Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c93276f3-bdb7-39ef-b930-572ff1aeffe5.roa
File:                     c93276f3-bdb7-39ef-b930-572ff1aeffe5.roa (raw, json)
Hash identifier:          7JSiDavG11EGc9j3oIzbJTWcNuqCCuViWxm9aHIpOk4=
Subject key identifier:   9F:07:72:88:DA:06:0D:4A:54:AF:DF:76:E3:15:25:F4:3E:CB:8A:BC
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F43285849A4BA21EBF8DC0953417A5400
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c93276f3-bdb7-39ef-b930-572ff1aeffe5.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     30036
IP address blocks:        2604:2e8c:3800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:21:eb:f8:dc:09:53:41:7a:54:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=22d01925-b486-4a75-9755-eda157c8f3c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:83:e7:13:bf:06:f6:bf:cf:f9:3d:1a:9c:56:
                    19:2e:0c:ea:19:b6:cd:77:7c:fc:65:d7:d4:f0:ad:
                    62:32:96:34:b5:f8:e4:bd:2b:b3:3e:86:c9:3d:68:
                    f3:18:33:2d:b1:7d:f1:1a:52:a3:99:9f:20:41:2d:
                    38:75:da:d8:29:61:ae:0a:b1:2e:c9:6d:72:a8:b8:
                    bf:c9:80:b7:47:ea:13:37:4b:59:95:59:3a:3f:e0:
                    f7:f6:18:18:e9:93:d2:22:ec:f8:d5:a2:21:21:42:
                    23:14:62:67:23:ad:a0:7c:b7:dc:d4:96:93:57:76:
                    7a:ba:fd:9f:6d:e9:23:86:e8:1e:b3:fd:52:40:96:
                    75:dc:a6:d1:69:38:2c:62:a9:12:a5:96:aa:e4:94:
                    3f:ab:1e:11:18:bb:8a:1c:b7:f7:13:09:e7:4e:d3:
                    f0:56:8d:9a:2d:8d:37:70:92:da:f9:ef:42:88:88:
                    22:8f:c3:bc:ec:a4:8f:08:c7:b0:59:bd:6b:95:72:
                    76:53:7e:23:2a:b2:f3:82:2a:af:f1:7b:5e:7d:f1:
                    6d:2f:4b:4e:86:f1:26:b6:46:72:bb:dd:3a:e9:82:
                    3a:e7:1c:31:4c:60:ef:34:17:4f:6c:2c:1b:d3:a0:
                    09:4c:97:d8:8d:ca:de:3f:91:8e:b5:05:e6:44:95:
                    2f:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:07:72:88:DA:06:0D:4A:54:AF:DF:76:E3:15:25:F4:3E:CB:8A:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c93276f3-bdb7-39ef-b930-572ff1aeffe5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8c:3800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:e2:8a:09:bf:fb:7f:89:8b:33:e4:24:ad:30:1d:0c:2d:e3:
         42:51:c8:92:4b:f3:0c:81:8a:c2:f6:7d:3b:39:e4:2a:30:62:
         77:73:e5:3c:51:c7:80:22:30:45:b1:98:42:e0:1b:ac:64:67:
         64:c1:05:35:a7:6f:c2:4f:56:d2:51:bc:8c:8c:30:75:4b:a5:
         99:2a:77:78:92:61:a3:6c:30:d1:9e:41:c9:2c:d9:11:3e:dc:
         f6:00:86:00:63:96:58:b9:4d:11:67:44:9e:ad:96:79:60:dd:
         63:a3:40:3c:cd:ca:57:ec:b6:c8:29:ee:b1:51:e5:6e:4b:ee:
         f4:68:e6:71:6a:d1:b6:a7:65:7b:1e:fd:e0:44:c3:7c:59:89:
         0e:50:52:e3:03:9a:1e:52:9d:26:74:72:5a:c2:f4:9f:ef:f3:
         12:ed:88:a5:d7:f0:41:9e:4e:f8:9b:e1:dc:c3:c8:3d:b1:bb:
         fd:5e:95:07:b6:b9:b4:09:8d:8d:7e:c2:18:82:72:33:4e:68:
         b2:cf:3b:74:0a:62:33:76:d5:f1:7b:58:39:90:cd:1f:54:d8:
         10:7f:74:67:33:60:c0:e0:a0:55:f2:97:33:18:58:e5:0f:9e:
         c9:56:2d:c4:77:58:89:91:32:78:80:1b:8b:10:ba:ed:0b:ee:
         3f:74:b2:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 03:57:33 2025 by rpki-client