Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/713ef04f-1fce-36b8-8f82-aa1f1dc5657d.roa
File:                     713ef04f-1fce-36b8-8f82-aa1f1dc5657d.roa (raw, json)
Hash identifier:          dIyFeg6knUUAqeslJydD6N/a+DJJlbEIMKS9gdnWfbA=
Subject key identifier:   52:BF:FC:8B:5B:C5:3C:1F:A2:40:E2:2C:72:F2:48:7D:04:70:BA:72
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F43285848C7FE1F81AE466C710B9EDD80
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/713ef04f-1fce-36b8-8f82-aa1f1dc5657d.roa
Signing time:             Wed 05 Feb 2025 11:24:47 +0000
ROA not before:           Wed 05 Feb 2025 11:24:47 +0000
ROA not after:            Tue 06 May 2025 10:24:47 +0000
asID:                     30036
IP address blocks:        2604:2e88:9c00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c7:fe:1f:81:ae:46:6c:71:0b:9e:dd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Feb  5 11:24:47 2025 GMT
            Not After : May  6 10:24:47 2025 GMT
        Subject: CN=90fdd31c-6005-4092-bcbb-35a307d3bfd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:82:63:a2:6a:3f:18:eb:0f:5b:c1:39:cb:26:
                    68:7a:91:c9:6f:a5:6b:a5:e6:fb:b5:07:24:4c:45:
                    73:80:6e:d6:d9:e8:55:31:2c:eb:67:52:ad:6e:13:
                    96:15:ba:fe:34:73:90:aa:da:d6:b8:d1:f2:93:09:
                    40:55:49:ce:2f:52:a3:86:a5:50:80:92:5c:49:36:
                    84:a2:86:b9:d1:65:45:3e:75:6f:98:96:43:ea:c8:
                    57:e1:0a:b9:45:36:f3:95:fa:ea:6a:c2:32:71:f4:
                    9e:9e:c5:4e:37:ea:fc:4d:ef:5e:3b:e0:80:ba:3e:
                    cb:6a:06:ce:89:ae:f0:00:6e:f6:2f:d5:e2:6b:a5:
                    45:62:01:80:d4:a3:4d:be:ec:c5:7e:b0:c3:e9:f1:
                    de:6a:70:1b:a0:9e:af:76:58:8e:9b:f2:0b:87:09:
                    d4:b3:97:ea:c1:71:68:32:20:b3:77:0f:8f:78:f2:
                    76:9b:e1:f4:5a:78:08:ce:b7:54:7a:36:de:c1:0d:
                    29:22:49:e5:f5:1c:2b:50:4b:f3:9e:d1:3e:b7:e7:
                    64:6d:fb:7d:f7:a7:66:9c:27:f2:c4:e0:31:95:1a:
                    e0:6a:f9:c0:be:20:7e:cc:c5:5c:77:78:4f:19:23:
                    0e:41:32:ea:92:0e:ae:29:72:18:44:d0:22:44:f7:
                    33:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:BF:FC:8B:5B:C5:3C:1F:A2:40:E2:2C:72:F2:48:7D:04:70:BA:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/713ef04f-1fce-36b8-8f82-aa1f1dc5657d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e88:9c00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:23:f1:f5:03:dc:9d:4a:c6:af:f4:26:d5:99:a0:09:f0:a9:
         59:e3:1c:8a:17:db:50:aa:f9:ac:b0:fe:58:04:5b:b9:cc:f4:
         c0:e1:ae:16:02:b8:eb:07:0c:b3:a8:8a:f3:9e:01:43:b6:77:
         35:be:d4:20:bf:02:2d:ff:d7:9a:42:31:ef:85:eb:51:0f:8f:
         74:b2:54:ea:65:76:72:e0:29:55:fb:58:74:b1:1f:2e:9c:59:
         07:5f:25:43:d4:a6:95:0d:21:1f:d8:89:36:cd:90:7e:84:37:
         36:cb:79:61:d0:23:5d:fb:25:5e:53:cd:5c:a1:47:d1:78:5d:
         80:60:76:1f:c4:2d:98:5e:51:95:cc:1d:6b:db:76:e4:da:eb:
         42:8f:b0:ed:6b:7f:cb:94:c5:83:39:13:57:f5:57:b5:66:90:
         f9:17:15:d4:b1:08:7c:20:a4:4f:49:6b:6f:d3:95:79:88:46:
         51:ac:03:52:1d:13:c0:6b:aa:26:ec:c6:eb:0e:2f:f3:9f:7d:
         73:98:61:45:00:36:d8:47:5b:25:a1:b5:5c:8c:7e:b0:51:7c:
         9b:1f:3f:58:1b:20:3d:89:85:d9:b1:90:36:18:a9:ac:47:a9:
         f9:f9:48:a4:7d:30:66:e4:31:36:44:d5:17:61:22:70:a1:2e:
         ae:b8:7a:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:48:48 2025 by rpki-client