Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c7752afa-cd81-3270-816d-e1eafff57209.roa
File:                     c7752afa-cd81-3270-816d-e1eafff57209.roa (raw, json)
Hash identifier:          m3pa2jRGpZLggkP9ckexG8JP94b6sV8rjcNLHisYQ04=
Subject key identifier:   99:56:03:33:FD:72:76:61:52:2D:C7:A2:D1:FA:7B:3A:61:BF:26:B7
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F43285848C5800A56FF6158E81AE99500
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c7752afa-cd81-3270-816d-e1eafff57209.roa
Signing time:             Tue 04 Feb 2025 13:59:07 +0000
ROA not before:           Tue 04 Feb 2025 13:59:07 +0000
ROA not after:            Mon 05 May 2025 12:59:07 +0000
asID:                     30036
IP address blocks:        2604:2e89:9c00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:80:0a:56:ff:61:58:e8:1a:e9:95:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Feb  4 13:59:07 2025 GMT
            Not After : May  5 12:59:07 2025 GMT
        Subject: CN=eea543dc-ca59-42ea-939e-c7daa5ff39af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b9:9f:6d:ed:e3:bb:07:96:6d:7e:53:8a:ac:
                    cb:f8:47:06:c9:1b:48:4c:45:6d:30:5d:46:c2:35:
                    f2:ae:fe:14:b3:4c:24:64:8d:bc:9e:e9:78:93:1e:
                    b6:33:92:68:e8:d8:37:97:f4:2e:64:34:40:29:01:
                    c1:9d:c2:d0:75:ad:e8:63:da:74:8f:b7:56:f1:b9:
                    e2:36:04:42:cb:64:86:4e:c5:d8:4d:29:23:a8:83:
                    20:28:ae:c6:84:77:45:a2:a8:a7:6b:b7:f9:df:65:
                    6d:9f:dd:3f:ab:8b:f4:c1:2e:45:85:8a:89:d6:c8:
                    7f:2f:0b:fd:69:ff:af:7a:89:3e:39:1c:a6:d0:f0:
                    d5:57:9a:93:3a:be:af:d0:55:b1:e8:62:da:b2:29:
                    33:32:1b:2d:88:61:f6:73:41:92:ab:9d:f9:1d:8f:
                    66:9d:11:f6:3c:44:cb:f9:9e:12:d9:7e:ac:8c:48:
                    c2:0f:15:95:63:0c:5a:ac:71:63:67:17:8f:83:f1:
                    b0:2e:63:4c:e4:3d:aa:f8:a5:23:c1:8f:c5:41:63:
                    95:6a:d9:27:1c:8f:24:69:55:f6:fc:8f:2d:0b:cd:
                    31:c0:18:a7:96:f9:3b:1b:2e:4b:68:bd:51:b3:2c:
                    60:d8:d2:b9:39:76:3d:fd:2b:bb:15:93:84:37:1d:
                    56:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:56:03:33:FD:72:76:61:52:2D:C7:A2:D1:FA:7B:3A:61:BF:26:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c7752afa-cd81-3270-816d-e1eafff57209.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e89:9c00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:9a:40:20:af:65:7c:c9:be:c6:e8:29:f9:ab:e1:21:b9:61:
         78:b6:9a:16:09:b1:06:51:f2:e1:21:51:3f:f4:ff:c8:de:e5:
         81:a2:23:23:c5:d4:2e:5a:af:5f:1b:8a:a4:40:ca:97:71:fe:
         8c:fa:f7:ac:83:1e:f5:a7:2c:f6:c4:2b:37:36:38:f0:0a:9a:
         84:1b:06:39:27:e4:1e:43:cb:9a:37:9e:b9:f9:f7:76:9b:34:
         2b:57:01:b5:12:f9:70:3c:9c:9b:81:fa:d9:ca:ff:50:1a:98:
         3d:60:1b:4f:ec:f2:a6:19:e6:25:a6:45:da:9a:29:d3:d4:cd:
         3c:d7:d2:81:50:82:7a:b2:17:f1:92:47:4c:7d:1b:01:f0:17:
         e2:3c:fc:f1:15:41:62:5d:37:53:56:82:cf:0e:72:69:34:59:
         3d:19:0d:78:bf:52:c6:d1:b3:62:42:2c:cf:de:5a:3a:5a:ea:
         80:a9:ab:3b:78:63:70:27:92:4d:94:e0:af:25:b5:fb:e3:22:
         65:7f:73:2c:76:32:56:a4:90:27:af:cd:1a:53:94:b1:a2:07:
         c8:bc:fa:89:a3:06:71:43:c7:3e:1d:18:e3:01:c7:9d:ea:0f:
         e9:d2:a8:04:4e:2a:bb:f9:55:20:8d:07:c8:0b:6e:18:03:4d:
         07:85:4c:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:18:58 2025 by rpki-client