb:
         4e:3f:ec:1f:f4:c9:f6:cb:53:0b:fe:9d:3e:d8:64:02:bb:1e:
         5d:f3:36:ce:84:d6:fc:ab:da:5c:04:ae:a2:5a:49:5c:80:f4:
         c5:ba:5a:9d:2e:f9:29:97:4d:29:e7:ac:ae:d9:1c:3f:0f:11:
         2c:b7:28:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:53:51 2025 by rpki-client