Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/22e64201-4b00-3f64-9c4d-0465eb8cfc80.roa
File:                     22e64201-4b00-3f64-9c4d-0465eb8cfc80.roa (raw, json)
Hash identifier:          +G6+eZvC66wz7Z/oyZ5ZT1T+fgNaYEzF+iSqSRMPikM=
Subject key identifier:   F7:04:EB:0F:C5:33:05:45:43:D6:B2:41:58:82:63:C1:1B:B2:73:93
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F43285849A1EF629D37548DBA8E360C80
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/22e64201-4b00-3f64-9c4d-0465eb8cfc80.roa
Signing time:             Thu 24 Apr 2025 13:01:00 +0000
ROA not before:           Thu 24 Apr 2025 13:01:00 +0000
ROA not after:            Wed 23 Jul 2025 13:01:00 +0000
asID:                     30036
IP address blocks:        2604:2e8b:d400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a1:ef:62:9d:37:54:8d:ba:8e:36:0c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Apr 24 13:01:00 2025 GMT
            Not After : Jul 23 13:01:00 2025 GMT
        Subject: CN=539dc0e7-65eb-46e4-b193-f14109c4f795
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:93:12:cf:5f:41:a7:06:4b:fb:d4:02:5c:ae:
                    9b:33:23:e7:14:c4:b6:eb:24:03:ff:29:12:0b:b6:
                    a4:63:54:ae:8a:33:cf:82:df:9b:8b:84:96:26:d3:
                    ec:13:f3:ea:79:57:11:da:92:bc:3b:b5:21:57:7f:
                    8e:79:42:8d:eb:43:f7:3c:cd:ec:c0:5b:9b:bb:d3:
                    60:60:ad:94:78:fa:56:58:5e:42:23:e0:c1:0a:d9:
                    d2:a5:de:de:a9:a4:86:60:96:cd:8d:78:9e:42:65:
                    dd:69:df:89:bb:3e:da:90:82:cf:83:f9:da:b7:ef:
                    a0:aa:78:e4:1c:b7:f0:c8:66:07:44:95:1c:67:e6:
                    26:9b:ad:f4:9d:a7:8e:f8:d5:c4:46:bb:67:78:e0:
                    aa:51:24:69:fa:68:a6:d0:84:c6:08:d8:ee:21:ed:
                    90:29:d4:3e:1a:82:d8:f0:44:17:77:ca:10:77:28:
                    e1:68:3e:74:5d:11:29:3b:1a:26:2d:7a:b1:8d:f3:
                    6c:3a:f5:53:e3:e6:a2:43:c7:9b:f2:b2:99:60:8b:
                    ed:fa:e4:8a:5c:7c:98:7d:c5:45:d1:cd:47:73:23:
                    a6:14:1b:6f:0d:d5:a2:ae:30:64:14:26:29:cb:d9:
                    13:9d:b1:40:5b:e5:32:93:cd:65:1e:3c:0c:ba:6a:
                    e4:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:04:EB:0F:C5:33:05:45:43:D6:B2:41:58:82:63:C1:1B:B2:73:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/22e64201-4b00-3f64-9c4d-0465eb8cfc80.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8b:d400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:d2:33:be:bc:9e:6f:7e:9a:3c:ba:7e:d6:a3:be:3e:73:8f:
         ce:9c:fc:35:b3:58:4e:aa:b6:b7:09:73:ee:0d:16:90:c6:6c:
         ab:e0:2a:48:0c:a0:05:2b:98:85:c9:2c:48:6b:d5:88:36:7c:
         d7:97:51:e9:b0:04:6c:9b:98:a1:41:09:1f:9a:28:ca:02:f4:
         8e:a2:3b:f6:76:dd:06:cc:c8:75:4d:1c:03:75:92:76:5d:f7:
         4f:87:5b:dd:6f:6c:cf:47:d3:3b:d7:c6:df:2d:7e:5a:0e:e8:
         0d:03:df:e7:8f:63:5a:5a:39:2d:bd:db:6a:ea:05:6b:4e:a6:
         5a:a9:6f:23:1e:44:0d:1d:f9:94:6e:77:81:6f:78:2e:7b:0e:
         ea:a5:df:7a:ae:df:91:da:ac:77:32:79:b3:00:24:06:e6:b6:
         5f:71:59:d0:66:9c:1b:39:0e:b1:9d:4f:62:73:9e:b2:2d:6d:
         29:ea:f1:f6:b1:7b:23:5f:c7:31:28:94:bb:bf:c8:e6:a1:d1:
         7f:80:79:ca:3a:eb:80:d1:0c:51:54:ba:60:11:06:85:ed:32:
         11:84:5e:2e:d1:75:84:79:5a:b3:8d:30:fe:e2:78:1b:b7:76:
         4e:db:76:87:cb:a3:e9:04:66:56:4d:92:0b:82:b5:16:03:a5:
         a5:9f:8d:cd
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEmh72KdN1SNuo42DIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI1MDQyNDEzMDEwMFoXDTI1MDcyMzEzMDEwMFowLzEtMCsGA1UEAxMk
NTM5ZGMwZTctNjVlYi00NmU0LWIxOTMtZjE0MTA5YzRmNzk1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA75MSz19BpwZL+9QCXK6bMyPnFMS26yQD/ykS
C7akY1SuijPPgt+bi4SWJtPsE/PqeVcR2pK8O7UhV3+OeUKN60P3PM3swFubu9Ng
YK2UePpWWF5CI+DBCtnSpd7eqaSGYJbNjXieQmXdad+Juz7akILPg/nat++gqnjk
HLfwyGYHRJUcZ+Ymm630naeO+NXERrtneOCqUSRp+mim0ITGCNjuIe2QKdQ+GoLY
8EQXd8oQdyjhaD50XREpOxomLXqxjfNsOvVT4+aiQ8eb8rKZYIvt+uSKXHyYfcVF
0c1HcyOmFBtvDdWirjBkFCYpy9kTnbFAW+Uyk81lHjwMumrkMQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFPcE6w/FMwVFQ9ayQViCY8EbsnOTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMjJlNjQyMDEtNGIwMC0z
ZjY0LTljNGQtMDQ2NWViOGNmYzgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQui9Qw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAj9Izvryeb36aPLp+1qO+PnOPzpz8NbNYTqq2twlz7g0WkMZsq+Aq
SAygBSuYhcksSGvViDZ815dR6bAEbJuYoUEJH5ooygL0jqI79nbdBszIdU0cA3WS
dl33T4db3W9sz0fTO9fG3y1+Wg7oDQPf549jWlo5Lb3bauoFa06mWqlvIx5EDR35
lG53gW94LnsO6qXfeq7fkdqsdzJ5swAkBua2X3FZ0GacGzkOsZ1PYnOesi1tKerx
9rF7I1/HMSiUu7/I5qHRf4B5yjrrgNEMUVS6YBEGhe0yEYReLtF1hHlas40w/uJ4
G7d2Ttt2h8uj6QRmVk2SC4K1FgOlpZ+NzQ==
-----END CERTIFICATE-----
Generated at Sun Apr 27 01:31:02 2025 by rpki-client