Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a41da2d8-6d56-3524-b868-acd5274597fb.roa
File:                     a41da2d8-6d56-3524-b868-acd5274597fb.roa (raw, json)
Hash identifier:          xCgcTS3LTLL9p8BcMye4sgAHnk44f7AGM7nU4n0pH60=
Subject key identifier:   1C:30:3F:D1:70:F0:06:99:07:C9:F8:0D:18:5F:05:46:DE:22:A4:1C
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F43285849134FBB4CAF2E17AB9EE55120
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a41da2d8-6d56-3524-b868-acd5274597fb.roa
Signing time:             Tue 04 Mar 2025 10:54:50 +0000
ROA not before:           Tue 04 Mar 2025 10:54:50 +0000
ROA not after:            Mon 02 Jun 2025 09:54:50 +0000
asID:                     30036
IP address blocks:        2604:2e80::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:13:4f:bb:4c:af:2e:17:ab:9e:e5:51:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Mar  4 10:54:50 2025 GMT
            Not After : Jun  2 09:54:50 2025 GMT
        Subject: CN=af830b7d-c764-48d9-b0ab-fd3cbdd24f7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:e5:3f:cf:af:10:4f:70:6c:31:8e:a8:20:8f:
                    51:9f:19:11:0e:c6:fd:6c:e3:2f:73:3d:a0:01:65:
                    22:25:81:0f:8d:da:66:8d:f3:ce:88:9f:52:d8:b6:
                    12:90:e8:77:51:d7:36:2e:0c:fd:6c:bc:a3:c5:20:
                    bc:c7:fa:b1:2d:b9:75:01:d5:73:91:b2:49:df:24:
                    8b:f4:4e:13:af:cd:60:5b:f2:67:74:b0:92:24:9f:
                    23:ad:67:f7:b2:36:0c:af:b1:c1:87:8a:77:f2:1b:
                    63:78:f0:b5:4d:c9:5c:4b:10:27:f3:62:a2:a0:45:
                    7d:3f:3e:cc:d6:e8:5f:c9:4b:17:6e:e9:f1:fe:11:
                    2e:ac:ce:5e:cc:ff:2c:e8:55:37:9c:4f:96:dd:7f:
                    82:8e:9e:81:be:c0:9c:b1:4d:28:33:e0:6b:2e:4f:
                    99:55:ea:a1:b4:96:bf:30:da:01:41:98:45:dd:38:
                    cc:81:e1:ae:49:de:17:e9:be:b3:7f:3e:d1:23:4d:
                    36:22:bf:f5:1f:2d:c6:d6:de:60:85:7b:9b:52:08:
                    c9:a9:24:78:8f:1a:fd:e3:1d:a0:f2:92:d9:af:39:
                    bd:6c:9c:ef:cd:5a:eb:e7:55:95:9a:89:58:8a:52:
                    bf:eb:24:df:5f:ba:fe:15:64:e4:d4:0b:4e:68:64:
                    52:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:30:3F:D1:70:F0:06:99:07:C9:F8:0D:18:5F:05:46:DE:22:A4:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a41da2d8-6d56-3524-b868-acd5274597fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e80::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:a2:f3:74:56:40:82:59:ec:a0:f4:d3:3c:25:06:4a:af:84:
         b5:80:e9:c0:29:9b:d9:99:42:2f:13:cc:cd:4c:67:76:29:cf:
         40:66:c6:b4:00:29:82:58:8f:32:81:84:28:d6:e0:4a:e9:d1:
         17:4c:02:43:45:c5:2b:8b:49:82:4b:9e:64:6c:b0:3f:63:f2:
         0c:7d:b4:90:54:f7:8f:c6:68:7e:d2:b5:07:41:a1:93:65:3e:
         94:03:07:3e:02:c9:c5:87:86:53:c4:d4:a0:b3:69:cf:71:cc:
         5b:d8:a5:23:83:96:0f:24:f2:31:fa:7e:85:c9:29:7c:99:6f:
         55:b2:52:d1:ef:56:41:82:af:72:3a:53:a1:41:5e:1b:8c:1d:
         6e:48:ef:99:7e:8d:7a:79:16:bc:b2:74:69:7d:89:20:ee:99:
         79:9c:3c:d2:27:6c:8d:20:66:e8:ed:d0:7a:9b:90:cb:41:35:
         a8:6d:01:d6:1c:e5:ac:7a:33:9f:09:74:05:dd:a3:0d:97:f4:
         5e:af:e1:c2:c4:36:b4:4f:a1:a5:3c:f1:8a:93:80:53:94:4a:
         aa:38:da:a9:b0:7c:0d:0e:b7:bd:18:cb:58:7b:c1:dc:a4:db:
         be:00:fb:dd:31:e8:e0:21:42:20:60:ee:51:a2:83:25:69:1f:
         e2:9b:e8:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:20:51 2025 by rpki-client