Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/81e521b1-7564-31d5-b771-02a09b358955.roa
File:                     81e521b1-7564-31d5-b771-02a09b358955.roa (raw, json)
Hash identifier:          QOKWNw7EfSA7O/XOcOHEjSnZd9qlIaV6fXQwqmvqaQU=
Subject key identifier:   D4:EA:6B:42:17:9E:C1:65:6C:D7:6C:AE:65:6C:11:D4:6E:56:5A:52
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F43285849A784BF1A3163358780691580
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/81e521b1-7564-31d5-b771-02a09b358955.roa
Signing time:             Sat 26 Apr 2025 13:01:01 +0000
ROA not before:           Sat 26 Apr 2025 13:01:01 +0000
ROA not after:            Fri 25 Jul 2025 13:01:01 +0000
asID:                     30036
IP address blocks:        2604:2e8e:b000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a7:84:bf:1a:31:63:35:87:80:69:15:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Apr 26 13:01:01 2025 GMT
            Not After : Jul 25 13:01:01 2025 GMT
        Subject: CN=ad02f991-2165-4b4a-9975-c28825b95ce2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:fd:1c:2e:45:61:5c:5c:6b:01:af:d5:96:0d:
                    f7:d8:30:b1:44:43:ad:b4:7d:b8:de:b9:74:ae:04:
                    51:a7:2a:02:d2:37:e3:59:21:d1:7b:1c:20:66:f8:
                    f9:70:83:85:b4:6e:48:ef:4d:c2:b2:0f:cf:11:32:
                    af:f0:38:e0:16:5d:4a:6f:c7:a1:48:a6:63:fa:37:
                    75:91:96:32:54:ce:e9:13:94:2d:d2:99:8b:91:e1:
                    e0:aa:49:5f:d8:46:fd:90:6d:fa:6f:72:ab:02:ee:
                    91:4f:d4:e5:4b:12:e8:a0:8c:ad:46:17:70:f9:0a:
                    33:b4:91:63:63:d5:27:bd:7c:1b:07:bf:1c:f0:63:
                    5d:79:1e:ac:4f:65:8b:d8:4c:20:37:2a:fc:b0:31:
                    7e:32:94:87:23:f3:9f:45:f7:71:4b:2a:0c:e7:33:
                    60:d5:f2:d0:07:43:04:f7:b6:06:c0:63:b6:b5:19:
                    6b:64:78:37:fa:90:a3:ae:d8:b1:2e:d3:b4:a7:77:
                    e6:ad:6c:b9:df:7d:72:4e:9f:e5:97:be:23:40:6d:
                    5c:42:3b:ed:9c:e1:5c:fe:ed:96:8b:4b:c1:1d:08:
                    82:f6:94:d0:e6:d7:d9:e0:1c:ad:e5:a4:aa:71:cd:
                    6c:74:2c:6e:3b:03:aa:9e:e8:68:90:ea:f1:3f:17:
                    4f:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:EA:6B:42:17:9E:C1:65:6C:D7:6C:AE:65:6C:11:D4:6E:56:5A:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/81e521b1-7564-31d5-b771-02a09b358955.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8e:b000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:70:f6:25:b4:0f:58:4e:0b:03:1c:3a:3a:3f:b7:8c:b4:f4:
         31:45:1f:ca:d4:e1:e6:2b:7f:4e:82:de:00:42:e8:e5:51:2e:
         21:cc:22:99:fa:0f:6f:1a:d9:08:81:fb:a3:61:9a:b4:e2:8a:
         7a:5f:ed:60:54:57:19:d2:a1:90:bc:7f:04:7b:5c:a2:9f:e3:
         76:5b:23:f7:2b:e3:f6:42:08:f9:99:88:29:2f:c4:aa:c3:88:
         f8:ac:85:70:1e:d0:3d:2c:d4:0d:27:f2:c5:24:18:8c:33:dc:
         6e:ef:4b:a8:11:66:ec:ee:d2:be:f9:0d:4f:de:46:af:37:3e:
         3c:97:3e:74:80:55:22:30:d6:a7:de:1b:d9:96:71:1b:b7:fe:
         0d:9a:2a:88:3e:e2:65:ba:e7:27:fe:69:70:77:e1:24:93:92:
         73:a5:77:aa:12:5b:e7:56:1e:1d:4d:bc:7a:d6:f3:f5:df:74:
         81:5c:eb:34:fd:e5:36:11:cb:cd:d3:33:9c:9f:57:41:c6:19:
         22:49:f9:9f:12:b9:b1:45:57:7d:7f:47:c4:77:1e:f5:7a:fd:
         3b:73:2c:aa:c3:05:a2:54:6f:28:08:fa:e1:a8:a6:dd:68:e2:
         6a:a1:fd:7f:b3:c9:0c:24:e0:f5:5d:a0:a9:29:b1:66:d1:9b:
         de:e8:ba:04
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEmnhL8aMWM1h4BpFYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk
YWQwMmY5OTEtMjE2NS00YjRhLTk5NzUtYzI4ODI1Yjk1Y2UyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/0cLkVhXFxrAa/Vlg332DCxREOttH243rl0
rgRRpyoC0jfjWSHRexwgZvj5cIOFtG5I703Csg/PETKv8DjgFl1Kb8ehSKZj+jd1
kZYyVM7pE5Qt0pmLkeHgqklf2Eb9kG36b3KrAu6RT9TlSxLooIytRhdw+QoztJFj
Y9UnvXwbB78c8GNdeR6sT2WL2EwgNyr8sDF+MpSHI/OfRfdxSyoM5zNg1fLQB0ME
97YGwGO2tRlrZHg3+pCjrtixLtO0p3fmrWy5331yTp/ll74jQG1cQjvtnOFc/u2W
i0vBHQiC9pTQ5tfZ4Byt5aSqcc1sdCxuOwOqnuhokOrxPxdPpQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFNTqa0IXnsFlbNdsrmVsEdRuVlpSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvODFlNTIxYjEtNzU2NC0z
MWQ1LWI3NzEtMDJhMDliMzU4OTU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujrAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAaHD2JbQPWE4LAxw6Oj+3jLT0MUUfytTh5it/ToLeAELo5VEuIcwi
mfoPbxrZCIH7o2GatOKKel/tYFRXGdKhkLx/BHtcop/jdlsj9yvj9kII+ZmIKS/E
qsOI+KyFcB7QPSzUDSfyxSQYjDPcbu9LqBFm7O7SvvkNT95Grzc+PJc+dIBVIjDW
p94b2ZZxG7f+DZoqiD7iZbrnJ/5pcHfhJJOSc6V3qhJb51YeHU28etbz9d90gVzr
NP3lNhHLzdMznJ9XQcYZIkn5nxK5sUVXfX9HxHce9Xr9O3MsqsMFolRvKAj64aim
3WjiaqH9f7PJDCTg9V2gqSmxZtGb3ui6BA==
-----END CERTIFICATE-----
Generated at Sun Apr 27 04:04:15 2025 by rpki-client