Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0d17ea79-2c78-3bcd-8d19-f433cdfe02b4.roa
File:                     0d17ea79-2c78-3bcd-8d19-f433cdfe02b4.roa (raw, json)
Hash identifier:          nbML72nbIAeCkh+v8ylR2dSDCTRyYjRsY9y/KVEb/TY=
Subject key identifier:   E8:B6:39:42:D0:01:F2:A8:09:64:B6:75:AC:E6:FB:1C:65:F9:53:6C
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F43285849A784BECFEDFA6C0F1F4C0B00
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0d17ea79-2c78-3bcd-8d19-f433cdfe02b4.roa
Signing time:             Sat 26 Apr 2025 13:01:01 +0000
ROA not before:           Sat 26 Apr 2025 13:01:01 +0000
ROA not after:            Fri 25 Jul 2025 13:01:01 +0000
asID:                     30036
IP address blocks:        2604:2e8c:5c00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a7:84:be:cf:ed:fa:6c:0f:1f:4c:0b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Apr 26 13:01:01 2025 GMT
            Not After : Jul 25 13:01:01 2025 GMT
        Subject: CN=e0c2880b-2d1f-4a65-b245-bcecad52741f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:4c:a6:b3:67:1e:6f:b3:bc:5e:2c:b0:36:e5:
                    df:cd:3e:0e:80:61:4e:83:58:d3:71:92:6b:b0:79:
                    2a:2a:0b:03:fe:3a:4c:b5:c7:79:fc:bc:82:39:a6:
                    40:9e:a1:a2:5f:59:65:15:66:79:39:e8:4c:23:6e:
                    95:e6:f6:2f:bd:b4:9c:b7:80:a0:48:bf:dd:6e:97:
                    e5:27:b3:11:4c:6f:27:13:41:20:44:4b:6a:30:e3:
                    38:cc:28:e8:81:f0:8a:0f:0c:09:0d:73:18:81:4c:
                    32:07:39:ca:20:eb:77:ea:f0:08:0f:ed:0e:23:f3:
                    d0:ed:b1:61:51:1f:11:5b:c5:a8:c8:97:68:b4:e3:
                    7f:ff:63:64:04:3a:90:55:cf:b2:82:bf:54:bf:31:
                    fd:71:90:08:05:50:f2:a7:9d:54:68:b1:41:f2:b5:
                    fd:59:b8:e0:62:8f:7d:90:00:88:73:25:6c:22:75:
                    0e:f0:dd:54:6f:32:8f:3e:65:8d:68:7c:de:8a:5e:
                    70:cb:92:62:93:2d:47:b4:d1:6f:78:27:c2:d5:ae:
                    b6:43:05:2b:75:c1:b0:2d:60:ec:97:d1:42:d0:2a:
                    05:33:e4:40:d6:6a:55:e8:7b:5a:91:30:6a:88:8b:
                    9d:2f:7b:56:7a:77:7c:f8:b5:55:f7:92:e1:bf:6f:
                    55:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:B6:39:42:D0:01:F2:A8:09:64:B6:75:AC:E6:FB:1C:65:F9:53:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0d17ea79-2c78-3bcd-8d19-f433cdfe02b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8c:5c00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:11:cf:0b:bd:39:f7:dc:0a:df:34:ed:b6:4c:4e:e7:15:a6:
         2c:27:64:bb:3e:34:a3:63:79:e9:be:ee:3c:c8:9e:fe:ac:9d:
         7b:d7:d7:1e:b7:5a:d1:25:8e:fc:0e:56:05:8b:3b:0f:12:72:
         b5:10:bb:47:84:6a:95:e8:dd:ad:1c:85:80:3e:a0:f6:f0:9a:
         20:2f:2f:b4:b7:1a:60:a1:7f:12:5e:21:86:26:a4:c9:8d:a0:
         c8:4f:2f:5f:c9:84:c1:52:2d:06:ab:65:98:a1:2e:7a:be:11:
         f2:10:21:53:8a:21:a9:cc:ba:f2:4a:5b:09:f7:31:06:55:48:
         05:2e:40:f8:1e:4b:21:fa:44:4d:ec:df:d1:20:f1:44:97:58:
         8a:5b:55:f1:f7:ce:ab:6c:4f:e5:53:d3:8f:af:c5:9b:17:50:
         b8:3c:46:bd:57:9c:36:64:08:04:c5:ad:13:d6:17:3c:6e:08:
         9f:54:26:c2:a4:cd:e0:b8:4f:38:d8:e3:4d:24:f0:27:ab:09:
         4c:d1:1e:cd:5a:51:f0:5a:bb:4c:37:2c:9f:24:c5:34:91:89:
         dc:d5:35:6e:30:05:79:46:c3:f1:1e:23:5b:19:5e:c2:62:be:
         38:57:d9:52:6d:48:5f:5a:b6:1b:15:aa:80:f0:65:29:cd:39:
         32:45:f5:48
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEmnhL7P7fpsDx9MCwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk
ZTBjMjg4MGItMmQxZi00YTY1LWIyNDUtYmNlY2FkNTI3NDFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhkyms2ceb7O8XiywNuXfzT4OgGFOg1jTcZJr
sHkqKgsD/jpMtcd5/LyCOaZAnqGiX1llFWZ5OehMI26V5vYvvbSct4CgSL/dbpfl
J7MRTG8nE0EgREtqMOM4zCjogfCKDwwJDXMYgUwyBznKIOt36vAID+0OI/PQ7bFh
UR8RW8WoyJdotON//2NkBDqQVc+ygr9UvzH9cZAIBVDyp51UaLFB8rX9WbjgYo99
kACIcyVsInUO8N1UbzKPPmWNaHzeil5wy5Jiky1HtNFveCfC1a62QwUrdcGwLWDs
l9FC0CoFM+RA1mpV6HtakTBqiIudL3tWend8+LVV95Lhv29VRwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFOi2OULQAfKoCWS2dazm+xxl+VNsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMGQxN2VhNzktMmM3OC0z
YmNkLThkMTktZjQzM2NkZmUwMmI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujFww
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAORHPC70599wK3zTttkxO5xWmLCdkuz40o2N56b7uPMie/qyde9fX
Hrda0SWO/A5WBYs7DxJytRC7R4RqlejdrRyFgD6g9vCaIC8vtLcaYKF/El4hhiak
yY2gyE8vX8mEwVItBqtlmKEuer4R8hAhU4ohqcy68kpbCfcxBlVIBS5A+B5LIfpE
Tezf0SDxRJdYiltV8ffOq2xP5VPTj6/FmxdQuDxGvVecNmQIBMWtE9YXPG4In1Qm
wqTN4LhPONjjTSTwJ6sJTNEezVpR8Fq7TDcsnyTFNJGJ3NU1bjAFeUbD8R4jWxle
wmK+OFfZUm1IX1q2GxWqgPBlKc05MkX1SA==
-----END CERTIFICATE-----
Generated at Sun Apr 27 14:17:02 2025 by rpki-client