Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/e811a19d-bb03-3d77-8027-49d6713a912a.roa
File:                     e811a19d-bb03-3d77-8027-49d6713a912a.roa (raw, json)
Hash identifier:          ivDKKGGQ+SRgBJ9KKRzoNaH+1ZIqKo75jvZpRPrzK0A=
Subject key identifier:   28:AF:64:BE:98:66:E9:AF:3F:C4:F6:3C:DE:42:D1:2C:D7:B8:B4:D2
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F43285848C55909650AA1694C0BDE9EC0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/e811a19d-bb03-3d77-8027-49d6713a912a.roa
Signing time:             Tue 04 Feb 2025 12:40:32 +0000
ROA not before:           Tue 04 Feb 2025 12:40:32 +0000
ROA not after:            Mon 05 May 2025 11:40:32 +0000
asID:                     30036
IP address blocks:        2604:2e8e:2800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:59:09:65:0a:a1:69:4c:0b:de:9e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Feb  4 12:40:32 2025 GMT
            Not After : May  5 11:40:32 2025 GMT
        Subject: CN=39e65d1f-b859-475a-8259-62b98d913040
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:8c:8e:b3:e1:40:ca:f0:56:2e:dc:88:15:61:
                    e9:61:23:23:e7:35:6c:16:04:45:e0:78:8c:cf:fc:
                    c1:72:33:0a:2a:0d:44:e0:27:cd:11:28:9d:95:ea:
                    dc:00:ea:e7:fe:6e:0c:64:3f:8f:bf:c5:21:cc:e9:
                    fd:cf:80:90:75:95:87:19:82:db:a5:a6:c0:82:3c:
                    ff:e3:3a:aa:0f:51:19:6f:8e:72:e1:1d:79:a7:83:
                    07:44:39:cc:71:e3:20:8b:f1:7a:2c:60:3e:60:84:
                    fa:a7:b1:e5:ae:54:58:7b:9f:0e:b2:06:e6:c1:0c:
                    f0:40:62:9a:23:f6:47:d0:4d:91:e0:d3:0b:04:de:
                    14:b1:30:21:cc:41:a5:72:f5:16:00:4f:a7:15:02:
                    06:c0:af:81:b5:62:4e:b6:fc:08:5c:cb:48:7e:dc:
                    e6:18:e5:46:5f:f6:8d:04:6c:8d:13:35:25:1e:2e:
                    49:a2:f4:8b:ac:1e:e6:a1:b6:34:0c:c7:29:5d:50:
                    e2:d5:5b:52:76:9b:be:ef:d4:75:76:ef:f7:5d:d4:
                    11:ec:57:7d:dd:da:4d:69:14:87:68:16:c6:21:e7:
                    88:1c:b5:1e:94:c1:2a:fe:4e:68:71:af:1f:29:34:
                    10:e8:05:6b:19:10:59:c6:3e:d1:7f:3f:86:0d:89:
                    5a:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:AF:64:BE:98:66:E9:AF:3F:C4:F6:3C:DE:42:D1:2C:D7:B8:B4:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/e811a19d-bb03-3d77-8027-49d6713a912a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8e:2800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:58:93:55:cb:c0:4a:f3:08:e5:34:17:30:61:84:66:8c:ae:
         8c:34:c6:f0:e2:80:91:3f:6f:af:bc:0c:66:25:0c:f1:cb:95:
         bf:ba:36:7d:80:77:2f:40:fd:c3:2d:cf:05:d9:d0:22:bb:cc:
         5a:6b:8c:0f:a1:0c:f3:80:5e:df:7d:a9:34:bc:79:85:e5:2b:
         70:5a:e2:32:39:9e:c2:7d:28:12:c4:a9:d2:ae:32:a2:aa:a3:
         c0:4c:78:cd:25:23:4a:4f:40:67:e6:04:fd:bb:af:07:b7:05:
         fd:70:6a:06:74:a6:1b:97:39:6c:2d:df:0b:25:e7:c5:f2:0d:
         3a:5e:5f:2a:5e:0c:fc:de:7c:24:22:d1:f1:c8:c0:2a:90:b1:
         c5:38:3a:d4:2c:94:37:d9:8d:5b:41:97:88:57:2d:70:81:03:
         5b:71:7f:83:d5:fd:bb:a5:57:e9:32:d7:ee:b3:5d:46:dc:96:
         3e:ec:c0:c0:6b:26:31:f7:7e:79:6f:a9:fa:1e:89:55:85:db:
         27:2f:e9:94:ef:17:9c:53:56:05:25:8e:8e:4c:66:20:a7:55:
         d4:b6:ca:1d:5b:3d:86:d5:15:f2:bf:d0:1f:d0:9e:58:d2:49:
         56:95:5a:8f:67:0e:8f:d8:7d:a3:b7:7e:ad:7c:71:7e:93:ff:
         08:fe:d6:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:48:45 2025 by rpki-client