Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/17ce5fec-6ef5-399e-9fb9-dc7e3bf8fee5.roa
File:                     17ce5fec-6ef5-399e-9fb9-dc7e3bf8fee5.roa (raw, json)
Hash identifier:          I5R0TpLAmmddSCOZ4VBi3jnbHO5aoULzZlI6zSyonUI=
Subject key identifier:   EB:C9:51:EC:8A:C4:F5:90:9D:0E:F4:9C:C0:CE:3C:50:20:58:DA:D0
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F43285849A1EF5FB11E1D3BFFD1C80A00
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/17ce5fec-6ef5-399e-9fb9-dc7e3bf8fee5.roa
Signing time:             Thu 24 Apr 2025 13:01:00 +0000
ROA not before:           Thu 24 Apr 2025 13:01:00 +0000
ROA not after:            Wed 23 Jul 2025 13:01:00 +0000
asID:                     30036
IP address blocks:        2604:2e88:6c00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a1:ef:5f:b1:1e:1d:3b:ff:d1:c8:0a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Apr 24 13:01:00 2025 GMT
            Not After : Jul 23 13:01:00 2025 GMT
        Subject: CN=7bcdb881-87da-4704-9dcf-47f265c46cff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:62:8f:dd:72:88:b7:d2:03:2c:42:45:e5:cc:
                    fd:bc:ac:96:11:bb:1c:05:2f:ca:ca:0e:34:5d:38:
                    a8:fd:17:cf:b0:8b:bd:97:6a:0e:28:52:72:37:5f:
                    f3:b4:3a:80:06:96:0a:10:c8:15:c9:23:f3:5f:f2:
                    56:62:77:31:c5:64:52:f5:63:1f:9d:d8:ef:86:08:
                    ca:c8:ed:bd:1a:80:8c:57:31:a7:64:3e:7c:ca:64:
                    29:fe:01:8c:bd:a7:0f:71:4a:d4:5e:29:e2:37:e4:
                    89:c6:71:ed:0c:28:f9:6b:c3:c3:ec:a9:2a:2f:0c:
                    5d:fd:e8:62:2b:83:27:28:b7:33:b8:9f:6c:9b:84:
                    6d:27:7f:c4:78:02:8b:4a:72:1c:6c:6e:c9:fc:b1:
                    47:c5:f7:6e:86:46:fb:31:cf:df:a0:fe:5f:39:65:
                    8c:14:88:bc:8d:15:86:7b:39:bf:f2:35:4e:35:ed:
                    14:5b:25:75:d4:3a:72:a1:4e:60:73:78:78:f5:a8:
                    1c:8f:fa:ed:23:ac:5f:6a:59:64:d1:20:02:35:44:
                    8a:92:42:59:a4:c4:a2:9c:ba:31:84:6d:2c:2b:42:
                    a9:b2:e1:c1:18:5e:f9:bb:9e:c6:f0:c3:e2:1c:5a:
                    f7:2c:96:aa:39:1a:e3:bb:0d:f0:45:1a:30:9d:e3:
                    71:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:C9:51:EC:8A:C4:F5:90:9D:0E:F4:9C:C0:CE:3C:50:20:58:DA:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/17ce5fec-6ef5-399e-9fb9-dc7e3bf8fee5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e88:6c00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:d2:6a:ac:63:04:b4:7b:0e:a9:49:4c:5d:d4:31:83:91:ce:
         ce:be:a4:c0:f7:fe:c0:30:c6:db:2c:f3:b1:49:24:e0:6e:d9:
         09:66:8e:9b:d2:63:8b:ff:60:7b:d1:41:8e:5e:f8:b4:40:60:
         39:00:dc:d4:5a:dd:a0:58:1a:57:8c:9a:0b:14:7b:68:f2:66:
         b9:04:90:2d:86:77:33:ed:36:ed:f5:14:4d:34:50:5b:72:2a:
         72:d4:14:70:e3:c7:f5:99:39:ba:27:ef:b8:58:7c:cc:99:45:
         19:c3:68:48:c4:47:28:7e:27:56:80:b3:9d:bb:c5:9f:4f:8f:
         6c:70:09:af:61:96:8f:ef:69:4c:dd:9a:c7:c0:e1:08:d2:95:
         68:8a:9f:3c:f2:03:26:74:f3:b3:80:57:f5:ec:2b:0a:c0:5a:
         13:2b:61:85:6f:b7:c2:ed:30:a5:42:66:d1:24:e5:de:fd:dc:
         26:a3:2f:16:15:b6:59:f9:21:86:cd:e5:f0:c8:82:56:9e:b3:
         e1:0a:ee:04:07:9d:07:a8:79:a9:e0:37:53:33:57:b3:11:40:
         c9:38:58:cd:bf:9f:f4:dd:46:f0:3a:45:ba:f6:de:44:0e:5a:
         8f:d4:b4:7d:aa:3b:a8:b4:3d:2d:fe:86:20:e0:d1:3b:5b:5e:
         ae:65:c4:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 02:39:07 2025 by rpki-client