Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9cb3b069-3721-386c-b7c0-65f0dabe663d.roa
File:                     9cb3b069-3721-386c-b7c0-65f0dabe663d.roa (raw, json)
Hash identifier:          NLe+4nJ+Hy6NJEzexdYmPTR91jPV8sSh29koH1qZ/mY=
Subject key identifier:   1E:32:58:7E:2B:B3:EA:A2:88:0F:CF:29:32:88:B2:D5:1E:9C:EB:63
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584A761B7174E866DADB51E01000
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9cb3b069-3721-386c-b7c0-65f0dabe663d.roa
Signing time:             Wed 09 Jul 2025 13:01:04 +0000
ROA not before:           Wed 09 Jul 2025 13:01:04 +0000
ROA not after:            Tue 07 Oct 2025 13:01:04 +0000
asID:                     30036
IP address blocks:        2604:2e8c:8000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:76:1b:71:74:e8:66:da:db:51:e0:10:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jul  9 13:01:04 2025 GMT
            Not After : Oct  7 13:01:04 2025 GMT
        Subject: CN=5cf8f436-4c30-4bf1-892b-70289442ab21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:7b:c8:f4:db:5b:2b:8c:fd:a7:8c:5f:80:69:
                    2c:a7:b8:45:2c:b2:05:3c:4c:ff:11:5d:a7:6b:04:
                    ff:cf:19:28:22:93:7c:17:20:1c:f6:e1:6b:b0:de:
                    75:20:91:da:c2:b8:89:57:09:47:6e:56:bd:76:b4:
                    1b:4d:0f:45:1a:30:7d:39:7a:f1:bc:2b:77:99:39:
                    ac:a0:45:5f:d9:25:db:07:11:85:f4:97:3f:e3:e9:
                    03:8e:c3:2c:16:73:a4:81:71:6f:f2:e3:8e:85:3d:
                    68:ba:d8:8c:05:85:5c:45:df:5d:f0:c1:c5:8c:ec:
                    3b:f7:e2:b8:ca:75:eb:7d:ec:bf:51:e3:af:c7:c7:
                    55:a4:09:32:4c:1e:15:6a:69:e6:54:0d:76:07:9f:
                    f9:e5:78:c9:97:a1:5a:af:2b:5d:db:0a:c0:86:c5:
                    4a:39:b4:4c:45:2d:25:c2:e1:23:6b:54:c6:de:21:
                    67:41:c7:90:2a:fd:d4:c3:a0:25:ce:f0:19:71:29:
                    a4:e8:db:fb:a0:76:7b:84:de:9a:39:e3:e1:92:18:
                    35:2f:c4:46:37:94:8c:49:45:79:d6:cd:18:b1:3b:
                    bd:5d:19:f5:83:b2:66:29:a8:08:91:22:2e:08:18:
                    49:9c:29:c8:d5:37:29:c4:0a:58:f4:6e:45:83:c2:
                    d9:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:32:58:7E:2B:B3:EA:A2:88:0F:CF:29:32:88:B2:D5:1E:9C:EB:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9cb3b069-3721-386c-b7c0-65f0dabe663d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8c:8000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:5e:10:ee:26:43:8b:27:41:c1:76:a6:2d:c8:40:67:3d:80:
         32:88:10:80:6c:8e:94:44:e8:f3:6b:c1:d1:39:65:e2:03:67:
         c6:9d:1b:b6:43:64:43:67:87:99:df:17:ca:1f:70:6a:f5:75:
         30:07:6f:8e:54:ac:dc:e8:f5:d3:43:2f:a2:d0:49:4d:fc:ad:
         f9:80:81:10:ca:d3:46:0f:c4:2c:c5:68:f0:41:30:55:ee:52:
         2a:a0:ac:c3:e8:6d:f5:0b:6d:89:70:a2:b8:02:3e:c2:60:5a:
         95:dd:54:49:39:c9:62:db:c2:4f:51:69:bd:24:cb:09:2a:ce:
         5a:79:3a:01:e9:4d:ae:e6:04:b4:5d:19:c7:34:dd:2f:21:9e:
         f7:a9:ce:50:62:6f:ef:ee:df:1c:4c:43:0f:cd:21:73:ba:e6:
         cb:26:80:62:5d:cd:3c:31:82:ad:8d:8d:d8:b5:86:02:8d:38:
         27:46:c9:1d:a6:ab:aa:be:89:ba:75:ed:bd:bc:e9:b5:a7:52:
         8e:fc:90:3d:00:cf:4b:9b:0e:a9:18:71:0b:43:83:4c:3e:68:
         9c:60:c4:04:fd:22:08:86:58:ee:e7:09:84:d2:67:f1:6e:14:
         4f:2a:86:e7:e0:4f:8a:cf:3b:71:93:2a:ce:a4:12:7d:da:b0:
         d5:6a:2a:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 06:43:03 2025 by rpki-client