Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/e8e29b26-9e2e-350c-ae56-93222c4f9c8b.roa
File:                     e8e29b26-9e2e-350c-ae56-93222c4f9c8b.roa (raw, json)
Hash identifier:          DfCCtiXbQxeBgd8SirvDMX3JjcqpXapvgqlSMYYwPlc=
Subject key identifier:   90:9B:0E:56:12:64:45:67:CB:E6:DB:8C:D8:F4:2A:A1:2C:B7:49:FC
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F43285849A1EF606CAD2C30454135C900
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/e8e29b26-9e2e-350c-ae56-93222c4f9c8b.roa
Signing time:             Thu 24 Apr 2025 13:01:00 +0000
ROA not before:           Thu 24 Apr 2025 13:01:00 +0000
ROA not after:            Wed 23 Jul 2025 13:01:00 +0000
asID:                     30036
IP address blocks:        2604:2e89::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a1:ef:60:6c:ad:2c:30:45:41:35:c9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Apr 24 13:01:00 2025 GMT
            Not After : Jul 23 13:01:00 2025 GMT
        Subject: CN=31dc9be5-2ae4-440e-9f13-761479e0e81a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:2c:53:42:ec:dd:d8:8c:b6:0e:0a:ac:d2:aa:
                    f6:fa:66:93:e9:5d:73:db:9f:d3:1f:4f:11:26:99:
                    8a:a9:15:cf:50:cc:ce:32:bd:8c:91:23:21:d9:76:
                    ee:d8:5f:4a:ee:c8:04:ab:95:95:2c:a6:72:d8:d3:
                    8a:15:fc:0f:76:f9:fe:96:20:12:fa:eb:49:e5:09:
                    c7:72:6c:06:4c:dc:79:f1:37:fa:48:89:34:b5:dd:
                    9e:52:14:d1:0c:42:2c:5a:5f:45:8d:d6:43:3f:ca:
                    27:d1:bf:9a:84:1e:a7:9a:3b:55:f5:e1:55:d5:1b:
                    f6:df:0b:95:b6:b5:fa:18:c5:ea:5b:a6:e6:ae:73:
                    5c:22:06:34:65:ea:4e:77:38:8c:b7:c6:a0:5f:20:
                    c1:49:21:ff:55:ce:84:0d:42:46:d3:2a:23:52:bb:
                    88:93:38:0f:84:1d:e7:4b:76:4d:c1:03:2d:07:c6:
                    63:41:20:fa:06:a0:b9:4b:93:e7:ec:89:a8:da:f2:
                    19:51:7d:da:f3:42:2c:a5:d1:19:d4:4e:c7:0f:1a:
                    4a:70:24:50:dd:10:b6:c7:ab:86:dd:30:23:c0:bf:
                    28:3d:cd:b6:f4:3c:01:51:02:23:5b:29:da:25:d3:
                    5c:1f:a6:32:e2:7a:b7:16:43:a9:13:a3:2d:3c:89:
                    aa:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:9B:0E:56:12:64:45:67:CB:E6:DB:8C:D8:F4:2A:A1:2C:B7:49:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/e8e29b26-9e2e-350c-ae56-93222c4f9c8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e89::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:11:8e:10:98:a7:30:3f:51:50:e8:7c:33:bb:f4:c4:1f:a3:
         27:bd:56:3f:f5:0d:d7:03:48:e5:e4:77:ca:e0:e2:8a:73:84:
         79:1c:9f:eb:48:27:fb:9f:b8:3a:72:b0:01:48:de:78:d6:e7:
         66:8b:70:a5:b2:98:2b:87:9c:8e:2e:1c:65:56:c5:1e:d9:ae:
         bd:d7:0e:49:05:2a:f9:f9:4a:ac:d2:e5:83:27:04:d0:d3:61:
         9d:8d:fa:4a:1d:51:c7:79:f8:de:51:48:fe:ed:f1:f7:2e:fe:
         20:47:e2:76:fc:37:1f:57:20:34:45:6c:76:11:6d:d3:ab:65:
         f1:13:42:7a:24:20:61:02:b9:21:5c:45:5c:ce:56:8f:85:5b:
         59:3e:b4:5c:7c:c0:c0:e0:40:a7:c9:b9:bb:cd:6c:b6:6c:23:
         1f:9a:80:c1:8c:71:cd:f8:bc:5b:ce:f1:54:7b:24:1b:f8:8b:
         98:33:cb:a8:fa:b1:c6:c7:64:60:7e:64:b0:e6:ee:1a:b8:dc:
         1f:f7:b4:65:ab:63:23:80:33:ce:8c:9c:ff:f7:84:ff:1f:57:
         03:fc:96:84:82:ba:85:60:83:63:ba:20:1a:a1:a0:5a:be:c3:
         da:de:46:17:18:7f:f5:5d:1d:92:2a:b8:a3:6c:8f:3b:c8:ae:
         24:7e:36:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 02:18:19 2025 by rpki-client