Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/913bda55-2441-389e-80e8-cc170d6aa63d.roa
File:                     913bda55-2441-389e-80e8-cc170d6aa63d.roa (raw, json)
Hash identifier:          l/OM5R8xccfUPTYFwQku8AWwQLEQMf/+M2p9SM/9UCo=
Subject key identifier:   B6:C5:0B:C1:63:61:FD:10:EF:6D:53:AB:C8:A6:2A:18:61:05:4C:E9
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F43285849A4BA37D3F7DBB8887CCFEE60
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/913bda55-2441-389e-80e8-cc170d6aa63d.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     30036
IP address blocks:        2604:2e89:6800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:37:d3:f7:db:b8:88:7c:cf:ee:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=beb7a536-10dd-42bf-b7e6-03e1b6b0a43e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:1c:a9:8e:9f:f7:e8:e6:57:1d:83:06:08:cc:
                    a7:18:6d:bb:26:e4:88:8c:ba:76:ef:0b:77:10:26:
                    a8:b1:26:94:7a:83:d5:eb:46:8a:3c:c9:97:15:ee:
                    e5:3f:88:58:9e:10:d9:6e:64:9a:84:3c:46:21:ff:
                    7c:83:c3:5d:8e:8e:4f:b7:ca:4a:f3:fa:95:3a:92:
                    f8:6d:e7:80:4f:8a:66:ab:75:32:95:e9:8c:fe:ba:
                    6c:80:00:01:e7:31:17:f8:e5:40:79:6f:3e:34:57:
                    44:15:9b:73:e1:37:37:2a:03:92:c6:09:a5:99:62:
                    0e:0e:2e:a3:fa:2b:8c:20:0c:79:f8:b2:93:38:ad:
                    a0:1d:ce:26:52:a1:ab:5a:a9:b6:96:fd:40:c3:6c:
                    bc:67:ad:cf:11:bf:b6:1e:9f:e4:61:24:94:c0:9d:
                    83:77:72:95:fe:0e:92:5d:bc:29:f1:c4:a3:65:1f:
                    a0:2b:e1:1c:e6:95:ee:ba:35:b4:e6:ec:46:d3:8d:
                    97:de:1e:30:f4:fc:6b:da:7e:00:b0:02:ce:a7:48:
                    7e:69:e9:ac:5d:72:15:9e:b5:17:9b:8f:b4:56:73:
                    17:16:ce:37:c7:96:e3:af:c8:8b:d0:3e:87:42:34:
                    8a:db:a8:47:bf:02:d2:78:3f:83:ca:c4:d4:2d:57:
                    07:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:C5:0B:C1:63:61:FD:10:EF:6D:53:AB:C8:A6:2A:18:61:05:4C:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/913bda55-2441-389e-80e8-cc170d6aa63d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e89:6800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:8a:15:ed:aa:59:7d:0a:b7:6b:57:1c:76:0e:3a:91:37:39:
         97:f0:0c:22:30:43:40:78:cd:48:1d:78:85:1a:55:7f:2d:9e:
         ac:99:f0:b8:60:16:2c:e2:6c:b1:48:35:66:97:46:91:84:ab:
         f2:58:e0:7c:7d:a8:06:98:48:de:8f:35:4d:b7:3d:32:24:6e:
         18:2e:fa:5f:ff:35:fd:71:d9:a9:f9:3f:62:a0:4b:57:4c:c4:
         35:6d:67:d7:e4:09:8e:56:bc:68:42:dc:0a:72:02:1c:58:98:
         33:8c:cd:7b:83:ab:42:cf:61:df:3a:d7:a8:6b:16:9e:19:c6:
         f4:90:9e:2f:5b:30:8a:4f:1f:cf:e2:fd:5a:60:08:b0:60:4d:
         80:dd:41:cb:93:f2:c5:83:ad:96:7a:88:25:82:d2:de:83:57:
         6e:f0:a3:9a:8a:49:a1:32:0e:55:62:58:22:36:54:cc:fd:cb:
         2c:05:db:f6:a0:b8:28:cf:88:20:92:73:03:03:fd:59:7d:0a:
         e9:9d:eb:07:12:f3:91:c4:a6:b1:2f:aa:55:85:50:43:77:9c:
         02:00:54:d6:d7:cf:a4:62:40:40:20:6c:30:f9:e6:28:64:a6:
         7c:3b:72:1f:4a:04:d7:88:24:2c:d4:3e:7c:94:9b:a8:c8:8b:
         46:38:72:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:19:52 2025 by rpki-client