Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c1ad2cc5-4739-3685-8f6e-1113e0e20e4a.roa
File:                     c1ad2cc5-4739-3685-8f6e-1113e0e20e4a.roa (raw, json)
Hash identifier:          uucZ9WcwfQ9Y8duCtkuEL8/SHMEuSOyrWPGIQiMi5xg=
Subject key identifier:   83:A8:29:56:54:C6:33:2B:97:D4:59:26:EB:D4:42:C2:0D:64:3B:72
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F43285848C2647048630E5538270598A0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c1ad2cc5-4739-3685-8f6e-1113e0e20e4a.roa
Signing time:             Mon 03 Feb 2025 11:16:05 +0000
ROA not before:           Mon 03 Feb 2025 11:16:05 +0000
ROA not after:            Sun 04 May 2025 10:16:05 +0000
asID:                     30036
IP address blocks:        2604:2e88:3800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c2:64:70:48:63:0e:55:38:27:05:98:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Feb  3 11:16:05 2025 GMT
            Not After : May  4 10:16:05 2025 GMT
        Subject: CN=f9250e0e-dddd-4e5a-91e8-7e96a9b77775
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:14:76:e2:0f:ad:82:84:b5:a7:43:ac:6c:ae:
                    b8:25:00:af:c9:97:ec:d5:d9:9a:6e:08:7d:f7:51:
                    3b:43:39:fe:db:a1:7f:d9:b3:f0:1a:1d:b8:b7:0f:
                    5e:bb:84:87:10:d2:96:05:51:bb:23:af:35:73:9a:
                    d2:bf:cb:f8:23:d6:f5:1d:47:b3:5a:32:fd:cc:45:
                    80:60:73:8a:6f:49:15:08:7c:dc:2a:fe:e1:12:ff:
                    1e:1d:63:48:8a:97:a5:dc:ea:13:5c:7e:e8:53:ee:
                    2c:f4:27:a0:80:95:38:a9:3e:53:33:17:76:54:5a:
                    5e:4c:10:5d:72:38:d3:29:9f:a5:ea:e4:0a:25:97:
                    0f:16:3e:16:b1:5a:bd:57:73:87:29:b9:44:3b:5c:
                    b9:19:71:2b:f4:87:1c:6f:c7:2e:ec:f7:a4:97:9e:
                    62:6c:71:16:d1:b6:9b:d8:9f:c6:77:5c:20:f3:f3:
                    6b:95:6f:07:c4:03:55:fb:c6:c6:fa:95:0c:c1:f3:
                    53:70:7d:5f:73:5d:eb:68:13:1b:f6:09:1f:67:e7:
                    bb:ae:cf:cb:ba:f9:bd:92:6b:6c:88:0c:74:9a:78:
                    58:b2:52:da:81:f3:95:ac:07:b7:50:bb:72:bc:ea:
                    54:c2:4a:3f:9a:1e:6f:09:81:d7:ab:59:0a:bc:c4:
                    aa:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:A8:29:56:54:C6:33:2B:97:D4:59:26:EB:D4:42:C2:0D:64:3B:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c1ad2cc5-4739-3685-8f6e-1113e0e20e4a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e88:3800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:8b:02:34:d5:92:66:4d:e0:98:47:09:06:c4:ae:90:34:41:
         c4:ec:65:96:4e:b5:1f:22:ac:61:8b:c2:41:20:c5:79:a0:40:
         f7:10:62:21:e7:bb:40:0e:ad:58:48:6b:f7:0d:b3:5f:70:12:
         90:6f:3d:f9:ff:dd:37:5e:fd:87:ac:bc:2a:a3:0e:6a:d9:ba:
         62:03:f3:6d:a2:0a:f9:a0:72:16:b5:cc:af:93:75:d8:76:6b:
         d2:a6:28:6d:35:86:7f:2c:23:07:38:8a:fc:20:79:3d:cd:ca:
         45:4a:24:9f:c5:24:24:d3:0b:43:16:61:75:71:ca:a3:72:b4:
         0e:da:14:85:9c:f8:0a:fb:f8:c8:c3:c8:47:64:0d:b9:08:c4:
         f1:81:8d:ef:3f:d6:dd:bd:c9:24:c5:43:ab:46:5d:ab:c5:71:
         39:21:f0:36:68:1f:4f:9a:61:14:a4:dd:f7:4d:03:98:72:1f:
         28:78:71:0d:63:77:a0:33:06:d5:1e:83:a2:65:5b:e3:d3:75:
         3b:a2:16:08:6e:9e:46:dd:45:32:11:ae:dd:a5:94:25:53:b9:
         f5:51:31:69:fc:d4:f1:6b:20:b4:15:66:f1:3c:68:d3:e7:c8:
         3c:23:07:6a:02:1d:7c:a0:e8:64:51:58:bb:cf:f3:73:7d:90:
         05:00:0c:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:08:56 2025 by rpki-client