Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5343cbcc-0f0d-3988-a6d5-f684bf6920a3.roa
File:                     5343cbcc-0f0d-3988-a6d5-f684bf6920a3.roa (raw, json)
Hash identifier:          gd4RHJdU1J9I6OJ2R4l/XpxPhP9w3YplOJQqsXHLiWs=
Subject key identifier:   56:19:61:69:2D:BD:AC:71:3B:EC:BA:7A:7A:75:3E:08:3E:BF:69:4D
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F43285849A1EF6079AD8792CADB1B4800
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5343cbcc-0f0d-3988-a6d5-f684bf6920a3.roa
Signing time:             Thu 24 Apr 2025 13:01:00 +0000
ROA not before:           Thu 24 Apr 2025 13:01:00 +0000
ROA not after:            Wed 23 Jul 2025 13:01:00 +0000
asID:                     30036
IP address blocks:        2604:2e89:800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a1:ef:60:79:ad:87:92:ca:db:1b:48:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Apr 24 13:01:00 2025 GMT
            Not After : Jul 23 13:01:00 2025 GMT
        Subject: CN=9931ba51-b386-421f-bfd3-246818dfed4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d0:c4:f7:0e:47:b7:63:fb:1e:0c:6f:24:8f:
                    fc:53:97:98:4b:65:7e:29:11:7e:37:d5:ec:72:88:
                    8d:0c:3a:c0:5b:3d:67:df:b1:44:a6:67:74:67:53:
                    41:94:dd:ea:5b:b4:b7:31:cd:dc:00:c0:58:3e:a1:
                    6f:88:9f:a3:36:f0:5f:df:a5:14:c6:46:b0:0b:a7:
                    02:a9:b4:a5:aa:0e:1f:cd:74:57:88:6a:dd:27:43:
                    5f:06:13:e2:90:47:ca:1b:06:c7:e3:46:6d:a9:fa:
                    c0:e9:53:27:60:57:cb:0a:bf:38:a5:1f:fc:7e:42:
                    79:92:ab:53:b6:48:68:d0:74:d3:2b:b0:b8:b1:38:
                    02:c3:4d:6c:c6:48:05:37:85:97:61:9e:c3:71:a5:
                    e4:4b:e4:d3:de:0e:1f:13:08:15:0b:85:12:de:3b:
                    23:1c:32:3d:33:9a:66:ef:30:ac:94:bb:e9:a5:67:
                    2f:88:2f:46:83:01:be:47:73:e6:e0:47:43:d7:00:
                    af:17:81:89:3a:93:d4:a3:57:44:ed:25:1b:cf:0a:
                    f1:84:99:84:a5:3a:87:05:44:28:4d:e3:df:3c:48:
                    ad:6f:d8:19:0a:3f:10:f0:08:0d:f0:1e:a6:1c:72:
                    da:14:32:c0:95:a7:cb:5c:75:55:31:f5:c1:c6:0f:
                    bf:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:19:61:69:2D:BD:AC:71:3B:EC:BA:7A:7A:75:3E:08:3E:BF:69:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5343cbcc-0f0d-3988-a6d5-f684bf6920a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e89:800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:7c:bc:a5:ad:1c:bc:30:ae:bc:d3:21:fa:01:f4:e4:22:18:
         eb:5f:1e:4c:7f:27:bb:8f:15:62:cb:7f:c1:d7:ba:71:03:43:
         ea:5a:65:e6:4a:26:57:b1:2d:aa:78:8a:e4:8e:45:31:2c:d3:
         54:b6:1e:a8:18:58:82:d1:67:d8:b9:48:c8:29:f7:36:0b:9a:
         c2:4d:9d:3a:75:5a:b3:e4:42:a0:e7:2a:b5:34:f3:a5:af:f3:
         ff:fa:55:9d:d5:f1:f8:5f:f7:72:a8:52:14:5f:55:de:f3:35:
         35:e4:e5:68:60:03:bb:e1:d9:d1:56:c6:c6:fe:10:df:9b:10:
         6f:70:26:b7:57:ac:eb:06:3f:5a:6f:e2:a2:c8:cf:ef:e5:c6:
         fb:ea:fd:e8:34:61:3d:5d:51:d8:12:00:47:f6:2d:8d:be:b5:
         7f:93:48:d9:cd:bb:d4:85:3b:85:21:1e:c6:4a:b7:2a:ee:5d:
         c4:2c:f6:03:ae:a1:c1:75:1e:b8:43:3d:c9:82:31:ea:41:1b:
         c7:f4:21:d0:39:cf:0a:8c:9f:36:56:86:76:e5:43:de:d2:28:
         97:1a:29:e5:3f:24:d0:b1:e8:40:b3:73:5a:b3:7d:55:a8:6c:
         e3:2b:70:e6:46:8a:25:ac:c6:13:40:7c:c7:71:c3:7d:10:12:
         20:f2:05:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:11:28 2025 by rpki-client