Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d81d73b2-d45e-3bf3-aa51-299cd9d14739.roa
File:                     d81d73b2-d45e-3bf3-aa51-299cd9d14739.roa (raw, json)
Hash identifier:          UlzbRb66ofswEO0dNkcuvqFdMSkO1fsrrxO2/UxyXZs=
Subject key identifier:   26:CC:B7:7C:8A:BE:E4:55:61:99:7E:BE:6C:6D:3B:5C:F9:C5:A3:D1
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584A761B5714778820D12180FE40
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d81d73b2-d45e-3bf3-aa51-299cd9d14739.roa
Signing time:             Wed 09 Jul 2025 13:01:04 +0000
ROA not before:           Wed 09 Jul 2025 13:01:04 +0000
ROA not after:            Tue 07 Oct 2025 13:01:04 +0000
asID:                     30036
IP address blocks:        2604:2e8d:2c00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:76:1b:57:14:77:88:20:d1:21:80:fe:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jul  9 13:01:04 2025 GMT
            Not After : Oct  7 13:01:04 2025 GMT
        Subject: CN=fd1536e2-9dbf-48be-8bd1-97ae1ff10a80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:2d:52:02:57:b9:e8:47:d8:cb:71:59:50:76:
                    e4:37:d7:5f:59:ba:6b:e9:57:17:0e:71:c4:4a:e8:
                    73:dd:e7:a2:44:92:8f:69:57:b5:59:7d:73:06:05:
                    ff:c2:41:ac:e3:ce:f7:0b:d8:31:22:a7:16:9d:4b:
                    b9:16:76:bb:6e:51:0b:77:1d:57:80:a7:9d:54:43:
                    38:9f:03:ca:f7:52:09:e5:e9:dd:f6:19:cd:36:82:
                    b0:cb:e5:98:37:f1:f0:39:fa:ef:48:10:0c:f4:d6:
                    26:1e:61:d4:0e:7a:f9:97:1c:6b:a1:9c:f8:9c:78:
                    f8:a8:2f:b7:d3:7e:28:d4:af:89:cb:ab:e9:20:84:
                    68:a8:65:c9:be:ec:8e:e9:b5:27:09:1a:2b:53:09:
                    2f:79:9e:ac:24:b3:a5:98:13:45:e3:20:ae:31:c8:
                    e1:ed:83:5b:e0:ee:32:c6:9d:f0:01:d9:2a:d5:d8:
                    81:ec:6c:1e:be:4e:1b:25:7b:fb:c9:49:7b:37:77:
                    12:96:80:d7:e1:ec:a9:a2:92:3b:72:ad:f7:67:f0:
                    3b:a9:cf:a4:90:db:08:98:f0:cb:4e:9f:b8:6c:63:
                    eb:a9:14:bf:3c:8f:de:c0:47:6b:0b:f7:99:e3:c6:
                    9a:f7:19:4a:5a:ee:71:2f:f5:31:02:0f:f8:e1:0b:
                    02:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:CC:B7:7C:8A:BE:E4:55:61:99:7E:BE:6C:6D:3B:5C:F9:C5:A3:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d81d73b2-d45e-3bf3-aa51-299cd9d14739.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8d:2c00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:3d:7b:d6:9c:af:e3:c9:c5:79:f5:cc:a3:a5:55:4c:b8:a7:
         64:d2:d2:51:58:79:e3:58:1d:b1:90:de:ad:6a:fc:1b:1d:c6:
         ae:9c:d0:ac:6a:1f:de:95:6c:cc:ce:43:b4:54:4c:b7:b4:d9:
         58:82:d0:44:6a:40:1e:2d:5c:09:ca:e8:dc:3d:27:40:2e:92:
         5e:e1:2c:6a:2c:1b:2b:3a:f1:cd:0f:97:f6:5f:db:ab:2b:fc:
         1b:67:40:9d:63:74:d5:f3:ad:b9:b5:f2:61:79:09:e4:cd:46:
         8a:6e:5c:f4:f8:93:58:26:61:be:0d:d9:f6:f7:28:89:10:e0:
         5d:10:d2:1b:91:a7:0f:0c:2a:d5:b7:05:b0:81:6c:75:77:7a:
         76:27:3d:34:9d:f9:a8:0b:1e:6b:86:33:1d:93:f2:1d:a1:6c:
         c0:c3:5c:a3:23:c3:50:65:5d:b1:a8:5c:44:a9:b7:15:b0:02:
         99:c6:31:88:12:a7:eb:53:f0:9c:cd:51:a6:a9:f7:3a:69:d0:
         c6:ae:83:67:4d:3b:e9:a8:ef:27:36:fb:1c:f9:e8:05:e7:e7:
         39:f4:d3:41:a3:6f:5e:c9:56:e8:8b:5a:48:8c:ba:45:df:68:
         ca:c3:a4:58:f9:47:98:3f:83:23:31:b5:fc:41:22:db:06:da:
         2c:f8:38:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 06:43:08 2025 by rpki-client