Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/75a1a9ea-eeef-32a5-834a-85792af13ea3.roa
File:                     75a1a9ea-eeef-32a5-834a-85792af13ea3.roa (raw, json)
Hash identifier:          eshGvGPeJDEURlxW/69fsbh/FkN14p6pqHIJ2mxoQUU=
Subject key identifier:   29:56:F1:58:2E:7A:35:CA:61:0E:4D:58:CC:67:76:09:EF:20:10:22
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F43285848C2650486C3695B33552A2900
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/75a1a9ea-eeef-32a5-834a-85792af13ea3.roa
Signing time:             Mon 03 Feb 2025 11:17:15 +0000
ROA not before:           Mon 03 Feb 2025 11:17:15 +0000
ROA not after:            Sun 04 May 2025 10:17:15 +0000
asID:                     30036
IP address blocks:        2604:2e8c:9c00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c2:65:04:86:c3:69:5b:33:55:2a:29:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Feb  3 11:17:15 2025 GMT
            Not After : May  4 10:17:15 2025 GMT
        Subject: CN=bf412362-29d8-4aa6-a3c6-0646e60db626
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:02:79:8d:f1:eb:b0:46:ef:3f:40:bc:e3:a1:
                    41:46:43:97:e7:ec:c7:a9:57:5d:f8:72:e3:9d:1a:
                    ec:95:77:2d:15:96:42:dc:c1:53:ff:55:94:f6:a5:
                    e1:c6:d5:f3:a4:85:bc:f0:cf:8e:64:67:a4:9f:5b:
                    59:12:d5:bb:53:7c:93:19:43:b8:4f:6c:3b:34:62:
                    af:68:ea:2c:fb:f9:18:cd:a8:1a:c7:2c:0b:e3:e1:
                    60:52:ce:bf:f1:73:ae:1e:7c:43:23:c6:ec:28:b8:
                    5e:5c:0b:6f:b6:1b:a5:e4:fd:68:e4:db:3b:31:0d:
                    a7:ca:30:d6:a1:2a:d9:fe:59:32:fa:63:8d:65:df:
                    d0:0d:79:2b:b6:c2:c0:ae:f0:78:6e:21:b7:72:91:
                    53:67:af:77:de:aa:02:be:87:01:ae:d1:10:d6:f9:
                    5f:41:f3:30:ef:e1:2d:d1:9b:e6:fd:1a:aa:6f:ec:
                    ed:42:65:eb:dc:17:b8:8e:14:61:1a:94:57:dd:47:
                    36:f4:2e:92:22:72:3d:0c:84:13:b2:70:c5:c6:87:
                    c6:7e:c7:35:66:7b:fc:d4:ed:e7:ca:10:e0:c4:df:
                    e7:7b:5e:1e:f9:5e:51:29:21:f8:67:72:90:01:65:
                    18:f2:d4:db:2b:09:4c:16:44:7c:f1:f4:28:bd:5a:
                    5f:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:56:F1:58:2E:7A:35:CA:61:0E:4D:58:CC:67:76:09:EF:20:10:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/75a1a9ea-eeef-32a5-834a-85792af13ea3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8c:9c00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:2c:91:b3:2a:81:9c:a3:e7:4e:91:c2:a9:b2:7a:b7:3a:b5:
         8d:bf:c0:24:98:99:e9:51:ef:f1:a4:b0:1c:d6:b0:08:0b:ec:
         49:da:d4:7d:32:e6:89:09:90:65:1d:f7:92:6a:49:bc:91:c7:
         7a:bd:0b:95:6c:6d:67:70:96:a2:5a:06:f2:07:f9:36:4c:e2:
         18:3a:ed:e5:b7:94:0d:f4:ce:ee:6e:a4:44:cc:69:af:82:3b:
         08:57:33:2a:d6:e6:65:9f:de:63:c8:31:84:17:19:45:9a:30:
         5d:3e:e3:77:01:d6:bc:40:0d:bb:53:17:9b:75:fe:a7:5c:59:
         15:7d:18:ce:77:49:49:de:78:4a:dc:8a:e8:dc:fa:01:ca:49:
         c8:bf:eb:f8:3c:fc:8c:98:5b:03:96:ce:70:1e:bc:0c:b3:96:
         71:27:45:ff:ca:0d:11:52:38:20:a9:8b:db:b7:93:34:65:a3:
         2d:fd:7a:38:6e:1c:2d:45:6c:d0:e6:dc:0c:4f:e9:6e:cf:3c:
         50:a7:14:3b:3a:9d:6e:b7:c3:f6:c9:96:fe:1b:6c:c5:55:26:
         67:89:77:c7:5f:d9:ff:db:bf:aa:2d:95:b4:48:1d:87:6f:7d:
         c2:22:bc:05:ed:25:f3:5f:d2:92:c1:48:59:2f:23:b1:5d:e1:
         7f:ef:0e:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:03:48 2025 by rpki-client