Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/63c86781-1f9c-30b8-8729-ce472e549b9c.roa
File:                     63c86781-1f9c-30b8-8729-ce472e549b9c.roa (raw, json)
Hash identifier:          0QKX9V2GjZCQjdd6aI/8M1P1waE6sOu0V+oQZDVdTCg=
Subject key identifier:   7C:18:79:20:B3:40:FA:47:83:2C:29:5C:9A:4E:22:C9:DA:19:E1:60
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F43285849A1EF6092A2AB42F01855B080
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/63c86781-1f9c-30b8-8729-ce472e549b9c.roa
Signing time:             Thu 24 Apr 2025 13:01:00 +0000
ROA not before:           Thu 24 Apr 2025 13:01:00 +0000
ROA not after:            Wed 23 Jul 2025 13:01:00 +0000
asID:                     30036
IP address blocks:        2604:2e89:1000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a1:ef:60:92:a2:ab:42:f0:18:55:b0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Apr 24 13:01:00 2025 GMT
            Not After : Jul 23 13:01:00 2025 GMT
        Subject: CN=7b12c54a-3a8c-4041-a77c-cd255638c0eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:9a:f0:4d:e6:d8:94:53:ed:e2:cc:d0:63:17:
                    e4:69:3a:92:38:29:8d:9b:68:1f:28:dc:01:01:d3:
                    0e:cd:a3:32:68:ec:a9:d5:de:ca:86:9a:b2:a7:7b:
                    02:5f:25:25:30:96:e8:f8:5e:13:95:69:64:e9:7c:
                    e1:1a:b6:18:31:97:35:69:8f:60:f7:b4:52:bc:1f:
                    46:80:1e:a5:b3:6d:f3:00:7b:f8:1f:e9:39:94:44:
                    0a:2c:7a:4b:37:9c:e8:bf:ee:f8:96:a4:87:5a:de:
                    fe:7e:a9:da:3e:78:46:0e:d6:dc:0c:30:13:61:93:
                    54:2b:4e:c1:af:23:65:74:f6:7b:d8:74:47:92:a1:
                    08:89:93:63:a5:9b:ba:9b:ad:fd:6b:c3:81:cd:f7:
                    dd:1c:f3:cd:bd:c4:63:ea:99:78:e4:a6:2a:af:97:
                    f1:87:33:74:30:27:3e:9c:12:fa:9b:3b:b3:1a:8d:
                    82:ff:15:72:49:69:11:35:30:ec:ed:86:ac:54:5c:
                    c1:0c:a4:4a:3d:a0:0f:1e:15:b8:ba:d9:ab:f1:2a:
                    02:16:b9:44:26:8b:bf:59:e4:09:2f:63:01:5c:ae:
                    e7:52:ab:1a:2b:16:8f:c6:80:e7:c3:91:a2:b2:f2:
                    ae:30:e5:9c:6d:db:f2:56:fc:c2:f1:49:e5:b8:b0:
                    2a:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:18:79:20:B3:40:FA:47:83:2C:29:5C:9A:4E:22:C9:DA:19:E1:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/63c86781-1f9c-30b8-8729-ce472e549b9c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e89:1000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:30:09:86:26:89:7f:23:24:9d:67:10:a8:5f:fa:1a:de:fb:
         bc:7a:89:db:2c:7e:b3:b5:5b:9e:41:5e:0c:11:f5:fb:1b:9d:
         80:c3:2c:9e:ca:33:fd:4e:97:7b:9e:6c:b5:2f:a0:b4:8f:e6:
         d5:53:58:7f:7e:48:37:19:12:fe:7d:4b:bd:2f:d7:eb:2f:b2:
         d7:3b:8d:3b:f4:e0:bc:53:d0:0e:ae:d6:09:e3:4f:d5:e9:92:
         82:2d:b1:1c:5b:6d:42:e1:b7:ac:6d:81:75:f8:61:42:61:b9:
         d6:df:25:a9:5d:88:b4:58:85:19:8a:92:88:7c:c2:58:77:50:
         ff:58:a3:ad:2c:17:2b:3c:da:0b:95:d2:2c:0f:7c:e5:2d:9a:
         91:0e:04:5a:c1:45:79:12:b4:00:64:69:6e:26:c5:83:97:00:
         7c:20:7d:e8:63:8e:e0:e2:85:cf:ee:52:de:42:a3:f3:4d:66:
         88:c2:ec:5b:de:2e:49:59:28:6f:09:ae:da:0d:2a:7d:a6:47:
         34:81:bd:b2:c5:f5:89:94:fd:1d:37:9e:52:af:d6:7f:f8:fe:
         f2:7b:a2:c5:11:73:b9:3c:0a:47:0b:34:d5:24:16:b0:e1:b6:
         e8:bc:38:2a:b0:62:4a:49:ca:cb:e5:de:29:a9:9f:da:f1:8d:
         e6:d3:90:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:00:08 2025 by rpki-client