Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/fca43530-5049-3e32-a93f-9ae5f61e8b35.roa
File:                     fca43530-5049-3e32-a93f-9ae5f61e8b35.roa (raw, json)
Hash identifier:          I8Xskm/DwI8dT8HgGqyI1E49DLjaIA30U07ZjE02gNg=
Subject key identifier:   97:A4:5D:61:87:67:28:AD:8D:28:81:7F:F6:1A:40:81:28:C9:1C:54
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F43285849A1EF5FE7D567F6C931E16960
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/fca43530-5049-3e32-a93f-9ae5f61e8b35.roa
Signing time:             Thu 24 Apr 2025 13:01:00 +0000
ROA not before:           Thu 24 Apr 2025 13:01:00 +0000
ROA not after:            Wed 23 Jul 2025 13:01:00 +0000
asID:                     30036
IP address blocks:        2604:2e88:c800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a1:ef:5f:e7:d5:67:f6:c9:31:e1:69:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Apr 24 13:01:00 2025 GMT
            Not After : Jul 23 13:01:00 2025 GMT
        Subject: CN=39f2f73e-7c22-4c84-aa3c-add2084e83ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:3b:d8:20:4c:29:fc:12:5b:7d:be:6d:09:ad:
                    26:55:6e:f8:fa:a2:25:09:e9:c9:e2:62:52:cf:8d:
                    10:03:d5:bc:17:68:bf:95:6b:de:df:66:72:80:e8:
                    af:7e:11:16:e3:ed:f7:9f:5f:2f:82:8c:5d:18:69:
                    5b:56:1f:33:36:32:83:38:92:80:29:47:70:54:5b:
                    7b:7a:07:33:d5:93:fb:dd:38:38:cc:ac:6a:00:8d:
                    53:7b:0e:2e:03:5f:60:59:6b:c3:43:74:2c:c3:b9:
                    15:ec:ca:54:1f:5c:2c:05:3e:33:d3:4c:b4:1c:35:
                    bd:a5:70:38:2a:fa:f9:4d:48:c9:d4:e2:d4:0c:89:
                    bc:76:78:a7:a4:39:2c:c5:e5:80:44:82:39:c4:45:
                    e7:4e:15:11:7f:0b:a2:38:39:02:8d:00:03:25:9d:
                    4e:ec:d1:24:80:3f:ae:23:42:7a:e1:ad:74:1d:77:
                    90:6e:c0:1b:1c:75:e4:31:b5:36:24:ce:f4:4b:62:
                    af:12:56:59:ae:33:4d:d6:fa:fa:94:a3:43:e9:b7:
                    1a:46:13:33:95:04:95:b8:1f:52:a2:c7:94:58:dc:
                    5b:e8:09:c0:fa:69:83:14:e9:6e:6a:c0:72:2c:c0:
                    e6:df:97:3f:b4:65:8b:2f:36:18:aa:61:21:3e:4c:
                    cf:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:A4:5D:61:87:67:28:AD:8D:28:81:7F:F6:1A:40:81:28:C9:1C:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/fca43530-5049-3e32-a93f-9ae5f61e8b35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e88:c800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:2b:1c:a9:3c:b4:b7:be:9a:71:02:18:18:f7:c8:e1:80:ad:
         8a:51:27:85:b9:08:1c:c8:59:5b:63:61:62:a7:f7:40:4e:8d:
         bb:d8:36:d8:8e:3d:8c:44:48:56:6e:19:17:6c:92:21:82:0e:
         8b:94:fb:10:da:d6:e1:95:51:56:a6:54:e3:8a:bc:49:6b:8c:
         59:29:10:00:a6:65:e0:05:bd:88:ad:2e:59:71:13:85:0f:0f:
         f2:f1:e1:7d:34:84:0a:fc:19:6f:d7:78:8c:46:f2:8c:74:97:
         5c:66:bf:5c:db:fc:05:d4:7d:df:e2:c5:88:8e:97:99:ef:7c:
         84:75:27:bc:f5:23:b1:f6:56:23:84:c6:b3:d9:70:9f:94:df:
         d0:2f:f7:4f:d1:10:12:e5:61:16:c4:20:72:d0:82:b2:87:93:
         37:23:bb:ae:51:e5:14:53:b2:f9:92:83:00:5d:86:c0:8f:82:
         7d:71:61:2b:6c:3c:db:a8:4e:cb:4d:29:b3:70:fa:d8:23:4d:
         75:61:76:cd:96:d5:90:8b:9a:d2:76:bb:6b:58:6d:a5:60:87:
         30:2e:10:b5:b1:eb:b7:f4:47:75:e5:61:4d:0f:2c:b6:b3:6d:
         f6:ae:75:3f:73:d3:65:f9:f6:c1:3a:5b:31:fe:ee:7e:1e:85:
         d7:ce:9d:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 16:10:34 2025 by rpki-client