Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/02c0a7a4-e28b-30cb-b568-e9925d36e2fb.roa
File:                     02c0a7a4-e28b-30cb-b568-e9925d36e2fb.roa (raw, json)
Hash identifier:          p3pKauz4jT1R6J1ayyUm/Twr2Pk40EkGRnyXm/R/PSo=
Subject key identifier:   03:E3:2E:21:09:60:41:B9:3E:FB:CB:A6:D2:90:83:66:EA:C3:2E:A3
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F432858499BF52FC592A6BF966412C780
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/02c0a7a4-e28b-30cb-b568-e9925d36e2fb.roa
Signing time:             Tue 22 Apr 2025 09:38:08 +0000
ROA not before:           Tue 22 Apr 2025 09:38:08 +0000
ROA not after:            Mon 21 Jul 2025 09:38:08 +0000
asID:                     19905
IP address blocks:        2604:2e88:e400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9b:f5:2f:c5:92:a6:bf:96:64:12:c7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Apr 22 09:38:08 2025 GMT
            Not After : Jul 21 09:38:08 2025 GMT
        Subject: CN=1a065dd9-de03-4c0d-a062-dac405ffbe44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:fa:a2:de:6b:6f:db:88:2f:49:05:7b:85:41:
                    00:25:75:a1:98:da:80:cb:20:ca:eb:4d:06:95:c0:
                    eb:ff:79:12:26:6e:d7:58:91:58:9b:da:cb:44:d8:
                    df:e8:3f:20:cc:3b:31:18:f9:d4:28:26:25:b4:c7:
                    83:04:5c:8b:98:68:4a:b9:95:4e:7a:9a:d6:a5:2c:
                    db:38:e2:3e:0b:0c:17:39:c1:8e:dc:08:47:39:de:
                    e7:05:21:a7:42:43:ee:62:1e:54:69:c8:3b:8a:05:
                    48:ee:a9:c4:43:ed:b4:d5:9b:b0:f3:62:e1:31:31:
                    c4:28:88:3d:02:9b:93:ee:66:3d:c3:45:dc:cd:ed:
                    2c:e7:ee:8c:8e:3d:f5:43:c4:66:7b:ac:8d:f8:60:
                    e0:fe:7f:20:b3:5a:ce:7c:92:d4:e6:af:e4:cd:77:
                    13:44:3c:26:ec:cd:6b:cb:6e:5f:af:d3:8e:4f:f7:
                    0b:b7:0e:e6:8f:5f:cf:13:45:95:2c:55:e3:7b:1d:
                    98:6f:c6:be:89:c6:fd:04:40:ba:92:8a:24:e4:32:
                    2e:a4:36:d2:06:74:f3:61:27:fc:13:70:bb:56:15:
                    99:0d:67:94:cd:ac:32:29:3f:86:74:cd:09:bd:ee:
                    dd:68:67:6f:f0:65:dd:f6:98:c3:71:d4:76:5c:b7:
                    81:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:E3:2E:21:09:60:41:B9:3E:FB:CB:A6:D2:90:83:66:EA:C3:2E:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/02c0a7a4-e28b-30cb-b568-e9925d36e2fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e88:e400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:17:5c:6b:dd:60:66:56:55:26:f2:25:f2:36:0a:fd:32:86:
         f6:23:64:50:bb:ef:83:d0:ba:46:e8:db:f6:f2:21:ce:2d:68:
         15:74:eb:d5:59:0c:e9:13:b6:b8:2f:8b:20:4a:2c:61:80:34:
         30:4a:00:8f:ab:0f:ca:1e:a8:ea:55:bb:4c:a8:b4:66:09:a7:
         bb:28:85:ca:24:fc:78:8a:6e:ff:5f:dd:78:47:73:51:48:7b:
         3a:61:8a:68:bf:4d:27:c4:c4:9a:78:30:39:75:33:74:42:a8:
         e2:0f:3d:35:78:97:d9:f5:6c:be:d5:ac:d3:ad:31:3e:16:fb:
         64:67:07:65:31:72:f4:04:2f:50:cb:1a:83:25:dd:2e:55:99:
         36:0e:89:82:6a:0d:7c:7e:f3:11:c2:49:d2:b3:cc:e4:d5:6d:
         9f:23:08:1a:4d:ac:bd:bf:2e:96:a6:fe:71:b8:65:c9:df:6f:
         49:7d:bc:b2:de:41:ad:0a:6c:f4:03:4d:c1:3f:1e:66:cf:ff:
         38:54:fa:10:0f:95:7c:19:39:47:2b:31:c3:df:4c:5b:d4:d1:
         7d:cd:6b:cd:31:97:28:bd:f2:b4:9f:36:8d:d4:90:72:c1:54:
         00:25:bf:38:18:bd:09:e6:a2:46:08:f3:b4:e7:1f:df:78:fb:
         d7:a0:72:ce
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEmb9S/Fkqa/lmQSx4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI1MDQyMjA5MzgwOFoXDTI1MDcyMTA5MzgwOFowLzEtMCsGA1UEAxMk
MWEwNjVkZDktZGUwMy00YzBkLWEwNjItZGFjNDA1ZmZiZTQ0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPqi3mtv24gvSQV7hUEAJXWhmNqAyyDK600G
lcDr/3kSJm7XWJFYm9rLRNjf6D8gzDsxGPnUKCYltMeDBFyLmGhKuZVOeprWpSzb
OOI+CwwXOcGO3AhHOd7nBSGnQkPuYh5Uacg7igVI7qnEQ+201Zuw82LhMTHEKIg9
ApuT7mY9w0Xcze0s5+6Mjj31Q8Rme6yN+GDg/n8gs1rOfJLU5q/kzXcTRDwm7M1r
y25fr9OOT/cLtw7mj1/PE0WVLFXjex2Yb8a+icb9BEC6kook5DIupDbSBnTzYSf8
E3C7VhWZDWeUzawyKT+GdM0Jve7daGdv8GXd9pjDcdR2XLeBowIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFAPjLiEJYEG5PvvLptKQg2bqwy6jMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMDJjMGE3YTQtZTI4Yi0z
MGNiLWI1NjgtZTk5MjVkMzZlMmZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiOQw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAJhdca91gZlZVJvIl8jYK/TKG9iNkULvvg9C6Rujb9vIhzi1oFXTr
1VkM6RO2uC+LIEosYYA0MEoAj6sPyh6o6lW7TKi0ZgmnuyiFyiT8eIpu/1/deEdz
UUh7OmGKaL9NJ8TEmngwOXUzdEKo4g89NXiX2fVsvtWs060xPhb7ZGcHZTFy9AQv
UMsagyXdLlWZNg6JgmoNfH7zEcJJ0rPM5NVtnyMIGk2svb8ulqb+cbhlyd9vSX28
st5BrQps9ANNwT8eZs//OFT6EA+VfBk5Rysxw99MW9TRfc1rzTGXKL3ytJ82jdSQ
csFUACW/OBi9CeaiRgjztOcf33j716Byzg==
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:16:56 2025 by rpki-client