Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1dfd9adb-2801-35d3-bb3b-a2c65ea77509.roa
File:                     1dfd9adb-2801-35d3-bb3b-a2c65ea77509.roa (raw, json)
Hash identifier:          YbQcfNBuxKfHp9CVMcpf2kpotFd/lqm/ozdRC/T/FSQ=
Subject key identifier:   AD:C2:69:2E:F0:30:01:17:A1:2D:EE:B3:85:3B:DF:22:EC:87:43:9D
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F43285849A4BA476475806B080C4D1900
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1dfd9adb-2801-35d3-bb3b-a2c65ea77509.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     30036
IP address blocks:        2604:2e89:c000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:47:64:75:80:6b:08:0c:4d:19:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=7e192e25-0fd0-43fa-a470-5343f953901a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:aa:61:af:a6:9a:23:5c:e2:b2:02:62:a6:1b:
                    ab:27:52:6e:57:5b:b5:db:5c:10:7d:36:79:4f:12:
                    8e:99:7a:a3:bf:81:73:09:16:7a:bb:9f:33:b6:a0:
                    ee:d0:5b:48:34:4f:cf:a1:d6:46:ef:f6:1a:c7:68:
                    25:39:0d:60:68:b4:5d:84:1f:fe:d4:cf:f5:64:25:
                    e1:87:ca:76:1a:8a:6a:cd:10:d4:90:9d:95:38:c5:
                    1b:f8:91:df:46:73:3c:07:ce:d3:3a:cd:b5:9e:17:
                    6d:ef:65:40:ed:2d:8b:a3:81:8f:95:d5:64:ca:1a:
                    16:09:c1:d9:f0:66:99:88:74:ac:06:03:57:ad:56:
                    24:37:26:3b:55:32:e2:9f:e3:5a:c9:20:17:fc:84:
                    e6:7c:b6:c1:09:a6:1e:2a:af:1f:74:1f:4c:ab:c1:
                    aa:58:cf:7f:f6:3d:8f:be:41:b0:8d:f5:38:3f:02:
                    9f:7a:9a:93:91:ef:3b:23:e4:21:12:2c:0e:35:4d:
                    83:3d:76:61:2f:e2:a9:dc:ff:a6:67:19:54:24:b0:
                    85:71:56:4e:05:ff:83:19:7a:62:e0:07:b6:48:17:
                    85:69:34:80:59:3d:39:bf:d8:2b:d1:37:74:b2:e5:
                    25:45:e4:4e:2e:75:40:75:b4:59:d1:88:32:25:3d:
                    70:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:C2:69:2E:F0:30:01:17:A1:2D:EE:B3:85:3B:DF:22:EC:87:43:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1dfd9adb-2801-35d3-bb3b-a2c65ea77509.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e89:c000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:69:8c:1c:6e:ce:b3:d2:67:58:c7:5a:28:1c:f0:44:9c:c2:
         ec:72:cf:fe:dc:9e:2b:82:a4:aa:a6:95:bb:cc:1f:bb:6a:1c:
         de:33:63:b6:4f:b2:75:91:8a:ca:13:88:22:ed:7f:be:68:37:
         92:1b:69:bc:08:7d:05:c0:04:c4:2c:af:d8:39:5e:e9:80:81:
         fc:c2:da:a8:23:80:db:b9:66:09:8c:31:5b:4a:3d:86:03:cd:
         76:18:b1:75:a7:83:05:e3:a1:40:e7:a5:e8:78:1b:0c:92:4c:
         4f:d4:fd:88:2b:37:13:c5:63:01:60:ac:6b:3f:37:83:e2:22:
         66:cd:99:d6:29:c0:a8:ef:fa:1c:de:3b:8f:1e:32:6e:a9:70:
         e4:c9:fb:40:e4:37:33:13:50:49:c3:53:a4:83:11:64:78:ac:
         14:c9:24:a1:d1:77:72:a5:a4:ba:09:2e:3b:3b:f4:03:f1:43:
         60:27:c5:68:9a:44:45:9d:43:05:c7:1d:60:f8:a5:fb:df:d1:
         63:76:82:82:be:c0:bb:e2:c9:e4:97:a0:7a:ec:cb:d3:5d:dd:
         01:c2:51:fd:01:e8:a6:49:b6:46:e7:b4:fe:04:48:f6:fe:9f:
         2e:2a:0a:dc:25:12:3d:28:fc:0e:27:be:28:58:60:00:69:3b:
         84:d7:ef:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:49:02 2025 by rpki-client