Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9c83b029-3c54-38c2-b90a-95a061cc4ef7.roa
File:                     9c83b029-3c54-38c2-b90a-95a061cc4ef7.roa (raw, json)
Hash identifier:          ak0XLbjvtS+F7BE/GlnXquc2o/PNDZCK5qr2VmObUUE=
Subject key identifier:   04:30:34:71:1A:E6:2B:76:7D:D6:BC:5C:4B:9F:DE:64:C3:83:AA:7F
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F43285848C5343724DF39CB992DEC82C0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9c83b029-3c54-38c2-b90a-95a061cc4ef7.roa
Signing time:             Tue 04 Feb 2025 11:26:20 +0000
ROA not before:           Tue 04 Feb 2025 11:26:20 +0000
ROA not after:            Mon 05 May 2025 10:26:20 +0000
asID:                     30036
IP address blocks:        2604:2e8a:a400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:34:37:24:df:39:cb:99:2d:ec:82:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Feb  4 11:26:20 2025 GMT
            Not After : May  5 10:26:20 2025 GMT
        Subject: CN=629a7f4d-aff9-42eb-9419-1b1a379a8f70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b8:0b:24:9e:50:ac:f1:b6:73:1a:8d:4c:fc:
                    8b:38:66:46:c2:0b:7a:69:c8:f7:03:88:33:87:40:
                    d9:b0:63:e7:35:4e:0a:1f:2f:1f:de:0e:1e:ff:16:
                    04:19:8f:0f:07:08:44:52:89:e3:11:d6:94:9b:cc:
                    9b:54:50:e1:68:ef:67:86:b9:43:1f:e1:48:d3:38:
                    dd:60:6a:96:03:98:0e:05:bd:16:37:2b:bf:05:7b:
                    00:c8:0d:d2:c0:f5:32:f2:ff:6b:86:34:3e:33:1c:
                    39:8d:70:75:d6:2f:21:dd:14:dc:87:bb:56:86:ae:
                    42:de:7e:30:a8:b1:1a:3e:33:3f:12:15:0e:73:38:
                    e9:60:16:9b:37:5e:a9:8d:84:6d:0d:72:e5:49:65:
                    00:6f:ca:1f:8c:91:cf:c9:10:c7:23:ba:31:95:1b:
                    fb:f9:31:78:00:8b:2d:ec:2d:e6:f5:1e:eb:fd:61:
                    52:99:13:cc:28:99:f6:17:39:ce:b1:61:05:12:4d:
                    0c:45:f1:a6:d4:59:2e:63:51:77:77:8c:6a:01:18:
                    59:3e:9b:86:b0:0f:4e:79:90:15:63:f7:97:aa:7e:
                    36:8b:30:73:86:a5:29:37:ee:80:bb:c1:2c:e0:62:
                    47:88:37:da:18:aa:8e:7b:62:64:03:f3:07:b6:cc:
                    3d:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:30:34:71:1A:E6:2B:76:7D:D6:BC:5C:4B:9F:DE:64:C3:83:AA:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9c83b029-3c54-38c2-b90a-95a061cc4ef7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8a:a400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:0b:08:96:2d:0a:8f:d8:20:35:6d:da:7f:23:5e:1f:52:21:
         53:8f:b8:83:e6:dc:09:03:0a:d1:ab:c3:5e:1c:18:26:6d:d3:
         cc:6e:1b:87:35:83:09:c2:80:90:ea:51:f8:15:eb:20:24:8b:
         3f:77:9f:37:1b:bf:f4:f6:8f:30:2c:0e:10:ad:18:92:dc:95:
         84:b7:ab:da:3d:8a:c8:f2:9e:f4:d8:48:50:b7:25:96:6b:0a:
         72:aa:95:6a:f0:9d:e2:ab:f5:5f:ad:90:6a:c7:06:a9:db:f7:
         3a:67:09:38:f5:a8:64:1f:4b:18:49:ae:07:92:99:46:23:10:
         b6:45:96:0d:2f:f5:b6:67:b0:6a:57:c1:85:c2:90:2d:6a:85:
         ae:98:85:b9:e3:db:64:69:1c:4b:aa:8f:09:b5:50:98:4c:4d:
         1a:dd:40:b5:78:c5:c9:e1:4d:a6:82:99:c2:87:73:fe:5b:24:
         8a:be:1a:a1:fb:16:0c:d6:1a:f3:6f:bc:45:b6:c4:6a:86:29:
         47:84:ac:c2:4a:67:1d:55:c1:e7:87:d3:88:af:b6:15:f1:b3:
         b1:19:1f:55:a8:31:cc:73:8a:68:f2:0e:9e:f5:a3:97:5b:07:
         f7:8f:c1:d7:33:8f:2f:f2:b9:9e:67:ce:51:43:0b:6d:d9:ec:
         08:d3:51:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:21:22 2025 by rpki-client