Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d6a8f18b-5e76-3449-a876-a38c58d3808a.roa
File:                     d6a8f18b-5e76-3449-a876-a38c58d3808a.roa (raw, json)
Hash identifier:          ghlTUW4HOO7cz47fr6bgUVhUHSvZXHzrduSjr23nhCo=
Subject key identifier:   7E:22:19:00:6F:84:7C:49:A9:A7:8B:B0:C3:25:4A:6B:EE:69:0C:20
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F43285849A1EF61E932D176E86D91F620
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d6a8f18b-5e76-3449-a876-a38c58d3808a.roa
Signing time:             Thu 24 Apr 2025 13:01:00 +0000
ROA not before:           Thu 24 Apr 2025 13:01:00 +0000
ROA not after:            Wed 23 Jul 2025 13:01:00 +0000
asID:                     30036
IP address blocks:        2604:2e89:ec00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a1:ef:61:e9:32:d1:76:e8:6d:91:f6:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Apr 24 13:01:00 2025 GMT
            Not After : Jul 23 13:01:00 2025 GMT
        Subject: CN=748b6680-15cf-4dd7-aafe-5ae9da932352
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ed:42:12:f8:72:52:38:b5:06:73:a4:37:46:
                    e4:19:f2:ce:20:68:3b:92:da:29:44:9a:2d:52:8d:
                    37:ef:3f:2f:2b:a2:46:d4:12:4c:f3:0f:ef:c0:f5:
                    df:36:48:5a:f7:5c:6e:32:55:17:4b:3a:be:66:a2:
                    9f:3b:31:b4:e3:5d:45:3c:be:85:03:85:d9:69:f3:
                    49:0d:0e:8c:71:d9:f6:3c:c7:46:34:f7:a4:d0:e5:
                    58:65:14:d9:ba:9c:27:41:f5:33:0b:f7:f1:33:ad:
                    95:a7:d4:2f:89:64:e2:c3:68:5b:7c:0a:e0:40:38:
                    a2:6c:4e:64:47:95:e6:b9:21:d6:07:76:71:9d:1b:
                    a1:22:87:10:7c:46:ca:63:1f:2b:55:bf:da:ae:ed:
                    1a:04:ae:dd:81:8e:06:16:97:27:1a:50:d6:f7:83:
                    db:32:7d:be:e7:64:33:6e:c1:d4:06:b0:a2:81:e4:
                    1a:41:c2:07:21:31:02:23:c0:d1:51:c8:b3:9e:91:
                    34:57:12:c5:91:46:75:6a:70:7b:61:5a:04:3b:fe:
                    ea:b9:47:c1:3d:ab:0c:e0:ce:61:09:91:3c:ff:82:
                    5e:be:b8:38:81:55:d9:d3:a0:29:7a:66:19:25:b6:
                    42:f1:15:a9:8d:11:35:9e:8d:79:63:a6:ef:b9:25:
                    04:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:22:19:00:6F:84:7C:49:A9:A7:8B:B0:C3:25:4A:6B:EE:69:0C:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d6a8f18b-5e76-3449-a876-a38c58d3808a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e89:ec00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:23:1a:75:5b:bd:70:68:49:c2:ee:3e:5e:fd:d1:e6:d4:03:
         fc:18:25:3c:f8:8d:76:6d:90:b0:35:ca:54:cf:73:17:42:0f:
         be:3f:8f:02:7d:02:e2:c6:06:48:95:0a:60:94:85:63:66:fc:
         26:f2:6b:31:47:b9:99:73:bd:8d:03:5e:69:ae:38:4d:67:88:
         b1:73:64:f4:9c:2a:fb:52:09:90:dd:3e:f5:14:54:7f:06:45:
         15:4b:a9:bf:3d:72:99:a8:40:75:f7:11:50:ef:99:00:13:e1:
         59:2a:e8:cc:9e:fc:7c:4f:da:e0:54:e5:22:cd:b6:ad:89:f2:
         e3:5c:b7:c3:ce:70:41:ae:e9:7e:1d:ec:66:0f:2b:ea:44:a5:
         fa:68:17:48:9e:48:df:a8:a7:31:57:d7:97:3b:c2:49:08:1b:
         d2:00:34:b5:73:cb:9e:b8:a0:dd:bb:56:ea:1d:49:da:de:d6:
         49:47:4d:81:8c:7c:86:0f:90:5b:9a:8a:21:86:9a:a6:24:fd:
         2d:82:54:86:f9:b0:c2:32:b0:b3:80:62:f6:49:45:66:88:c7:
         ea:e8:3b:69:eb:dd:73:72:85:95:d6:92:e3:32:01:88:db:9b:
         f2:19:20:e2:24:62:fa:fd:2c:ef:7d:1b:b8:50:b1:3f:ca:a9:
         fa:aa:15:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:32:28 2025 by rpki-client