Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/594558ef-b1f9-3af0-b7f6-6586c200eb35.roa
File:                     594558ef-b1f9-3af0-b7f6-6586c200eb35.roa (raw, json)
Hash identifier:          1nU17vjyDEmpUMoeuVbmZn16QWW3DX6jwZbjGS7VYE4=
Subject key identifier:   02:28:43:1E:6D:23:3F:35:75:FF:CB:84:4B:C1:F6:D8:E2:C0:1C:23
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584A63F5B19287D982AE95CAC500
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/594558ef-b1f9-3af0-b7f6-6586c200eb35.roa
Signing time:             Thu 03 Jul 2025 01:00:48 +0000
ROA not before:           Thu 03 Jul 2025 01:00:48 +0000
ROA not after:            Wed 01 Oct 2025 01:00:48 +0000
asID:                     30036
IP address blocks:        2604:2e8d:9c00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:63:f5:b1:92:87:d9:82:ae:95:ca:c5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jul  3 01:00:48 2025 GMT
            Not After : Oct  1 01:00:48 2025 GMT
        Subject: CN=e1964d47-fc27-4f0b-b0c4-f98447af575a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:6b:17:74:66:77:35:08:6a:e6:c8:9a:e0:82:
                    1f:a7:1e:a8:01:e4:de:2b:9d:06:46:1a:d4:29:4c:
                    83:e1:7e:90:e1:f6:b3:5d:02:47:89:17:6e:d1:44:
                    16:cf:53:75:23:88:e5:3c:1c:47:72:2d:c0:9e:55:
                    a6:2b:aa:d8:a9:ec:b8:9e:88:70:15:60:3d:c7:4a:
                    3e:8e:d3:c6:5d:8b:2b:21:26:0b:c5:64:11:2a:28:
                    f3:5f:cc:86:fc:f2:73:f7:0b:53:79:ba:23:f4:28:
                    a5:88:41:3d:2f:d9:09:ff:ec:8a:9e:b8:d1:91:ac:
                    98:87:8d:a8:f1:0e:75:b8:42:3a:17:be:33:25:56:
                    13:ab:06:08:ea:ad:79:ac:4d:43:49:77:43:4b:14:
                    00:ff:5b:dc:99:4f:b1:5b:4c:fe:ad:99:4a:bf:3a:
                    cf:5f:fc:42:75:c2:1e:0e:bd:55:c0:1a:4f:17:dd:
                    78:14:27:df:47:4e:85:c6:a4:35:bc:3b:fe:28:f4:
                    f3:f0:3a:0c:54:21:74:ab:1b:97:40:3c:4c:33:21:
                    7d:43:92:7f:c6:e1:78:d9:cc:44:99:3f:fa:49:e8:
                    c5:0e:87:e5:d7:f9:e4:6b:ba:3d:3b:7d:ee:92:88:
                    4a:89:81:aa:75:a7:85:d0:e7:59:4e:c2:19:53:e9:
                    3e:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:28:43:1E:6D:23:3F:35:75:FF:CB:84:4B:C1:F6:D8:E2:C0:1C:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/594558ef-b1f9-3af0-b7f6-6586c200eb35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8d:9c00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:51:41:37:de:3d:e2:9c:1a:66:21:04:31:67:1b:76:c7:9e:
         27:41:73:f3:50:a5:af:80:4e:81:2d:3c:d5:8b:f6:08:ad:ff:
         92:43:92:e2:df:1a:9a:7f:db:19:12:a3:54:b0:75:52:9a:50:
         4f:be:6b:ec:ec:9e:73:88:54:b0:55:ec:3a:aa:a4:6d:16:a9:
         89:13:92:a0:9c:76:79:92:79:76:0a:92:2f:59:30:e7:57:c2:
         bf:b5:75:d4:ae:95:5a:fb:1d:44:f6:ee:ee:7c:43:ca:0c:e4:
         88:11:e2:89:a3:03:5a:e1:e5:52:60:7c:ba:c2:76:54:f8:73:
         e9:5d:39:33:56:0d:94:f9:22:e4:1c:38:fc:b9:49:bc:c6:11:
         56:a0:2b:90:e5:64:83:a5:0e:3b:bb:d1:ce:c7:ea:43:5c:0c:
         13:37:44:e1:84:47:87:08:b1:07:bf:41:09:a3:83:94:1f:32:
         8e:a5:c0:f0:0d:4f:48:2b:26:a2:33:ca:ac:17:39:83:3b:6b:
         ed:95:f8:e0:7e:b4:d4:0e:c1:4c:6f:02:d4:1d:f5:c7:3c:c8:
         d7:7a:2f:63:fe:83:68:f3:ae:7b:35:70:61:a5:b8:8d:7d:74:
         11:3b:f8:4c:4e:b3:91:a8:09:b9:f1:58:ff:7b:a5:45:4b:05:
         de:16:93:4c
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEpj9bGSh9mCrpXKxQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI1MDcwMzAxMDA0OFoXDTI1MTAwMTAxMDA0OFowLzEtMCsGA1UEAxMk
ZTE5NjRkNDctZmMyNy00ZjBiLWIwYzQtZjk4NDQ3YWY1NzVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2sXdGZ3NQhq5sia4IIfpx6oAeTeK50GRhrU
KUyD4X6Q4fazXQJHiRdu0UQWz1N1I4jlPBxHci3AnlWmK6rYqey4nohwFWA9x0o+
jtPGXYsrISYLxWQRKijzX8yG/PJz9wtTeboj9CiliEE9L9kJ/+yKnrjRkayYh42o
8Q51uEI6F74zJVYTqwYI6q15rE1DSXdDSxQA/1vcmU+xW0z+rZlKvzrPX/xCdcIe
Dr1VwBpPF914FCffR06FxqQ1vDv+KPTz8DoMVCF0qxuXQDxMMyF9Q5J/xuF42cxE
mT/6SejFDofl1/nka7o9O33ukohKiYGqdaeF0OdZTsIZU+k+mQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFAIoQx5tIz81df/LhEvB9tjiwBwjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNTk0NTU4ZWYtYjFmOS0z
YWYwLWI3ZjYtNjU4NmMyMDBlYjM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujZww
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAalFBN9494pwaZiEEMWcbdseeJ0Fz81Clr4BOgS081Yv2CK3/kkOS
4t8amn/bGRKjVLB1UppQT75r7Oyec4hUsFXsOqqkbRapiROSoJx2eZJ5dgqSL1kw
51fCv7V11K6VWvsdRPbu7nxDygzkiBHiiaMDWuHlUmB8usJ2VPhz6V05M1YNlPki
5Bw4/LlJvMYRVqArkOVkg6UOO7vRzsfqQ1wMEzdE4YRHhwixB79BCaODlB8yjqXA
8A1PSCsmojPKrBc5gztr7ZX44H601A7BTG8C1B31xzzI13ovY/6DaPOuezVwYaW4
jX10ETv4TE6zkagJufFY/3ulRUsF3haTTA==
-----END CERTIFICATE-----
Generated at Thu Jul 10 06:46:46 2025 by rpki-client