Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ee579e04-b10a-3d9d-b6ef-68ecf9696ded.roa
File:                     ee579e04-b10a-3d9d-b6ef-68ecf9696ded.roa (raw, json)
Hash identifier:          XhkUAarLYwITj4vPIA+9HIEekKz6AibdXdeKwBhnXtQ=
Subject key identifier:   71:03:0C:C9:B6:81:B6:8A:93:EB:7C:23:ED:A8:02:CF:DF:7C:68:39
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F43285849A1EF5FF9363D663FBB714D00
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ee579e04-b10a-3d9d-b6ef-68ecf9696ded.roa
Signing time:             Thu 24 Apr 2025 13:01:00 +0000
ROA not before:           Thu 24 Apr 2025 13:01:00 +0000
ROA not after:            Wed 23 Jul 2025 13:01:00 +0000
asID:                     30036
IP address blocks:        2604:2e88:dc00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a1:ef:5f:f9:36:3d:66:3f:bb:71:4d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Apr 24 13:01:00 2025 GMT
            Not After : Jul 23 13:01:00 2025 GMT
        Subject: CN=df016f93-09ad-4728-9381-56f703d5aa07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c1:93:6e:0f:20:78:5d:ae:78:31:b9:fb:b3:
                    9d:96:a2:63:2b:4c:9d:e0:fb:e6:65:c3:e9:cf:52:
                    6b:e8:6e:33:b6:81:77:df:46:ba:31:03:3d:5b:13:
                    0a:61:26:b3:aa:20:c2:bf:f6:03:a6:9d:f3:d5:3e:
                    24:3a:91:bf:aa:42:82:08:88:cd:fb:5e:29:84:11:
                    a7:1d:c4:f6:8a:9e:10:c2:2d:ae:e4:45:63:e8:4c:
                    71:66:52:07:4a:9e:5a:9c:94:76:96:1d:a3:4f:22:
                    16:d9:2c:01:6a:7a:00:e7:19:f0:c1:99:50:75:e8:
                    cc:55:60:66:2b:ae:40:66:5a:fe:89:cf:f4:a4:10:
                    2c:b2:cf:e1:7f:88:c4:bc:1e:c1:8c:1b:42:21:fc:
                    70:52:93:be:72:b2:de:30:69:b7:03:ee:13:17:d3:
                    87:5d:70:26:12:a7:a1:4a:d9:8b:8b:f1:16:f7:03:
                    72:9e:91:ef:be:58:00:67:dc:5f:60:67:db:05:55:
                    13:01:07:19:7a:59:6d:3b:c3:52:93:96:79:c7:aa:
                    81:c3:70:c9:46:58:82:1a:6b:43:7f:2b:f3:0b:87:
                    15:7d:2c:59:45:ca:42:a1:be:45:0d:d6:8c:79:78:
                    03:bc:8b:0a:1e:4e:1f:67:1f:5e:e1:26:c8:8b:3c:
                    d8:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:03:0C:C9:B6:81:B6:8A:93:EB:7C:23:ED:A8:02:CF:DF:7C:68:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ee579e04-b10a-3d9d-b6ef-68ecf9696ded.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e88:dc00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:8b:75:a3:75:ae:9b:e3:6a:cf:bc:08:6a:ec:8d:bf:f4:06:
         6b:b2:67:e2:d2:0f:58:78:f5:23:d2:cb:93:9a:4a:40:8e:9f:
         8d:ca:89:4c:4f:58:53:9c:04:1d:45:c5:85:3e:b5:24:77:f4:
         2a:80:82:a6:63:54:40:af:cb:94:aa:b2:4c:87:45:a2:97:0b:
         cc:27:5d:78:07:23:a2:f5:ef:81:5e:23:db:3b:97:11:f9:54:
         32:e5:39:59:d6:59:ec:80:6e:0d:7e:e6:06:94:d0:74:31:3b:
         7e:05:64:10:af:4d:ee:75:c4:a9:b3:c3:c5:46:06:65:01:63:
         7b:75:92:49:c8:b3:3e:c6:aa:d6:26:85:c1:59:b8:bd:b5:da:
         5a:56:c8:60:e5:d5:d7:9e:ce:50:2f:d3:6e:e4:cb:d1:e1:06:
         19:8a:27:65:94:f2:72:f4:cb:b8:97:a7:72:85:95:a2:b5:0a:
         49:ad:69:53:2d:15:c2:7a:52:8c:8e:6b:34:f6:9e:52:6c:d2:
         a7:c0:a3:ca:54:58:78:c8:e5:d3:bb:a8:26:4f:45:ef:19:a7:
         3d:85:f0:8c:4f:e5:60:75:da:1e:67:17:d6:14:24:67:0e:2a:
         3b:c1:15:ff:e3:1f:8e:01:29:c5:ef:24:ce:ef:22:45:77:45:
         2f:98:29:05
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEmh71/5Nj1mP7txTQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI1MDQyNDEzMDEwMFoXDTI1MDcyMzEzMDEwMFowLzEtMCsGA1UEAxMk
ZGYwMTZmOTMtMDlhZC00NzI4LTkzODEtNTZmNzAzZDVhYTA3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMGTbg8geF2ueDG5+7OdlqJjK0yd4PvmZcPp
z1Jr6G4ztoF330a6MQM9WxMKYSazqiDCv/YDpp3z1T4kOpG/qkKCCIjN+14phBGn
HcT2ip4Qwi2u5EVj6ExxZlIHSp5anJR2lh2jTyIW2SwBanoA5xnwwZlQdejMVWBm
K65AZlr+ic/0pBAsss/hf4jEvB7BjBtCIfxwUpO+crLeMGm3A+4TF9OHXXAmEqeh
StmLi/EW9wNynpHvvlgAZ9xfYGfbBVUTAQcZelltO8NSk5Z5x6qBw3DJRliCGmtD
fyvzC4cVfSxZRcpCob5FDdaMeXgDvIsKHk4fZx9e4SbIizzYSwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFHEDDMm2gbaKk+t8I+2oAs/ffGg5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvZWU1NzllMDQtYjEwYS0z
ZDlkLWI2ZWYtNjhlY2Y5Njk2ZGVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiNww
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEABYt1o3Wum+Nqz7wIauyNv/QGa7Jn4tIPWHj1I9LLk5pKQI6fjcqJ
TE9YU5wEHUXFhT61JHf0KoCCpmNUQK/LlKqyTIdFopcLzCddeAcjovXvgV4j2zuX
EflUMuU5WdZZ7IBuDX7mBpTQdDE7fgVkEK9N7nXEqbPDxUYGZQFje3WSScizPsaq
1iaFwVm4vbXaWlbIYOXV157OUC/TbuTL0eEGGYonZZTycvTLuJencoWVorUKSa1p
Uy0VwnpSjI5rNPaeUmzSp8CjylRYeMjl07uoJk9F7xmnPYXwjE/lYHXaHmcX1hQk
Zw4qO8EV/+MfjgEpxe8kzu8iRXdFL5gpBQ==
-----END CERTIFICATE-----
Generated at Sun Apr 27 05:48:10 2025 by rpki-client