Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c9c966b9-f540-3dbd-abdf-c02c2b2e7ad4.roa
File:                     c9c966b9-f540-3dbd-abdf-c02c2b2e7ad4.roa (raw, json)
Hash identifier:          j14qElIqahEyrcYH1TUqKDS3M6534rsweA5zNslKes0=
Subject key identifier:   B8:59:D1:2E:44:9F:D6:BC:43:99:CA:7A:3E:12:B9:13:D3:FD:36:6B
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584996C49B9CDA7E70B5F4B1EC00
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c9c966b9-f540-3dbd-abdf-c02c2b2e7ad4.roa
Signing time:             Sun 20 Apr 2025 13:01:01 +0000
ROA not before:           Sun 20 Apr 2025 13:01:01 +0000
ROA not after:            Sat 19 Jul 2025 13:01:01 +0000
asID:                     30036
IP address blocks:        2604:2e8c:d000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:96:c4:9b:9c:da:7e:70:b5:f4:b1:ec:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Apr 20 13:01:01 2025 GMT
            Not After : Jul 19 13:01:01 2025 GMT
        Subject: CN=7aba472a-e7f5-48a8-aa00-6bf9152f8706
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:4c:2c:d3:a5:38:a6:60:35:48:48:bb:34:d4:
                    f3:ff:e4:0b:8c:38:be:c4:9f:79:9c:0b:ff:8c:d0:
                    01:5d:af:01:cf:4c:73:97:e4:7c:c7:44:53:05:6b:
                    af:ec:11:eb:96:0a:d0:fc:ae:53:0e:b3:65:dc:13:
                    b6:a7:3d:d5:7b:98:2e:f2:56:33:ef:78:3a:01:46:
                    f1:07:e5:e8:d7:47:46:1c:b3:48:30:26:a3:e5:e6:
                    f5:5f:13:ac:a4:f2:7b:c4:ea:ab:bb:89:d2:9c:f5:
                    23:00:4b:5f:09:90:d8:1a:2a:78:3b:78:f2:a1:d1:
                    d5:26:68:5d:cd:d0:1e:79:7b:29:50:25:49:b7:27:
                    2e:8e:87:30:e3:05:b5:85:e7:5e:30:fd:76:14:e5:
                    0f:00:96:78:2b:25:e8:bd:64:8a:02:d2:ac:50:9a:
                    36:b1:1f:ab:3c:39:4b:bb:d6:73:46:fa:5f:bb:ff:
                    c5:7b:23:91:8c:a3:9d:a3:64:a1:5a:c0:50:54:04:
                    cd:8a:96:38:18:45:d4:54:e6:4c:84:b9:6b:d6:9c:
                    e8:c1:da:6e:2a:64:d8:ba:62:97:e2:5c:82:a0:e5:
                    15:88:c4:53:84:67:76:1f:58:42:ff:19:1a:71:b3:
                    ab:ab:e0:0c:82:50:c8:9b:64:be:82:4f:fb:c5:46:
                    de:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:59:D1:2E:44:9F:D6:BC:43:99:CA:7A:3E:12:B9:13:D3:FD:36:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c9c966b9-f540-3dbd-abdf-c02c2b2e7ad4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8c:d000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:28:50:5c:24:5c:e2:e4:e7:c8:d6:c6:d6:93:75:20:86:af:
         57:4e:01:50:57:26:fa:79:05:18:23:86:0c:64:38:14:90:6a:
         54:68:51:c4:d9:be:60:95:35:77:25:15:24:42:d4:11:ff:cc:
         2c:cf:f6:9a:13:e2:4f:01:f4:89:bf:03:7d:a8:15:c1:0a:27:
         71:97:8e:be:8e:7c:c8:b3:44:83:36:8f:4d:ea:21:2a:7b:e5:
         c7:94:42:5c:9d:70:fc:4f:1e:c7:e9:1b:aa:fd:1d:1c:c6:e7:
         37:6a:32:21:24:89:f3:5d:8c:e2:87:bc:fe:3f:98:2e:07:60:
         79:cb:ed:07:0a:3a:25:d2:1a:41:a7:2e:85:d6:85:2f:f3:23:
         f5:5d:71:0c:14:6f:37:da:bc:ed:49:01:ea:5e:9b:95:c0:66:
         02:99:be:7d:d2:e7:c9:00:83:b7:60:a9:97:6a:1f:cf:28:e4:
         32:e9:b7:9a:e3:49:23:f3:24:c4:4e:76:20:b4:4d:9a:1b:6f:
         ce:e5:2b:53:93:34:21:01:1f:fc:a7:e8:a4:98:3e:b3:f0:fd:
         7c:10:b3:f8:23:36:aa:ea:bb:de:46:54:c2:ef:f1:fb:d5:3f:
         3c:92:b4:83:2a:67:88:53:ba:83:67:04:fc:bc:c6:22:ee:cb:
         45:64:76:f9
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEmWxJuc2n5wtfSx7AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI1MDQyMDEzMDEwMVoXDTI1MDcxOTEzMDEwMVowLzEtMCsGA1UEAxMk
N2FiYTQ3MmEtZTdmNS00OGE4LWFhMDAtNmJmOTE1MmY4NzA2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Uws06U4pmA1SEi7NNTz/+QLjDi+xJ95nAv/
jNABXa8Bz0xzl+R8x0RTBWuv7BHrlgrQ/K5TDrNl3BO2pz3Ve5gu8lYz73g6AUbx
B+Xo10dGHLNIMCaj5eb1XxOspPJ7xOqru4nSnPUjAEtfCZDYGip4O3jyodHVJmhd
zdAeeXspUCVJtycujocw4wW1hedeMP12FOUPAJZ4KyXovWSKAtKsUJo2sR+rPDlL
u9ZzRvpfu//FeyORjKOdo2ShWsBQVATNipY4GEXUVOZMhLlr1pzowdpuKmTYumKX
4lyCoOUViMRThGd2H1hC/xkacbOrq+AMglDIm2S+gk/7xUbehwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFLhZ0S5En9a8Q5nKej4SuRPT/TZrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYzljOTY2YjktZjU0MC0z
ZGJkLWFiZGYtYzAyYzJiMmU3YWQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujNAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAKShQXCRc4uTnyNbG1pN1IIavV04BUFcm+nkFGCOGDGQ4FJBqVGhR
xNm+YJU1dyUVJELUEf/MLM/2mhPiTwH0ib8DfagVwQoncZeOvo58yLNEgzaPTeoh
Knvlx5RCXJ1w/E8ex+kbqv0dHMbnN2oyISSJ812M4oe8/j+YLgdgecvtBwo6JdIa
QacuhdaFL/Mj9V1xDBRvN9q87UkB6l6blcBmApm+fdLnyQCDt2Cpl2ofzyjkMum3
muNJI/MkxE52ILRNmhtvzuUrU5M0IQEf/KfopJg+s/D9fBCz+CM2quq73kZUwu/x
+9U/PJK0gypniFO6g2cE/LzGIu7LRWR2+Q==
-----END CERTIFICATE-----
Generated at Sun Apr 27 06:32:28 2025 by rpki-client