Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/6a7db353-d8b7-3242-a4d6-13254d54e39c.roa
File:                     6a7db353-d8b7-3242-a4d6-13254d54e39c.roa (raw, json)
Hash identifier:          vZn+JbRZqcdgUpUBY+/T5pzBn0K8cBXPxLYl4V5Kfeg=
Subject key identifier:   BA:F4:CB:F1:5C:09:7D:28:B9:9F:B0:F8:43:4B:B0:78:68:47:7D:0B
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F43285848C2652A6E5E10EAFE0EEC3300
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/6a7db353-d8b7-3242-a4d6-13254d54e39c.roa
Signing time:             Mon 03 Feb 2025 11:17:33 +0000
ROA not before:           Mon 03 Feb 2025 11:17:33 +0000
ROA not after:            Sun 04 May 2025 10:17:33 +0000
asID:                     30036
IP address blocks:        2604:2e8e:6400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c2:65:2a:6e:5e:10:ea:fe:0e:ec:33:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Feb  3 11:17:33 2025 GMT
            Not After : May  4 10:17:33 2025 GMT
        Subject: CN=dd36831e-0e77-4b42-92cf-1729a04cef96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:24:27:fd:c5:b1:e9:5a:88:5c:a1:37:76:a9:
                    2d:25:93:f4:35:9c:06:bf:dd:1b:6d:e2:f1:fb:d5:
                    b0:01:4d:24:9a:56:b8:21:3e:24:b9:68:0e:87:0d:
                    d3:21:2e:63:39:98:cc:0e:41:17:e0:24:d6:b0:04:
                    05:39:bb:5b:cc:05:07:0f:53:c4:d0:a3:10:f4:b4:
                    b3:bd:a0:3e:22:a5:16:b4:6b:98:78:b0:63:4a:f2:
                    fd:60:31:cd:3a:59:a8:51:8f:91:5a:10:33:a8:31:
                    5b:ac:67:ba:1c:f0:f4:7c:5f:67:b6:09:ba:20:e7:
                    8b:c2:75:fa:46:87:0a:8f:a6:f5:20:92:f7:9e:99:
                    04:0d:53:f1:cb:5b:d6:c8:20:3f:08:c0:4b:88:0d:
                    0e:05:b4:67:58:fe:18:fc:4c:20:01:82:61:f9:30:
                    68:43:61:05:c0:55:26:10:b3:e6:59:ae:6c:e7:30:
                    c5:f4:54:23:40:b8:b3:b2:fa:da:89:73:6a:42:09:
                    ed:5a:e1:29:4f:f9:e6:c5:ed:6f:3e:77:79:d9:86:
                    d6:c2:07:bf:ad:5e:bf:b7:4f:31:6b:3c:0d:cb:e3:
                    b2:e4:b8:41:41:dc:a1:cd:d5:22:20:ad:d8:5f:d6:
                    f6:9f:34:97:c1:05:6e:ea:01:3d:f5:36:cc:9c:e4:
                    0b:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:F4:CB:F1:5C:09:7D:28:B9:9F:B0:F8:43:4B:B0:78:68:47:7D:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/6a7db353-d8b7-3242-a4d6-13254d54e39c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8e:6400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:44:7b:51:95:38:7f:a3:20:df:ae:34:d5:42:65:46:9b:68:
         9b:ab:f3:4d:66:6d:12:f9:ae:b4:39:17:09:9f:94:47:40:df:
         c0:7d:4c:67:66:2c:ba:75:d7:43:b8:c8:be:0f:f5:2c:f0:5b:
         73:53:ab:82:03:8b:b0:aa:f8:6a:79:b6:10:57:e9:91:f5:95:
         06:72:8a:16:07:40:f8:db:7c:4a:e8:56:5e:43:47:91:70:d4:
         71:96:47:ec:25:63:64:ac:54:84:9b:2e:6b:72:d8:d0:02:68:
         dc:a3:4b:20:04:7c:7b:e5:f6:79:94:6d:de:e9:f5:3c:11:85:
         8c:e7:f6:44:60:c6:8c:06:97:8f:89:e6:5e:f3:5c:bd:58:cc:
         ff:68:64:b5:fa:e7:7a:e8:ed:a1:f8:47:e4:39:95:81:4d:60:
         1e:09:64:4f:1b:97:8a:bc:02:28:a1:04:d8:ca:89:b8:8a:ba:
         d7:5d:4f:18:f9:4c:c7:fd:e7:cb:8a:23:63:ee:fc:01:fd:76:
         ca:92:93:5d:ed:e8:16:78:ee:b4:a8:e6:96:05:7f:e8:10:57:
         5e:bf:c5:1d:81:80:62:cd:df:6a:cd:20:a2:15:57:16:92:82:
         9c:1c:e4:08:7c:3f:22:65:90:fb:c4:c4:89:7e:b4:ab:f5:c1:
         38:00:44:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:03:51 2025 by rpki-client