Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/97517270-d78e-37f5-a3d6-80e6fd30c3e2.roa
File:                     97517270-d78e-37f5-a3d6-80e6fd30c3e2.roa (raw, json)
Hash identifier:          QhWvIKu2KWuR0gxyVb/CIaHSwdNns0IErV7yS6N02yM=
Subject key identifier:   61:DE:08:BA:84:9C:77:C5:AB:89:73:CE:8D:C4:ED:30:82:41:99:CC
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F43285848C264E75ABFE7A9A79B721180
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/97517270-d78e-37f5-a3d6-80e6fd30c3e2.roa
Signing time:             Mon 03 Feb 2025 11:17:01 +0000
ROA not before:           Mon 03 Feb 2025 11:17:01 +0000
ROA not after:            Sun 04 May 2025 10:17:01 +0000
asID:                     30036
IP address blocks:        2604:2e8b:8000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c2:64:e7:5a:bf:e7:a9:a7:9b:72:11:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Feb  3 11:17:01 2025 GMT
            Not After : May  4 10:17:01 2025 GMT
        Subject: CN=cd397ee4-f44f-4292-8c55-b73a996936e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:89:7a:b5:3d:1b:71:34:4d:be:db:e8:c4:66:
                    ca:0b:a5:8e:6b:a1:5f:df:4d:41:c3:01:1b:41:6b:
                    97:3a:d4:f1:7d:03:db:0d:db:0e:23:23:68:85:98:
                    99:23:25:ef:30:79:82:ae:ba:aa:07:61:43:45:ff:
                    3f:ad:a6:2b:34:79:d3:80:a6:01:44:1c:41:10:83:
                    7b:0f:9a:ca:0a:7f:37:cd:d2:84:b8:50:22:82:e4:
                    18:dc:a3:ae:ca:7e:d4:73:7e:89:a6:36:06:b9:9e:
                    47:5f:f5:ca:4a:83:56:e5:1d:6a:2f:da:aa:ac:47:
                    61:8d:af:a1:18:6d:4e:0e:fb:bb:8a:c9:6c:6a:8b:
                    f8:a3:68:39:31:da:8b:a1:b7:1e:49:36:e0:cc:07:
                    e2:79:d8:ba:8f:1e:29:53:14:cc:e8:ab:91:da:6d:
                    20:29:2b:00:d2:45:e1:d0:a4:68:e9:71:90:f8:4e:
                    80:cd:ee:8f:1b:18:56:35:6c:54:0c:ef:7e:c1:da:
                    83:60:96:d8:06:9a:38:64:61:7d:02:42:f3:17:b2:
                    4a:e8:09:a8:03:f7:e9:f7:b7:e6:62:b6:fe:0f:8d:
                    85:b9:30:0b:a0:96:ca:ad:6d:7a:1c:89:b8:c4:6d:
                    20:ae:e1:bd:25:9c:d7:bf:c2:47:13:98:29:a4:13:
                    4c:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:DE:08:BA:84:9C:77:C5:AB:89:73:CE:8D:C4:ED:30:82:41:99:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/97517270-d78e-37f5-a3d6-80e6fd30c3e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8b:8000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:ec:eb:d7:c8:4c:05:93:8f:bb:25:2e:07:83:4e:4a:29:3c:
         8a:e8:ed:2f:d0:d6:5f:37:61:3c:24:86:3b:ea:74:07:09:2e:
         44:e3:74:33:3f:05:fc:ad:07:7b:97:9a:17:a1:34:b6:4e:f3:
         af:33:a2:b5:59:c1:27:ec:fc:5d:13:fb:a4:7b:ef:f2:ec:07:
         53:4a:9c:5a:2b:cd:09:dd:19:de:e6:90:0a:bc:6c:8a:6e:7e:
         9c:87:aa:04:cd:6f:e2:c4:8e:42:70:4e:19:a9:c4:94:3a:69:
         59:21:eb:06:12:57:23:9b:88:8f:98:51:7f:48:93:62:c4:ac:
         4f:97:8b:36:80:49:da:ed:c7:f0:82:f7:3e:b8:11:52:cb:4c:
         f1:bd:c2:99:b9:4d:f3:8f:fb:1e:c4:d8:b7:d1:a2:b1:cd:5f:
         eb:44:79:39:60:3c:2b:e6:ea:be:1d:fb:c4:74:ac:32:27:05:
         c8:07:0e:c9:03:1b:b2:f6:a4:56:f6:e5:09:7d:2d:b4:02:6b:
         ca:6a:53:76:08:dc:11:c7:f1:e0:50:e6:0b:f8:40:10:c5:5b:
         d4:ed:d4:bf:b6:fc:b1:bd:11:06:80:6d:43:58:b4:96:0e:c1:
         50:7b:1a:db:a8:ab:80:07:8e:74:67:2a:f4:1c:f4:70:05:dd:
         5d:08:c9:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:56:17 2025 by rpki-client