Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/e074d597-df42-3d46-b4ec-8e73dacfdb70.roa
File:                     e074d597-df42-3d46-b4ec-8e73dacfdb70.roa (raw, json)
Hash identifier:          J6Uy0F4uLTXQ/vkLJ1z2odjJPqdQ6JXAyfZuu4llXBA=
Subject key identifier:   C2:90:51:C4:42:FF:BF:77:0C:D0:F2:3A:CD:CE:42:20:DE:15:48:10
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F43285849A4BA46B54F0930313AD617E0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/e074d597-df42-3d46-b4ec-8e73dacfdb70.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     30036
IP address blocks:        2604:2e88:a000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:46:b5:4f:09:30:31:3a:d6:17:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=b955af70-2b67-4633-a88f-feb7a7d2459c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:99:67:f5:54:5a:f1:ff:8a:ca:e2:1d:53:9e:
                    51:db:d9:e7:9b:ff:fb:68:d3:5b:9f:84:53:f9:52:
                    e2:f9:69:ee:37:69:ce:c6:39:ed:80:42:d2:a9:ae:
                    7f:43:01:8a:40:91:c7:4e:83:25:e9:37:34:d0:23:
                    36:d5:e5:06:3f:3a:8e:26:02:ea:7c:aa:06:50:dc:
                    68:71:71:1a:f1:e5:4d:e0:64:fa:3a:17:f5:c9:1a:
                    80:62:51:83:8c:15:9e:aa:63:7c:a0:b7:25:ae:11:
                    e8:f2:4f:4d:47:05:5c:d9:b6:5a:ec:d9:6d:c1:80:
                    b5:08:45:da:a2:09:66:9d:da:94:60:37:b0:b3:6d:
                    96:f1:b2:c7:55:38:8f:25:b8:d1:bb:ed:6b:4f:c2:
                    22:bb:58:be:41:1f:ca:f8:39:d8:0b:d2:f0:ec:48:
                    a4:34:cb:31:39:14:43:0a:0c:3e:65:7a:9c:7f:37:
                    43:f5:ce:c6:cf:c3:d4:18:83:70:a4:22:06:79:e2:
                    37:48:8c:0c:8c:ac:4c:da:c3:ac:a6:90:d8:7f:97:
                    91:da:ff:4b:e2:ba:6a:fb:9f:a8:3e:16:01:e4:49:
                    bf:df:7d:e2:f7:51:c6:bc:55:09:fa:0a:55:18:61:
                    55:b7:4a:db:64:91:51:8f:e6:75:31:6f:bf:2d:bd:
                    e8:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:90:51:C4:42:FF:BF:77:0C:D0:F2:3A:CD:CE:42:20:DE:15:48:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/e074d597-df42-3d46-b4ec-8e73dacfdb70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e88:a000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:a7:b5:b7:fc:7c:3e:ba:d4:88:44:0a:58:d3:7e:5d:2b:be:
         1d:b7:ce:6c:c6:50:2a:18:90:c9:a3:b7:47:eb:d4:a6:f3:f3:
         d6:05:12:82:f7:c8:30:20:73:f7:42:9a:23:b2:f4:b6:b7:14:
         0a:3f:25:47:02:d2:61:13:66:37:58:01:fb:7b:06:d5:1b:73:
         df:88:bf:af:29:67:36:f7:c4:70:a7:d0:f2:b0:5a:b3:c2:a0:
         2c:3d:8e:b6:72:e4:a3:d1:2e:49:9a:09:e5:05:3f:7b:00:27:
         a1:83:ff:69:ff:71:93:5f:7a:01:f5:7b:13:0b:5b:a3:45:9c:
         f9:0c:1c:86:2a:ed:16:12:78:c7:40:3e:f9:fe:59:31:c6:90:
         18:df:c1:9a:d1:13:4d:36:1e:fd:1c:d3:b3:03:4d:32:06:f6:
         00:4b:97:a8:2f:04:f5:d4:9e:69:2f:de:e8:fd:f7:df:2d:c7:
         ed:d5:17:88:65:7e:22:7f:48:1c:4a:b4:f2:e7:75:c1:3b:77:
         11:f8:12:2e:86:55:70:3f:b5:21:dd:94:ce:4a:ed:67:ec:12:
         15:59:27:09:04:05:86:d8:47:1a:e2:2b:03:6c:86:f2:8d:5e:
         ed:ca:9b:c8:a2:f5:b6:33:bd:9c:bd:fc:e0:86:13:08:f2:aa:
         4f:5b:b7:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:06:25 2025 by rpki-client