Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f24b7a24-2d1d-3b97-928a-fa8242b351c8.roa
File:                     f24b7a24-2d1d-3b97-928a-fa8242b351c8.roa (raw, json)
Hash identifier:          I+AO7hnCfgfoexlzDDfvZXf0cVny5fH+fWtFFO4YTVk=
Subject key identifier:   C0:A9:D9:8D:88:09:4C:2C:0C:C7:72:75:02:AD:47:B2:1B:BE:C0:00
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F43285848E016AE3C9A55EB4CBAC8E610
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f24b7a24-2d1d-3b97-928a-fa8242b351c8.roa
Signing time:             Fri 14 Feb 2025 02:33:39 +0000
ROA not before:           Fri 14 Feb 2025 02:33:39 +0000
ROA not after:            Thu 15 May 2025 01:33:39 +0000
asID:                     30036
IP address blocks:        2604:2e8d:cc00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e0:16:ae:3c:9a:55:eb:4c:ba:c8:e6:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Feb 14 02:33:39 2025 GMT
            Not After : May 15 01:33:39 2025 GMT
        Subject: CN=43452185-2fb1-4d47-ac54-5e5b0d92d74b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ff:8a:2b:65:59:54:d9:d1:99:ff:29:63:8a:
                    b2:f2:19:49:06:4e:b9:af:a6:51:7a:0d:0e:4d:a9:
                    bf:13:a8:20:dd:dd:4a:54:fa:3d:d0:a1:91:9c:59:
                    a1:9c:de:a5:e8:f1:65:5d:3f:0a:7e:1a:8b:10:8b:
                    d3:e5:e0:df:16:e0:f1:24:96:42:ec:74:ca:f2:ea:
                    a0:6b:eb:9f:8e:1c:ec:d3:1e:b5:d4:96:4f:ae:75:
                    12:ae:1b:cf:18:71:09:2e:b9:4c:2a:67:a4:3f:88:
                    a2:34:91:27:b8:15:de:d0:f6:82:7d:bc:17:fb:a9:
                    68:96:d3:eb:ac:76:b2:24:7f:01:6e:4f:2b:75:64:
                    3f:74:5f:5d:7f:60:fc:24:5f:b6:37:14:c1:98:68:
                    d3:83:1f:27:dc:bf:b2:08:1d:b6:5c:d3:af:19:f1:
                    00:4d:5c:ab:f7:57:48:0e:fd:4e:1b:1d:ae:e2:43:
                    dd:3d:2a:33:f8:04:08:c2:0c:71:32:ab:b2:1b:32:
                    5d:0f:46:fe:06:61:08:44:fe:4d:f8:53:fd:1a:88:
                    b4:2d:75:e5:f1:51:16:9c:23:2e:81:c9:cb:39:2b:
                    6c:64:19:c5:ba:45:68:cb:97:59:fd:d7:56:fc:6e:
                    bb:65:53:f3:53:9d:fe:bb:f4:9b:68:f0:16:e8:9b:
                    25:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:A9:D9:8D:88:09:4C:2C:0C:C7:72:75:02:AD:47:B2:1B:BE:C0:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f24b7a24-2d1d-3b97-928a-fa8242b351c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8d:cc00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:6f:e0:8b:c0:93:ae:d5:52:16:1f:a8:e6:1d:24:98:f9:66:
         ac:22:fd:de:65:2e:d2:84:30:8d:68:49:a7:1b:b5:2a:09:f6:
         0f:b4:5c:ce:03:87:f5:59:87:fe:40:cd:f8:14:0f:bf:56:5a:
         ef:83:e0:38:dd:36:3c:24:6a:a5:75:4b:9d:e9:58:22:9d:80:
         e8:c3:38:fa:6b:ad:a8:8e:75:6f:f5:d9:0e:b1:ad:67:46:11:
         af:e4:cd:5f:de:5e:86:53:e3:fc:ab:a3:30:9a:0c:06:77:73:
         31:01:31:92:9b:30:74:00:63:54:86:9c:05:a9:26:45:63:8b:
         47:d9:9a:03:21:5b:19:66:6b:b3:d1:a0:8e:f1:9f:84:f7:64:
         3a:55:a1:72:81:de:de:92:45:2c:ea:6f:66:7f:60:04:42:07:
         9d:e5:1e:3e:2d:62:78:c7:97:f4:10:2a:1e:80:88:7e:6b:56:
         ff:a6:2c:1b:1c:b8:0f:56:0f:5f:c8:62:cc:4e:e9:8c:49:92:
         e1:84:97:68:92:c1:38:11:23:88:2e:74:d8:bb:1a:07:c9:d0:
         83:4c:b9:8a:eb:fc:0c:ed:bf:0a:7c:72:29:52:9b:22:39:62:
         b8:7f:dd:7e:0c:93:d6:1d:a8:4c:14:9f:85:58:3c:73:82:80:
         9c:e5:84:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:09:02 2025 by rpki-client