Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/713ef04f-1fce-36b8-8f82-aa1f1dc5657d.roa
File:                     713ef04f-1fce-36b8-8f82-aa1f1dc5657d.roa (raw, json)
Hash identifier:          C6YUrSeI4EDgluG/am04abQqTwMJimqJfXA4ensVVPA=
Subject key identifier:   7A:2C:9B:EA:52:99:B3:38:FD:88:EC:2C:7F:8D:DD:76:1B:FF:6C:CB
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F43285849A784BE3795D11716BBB9A010
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/713ef04f-1fce-36b8-8f82-aa1f1dc5657d.roa
Signing time:             Sat 26 Apr 2025 13:01:01 +0000
ROA not before:           Sat 26 Apr 2025 13:01:01 +0000
ROA not after:            Fri 25 Jul 2025 13:01:01 +0000
asID:                     30036
IP address blocks:        2604:2e88:9c00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a7:84:be:37:95:d1:17:16:bb:b9:a0:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Apr 26 13:01:01 2025 GMT
            Not After : Jul 25 13:01:01 2025 GMT
        Subject: CN=b098b0d9-3d5f-46a4-ae66-1710f4df7dc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:c8:72:37:9e:48:01:56:8b:74:69:79:a2:37:
                    f9:ba:1b:bd:87:39:bb:b6:c9:1d:6a:dd:62:ee:d9:
                    8e:76:2b:0c:46:fa:6d:1a:8d:89:87:ce:f4:aa:f2:
                    28:5d:ee:45:59:d9:63:97:23:24:fa:74:b0:cc:96:
                    11:f6:0e:fd:63:33:d0:3c:35:2a:27:d1:eb:51:d3:
                    b5:c8:2c:74:46:8b:53:d7:ac:e6:d0:0c:ad:dc:9c:
                    f2:94:6a:2c:f1:b5:ca:ef:87:4f:9a:7d:00:02:e7:
                    c9:43:15:76:16:10:6b:38:0d:0b:ca:77:59:b3:c2:
                    61:67:d4:e6:e6:22:f1:c2:99:f8:ca:ac:7e:84:4a:
                    55:07:6d:00:c0:5e:f9:c7:ac:5b:84:e1:ba:d8:af:
                    bb:16:98:1b:6a:57:d0:a0:ed:0f:2f:89:7d:77:f3:
                    5d:a4:2e:ee:7b:11:14:e7:ab:90:af:b4:f8:45:a4:
                    00:ef:a2:1f:8c:54:47:e9:3b:99:49:f5:e0:44:99:
                    71:9e:2f:c9:af:d4:55:4c:5b:85:37:72:4b:4b:3a:
                    34:e7:f0:22:dc:51:a5:ba:00:3a:3d:35:8a:43:8f:
                    c7:5d:4b:f8:36:61:65:7a:03:fe:0b:fe:28:c1:a0:
                    4f:5e:ee:fc:6c:ce:45:d6:19:02:53:2b:ed:0c:7a:
                    bf:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:2C:9B:EA:52:99:B3:38:FD:88:EC:2C:7F:8D:DD:76:1B:FF:6C:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/713ef04f-1fce-36b8-8f82-aa1f1dc5657d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e88:9c00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:06:46:a6:2c:0b:72:f1:1c:d9:49:3b:73:73:4d:f7:4f:2d:
         fd:af:14:38:5c:2c:5b:c6:2d:24:f7:d2:6d:0e:86:3f:4d:c3:
         85:13:43:47:e8:df:da:41:65:35:c7:11:b3:ff:1f:08:e1:ff:
         48:4b:7c:7e:fc:d1:24:52:7c:5d:9b:02:9b:d2:a9:73:d8:1f:
         0e:a5:97:ab:1c:8a:51:6d:98:b4:34:40:f6:6a:4b:55:d4:21:
         75:33:9a:db:4b:89:b4:6b:d9:de:fd:ef:3b:5f:06:dc:79:dc:
         74:f4:ae:78:05:8a:b6:32:fa:15:c4:64:4a:03:cc:c2:4b:bb:
         63:ee:d7:95:c3:38:99:19:66:cc:50:db:6a:17:23:ff:8d:fa:
         8f:60:76:74:f6:1f:d6:4b:d8:07:6f:1b:d8:a5:13:6e:44:f0:
         09:ae:0e:ed:d4:57:e9:4e:ea:37:34:17:65:d8:fc:24:e5:5e:
         b9:25:45:07:16:01:af:0b:88:6c:e2:2e:65:4b:0f:f5:02:fe:
         7d:be:40:57:ea:cd:91:72:28:2c:4d:cb:31:79:a2:c9:a2:92:
         2e:10:ee:e2:7b:ca:46:e4:69:1a:15:a2:67:ea:6f:93:3d:f4:
         a5:52:da:c5:d8:c5:06:e5:97:03:3a:35:ff:a1:a3:a2:c3:73:
         e6:0f:59:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:44:43 2025 by rpki-client