Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/7267700c-30e5-3bc3-a1b7-cb427dc52086.roa
File:                     7267700c-30e5-3bc3-a1b7-cb427dc52086.roa (raw, json)
Hash identifier:          DvmSzRVCS8HVOyFo2RdWPSSjGdB4R/okHnigj8vA3fU=
Subject key identifier:   05:77:2C:C1:08:FC:2E:7D:FF:8E:9F:DD:32:2D:71:6E:A0:D9:B8:0D
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F43285849A1EF615EFB5379D7CD526A00
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/7267700c-30e5-3bc3-a1b7-cb427dc52086.roa
Signing time:             Thu 24 Apr 2025 13:01:00 +0000
ROA not before:           Thu 24 Apr 2025 13:01:00 +0000
ROA not after:            Wed 23 Jul 2025 13:01:00 +0000
asID:                     30036
IP address blocks:        2604:2e89:6c00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a1:ef:61:5e:fb:53:79:d7:cd:52:6a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Apr 24 13:01:00 2025 GMT
            Not After : Jul 23 13:01:00 2025 GMT
        Subject: CN=bd7ec959-6277-4fa6-a920-c01af538c078
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:1b:1d:82:3a:42:0c:63:a4:fe:43:d2:a7:44:
                    73:3d:85:20:af:2c:b2:f4:de:6d:8a:4f:00:8b:e7:
                    e5:28:7f:8c:7b:c6:7f:89:f9:cf:e3:2f:1f:7a:95:
                    2d:7a:80:cc:fc:04:59:90:d3:85:40:d0:f6:6a:2c:
                    75:08:78:e4:30:38:ae:21:cb:7f:75:fb:23:11:2d:
                    e6:81:a5:bf:4c:e3:59:e8:70:b7:21:d0:88:ba:3c:
                    36:52:1e:6d:82:12:cd:03:53:a0:c6:e2:32:10:8f:
                    f0:59:91:f9:56:ea:0a:be:85:5f:6a:a1:1b:63:1f:
                    32:df:be:a2:67:ba:38:dc:69:c1:25:8c:72:78:93:
                    42:64:5a:0d:74:05:1c:5a:0a:dd:3e:01:85:63:1d:
                    a7:b2:8f:26:a8:4b:a3:b0:29:68:c5:e3:33:d3:9a:
                    89:45:19:00:90:eb:d3:66:9e:fa:df:ae:f4:50:ec:
                    37:95:8c:0d:18:2b:8c:e5:da:db:12:d9:57:7b:6e:
                    d6:d0:07:12:8f:be:e4:60:20:b0:3d:71:66:90:f0:
                    b5:4a:ee:4d:99:86:f6:27:83:1f:55:9e:50:5a:40:
                    37:cf:43:3e:b0:95:76:3e:5f:f7:70:e5:48:23:87:
                    fc:ee:a8:0e:b2:7b:63:99:b2:9c:e5:1c:c9:e0:d3:
                    d4:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:77:2C:C1:08:FC:2E:7D:FF:8E:9F:DD:32:2D:71:6E:A0:D9:B8:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/7267700c-30e5-3bc3-a1b7-cb427dc52086.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e89:6c00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:b9:ec:e4:4a:e6:bd:78:87:e5:4b:ac:74:9a:e5:2f:40:00:
         59:2d:a7:77:f1:81:30:ac:81:37:c4:cf:49:2f:9c:79:8e:a3:
         5a:74:50:ae:b9:13:64:3e:e8:ae:53:f8:d7:5c:9f:18:f0:46:
         56:b6:e2:c6:0d:dd:36:f5:48:8c:86:8c:a9:8e:66:9c:45:0c:
         3c:44:dd:f9:e2:64:40:f5:f6:03:37:fa:e3:db:fd:33:f3:97:
         e5:12:16:83:69:6b:b8:96:2d:df:fb:31:77:d1:5d:3f:84:a5:
         f6:7a:9e:ad:a2:b3:9a:a2:9d:c8:f0:eb:fb:3a:07:f5:d3:18:
         ef:0f:5e:30:ef:f9:68:f3:3c:90:b6:ac:81:e0:b3:66:4a:77:
         70:f8:49:86:06:36:3e:a2:58:f2:d4:4b:38:0e:27:a8:db:d1:
         eb:f9:c5:64:fa:cb:dd:be:3c:ab:97:5f:f4:02:d3:02:6f:ae:
         79:1f:eb:2c:41:23:b3:0d:d0:e8:15:16:84:7f:be:9b:81:39:
         4d:25:ce:89:6b:0c:34:43:c9:70:33:eb:f9:f3:6b:8d:13:bc:
         10:e0:22:e1:69:3c:2e:81:82:1d:aa:6a:6e:7f:d9:66:d5:fc:
         97:b1:ca:42:36:60:ce:11:93:fe:82:0b:8b:98:a6:b2:c6:76:
         aa:51:62:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:43:52 2025 by rpki-client