Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/00c90f4e-23f6-3e45-9d0e-84d0937f4bce.roa
File:                     00c90f4e-23f6-3e45-9d0e-84d0937f4bce.roa (raw, json)
Hash identifier:          7q58Gk2oBMWrjTTqp3zXqxy7UVzl2T22wXwRrTsClYQ=
Subject key identifier:   35:F3:10:DD:98:F8:48:0F:7D:7C:F5:EF:DD:91:42:DB:E0:3F:7C:8F
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F43285848C5346749069E2DDF26B40F00
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/00c90f4e-23f6-3e45-9d0e-84d0937f4bce.roa
Signing time:             Tue 04 Feb 2025 11:26:43 +0000
ROA not before:           Tue 04 Feb 2025 11:26:43 +0000
ROA not after:            Mon 05 May 2025 10:26:43 +0000
asID:                     30036
IP address blocks:        2604:2e8a:f400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:34:67:49:06:9e:2d:df:26:b4:0f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Feb  4 11:26:43 2025 GMT
            Not After : May  5 10:26:43 2025 GMT
        Subject: CN=94843f89-c3e0-4afd-ad34-be6857395ed7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:9a:bf:e9:99:2f:09:21:7b:48:cc:58:41:db:
                    49:09:54:19:ae:77:c7:b7:66:59:1f:d8:52:ef:9b:
                    71:be:9f:2a:93:88:b2:6d:f0:29:e0:09:72:b8:c6:
                    85:68:78:94:6d:a5:d5:40:6b:3f:81:ad:aa:b4:b4:
                    41:64:62:73:97:3e:10:86:8d:ad:a3:f2:01:2f:16:
                    e5:37:4a:58:36:47:25:22:a2:7e:bd:3a:95:aa:9a:
                    a3:75:76:de:a6:8e:db:8b:a8:76:4e:a5:09:2a:ab:
                    9e:8d:0a:2b:9a:30:a5:3b:0b:fa:97:1f:4d:61:37:
                    3e:d6:27:38:fb:7d:a1:ca:40:b0:78:22:26:8f:c2:
                    fa:63:69:ab:2c:f8:c7:3b:d4:63:35:1e:a5:66:32:
                    7c:14:dc:4d:e4:83:9b:89:9c:31:b4:cd:78:77:22:
                    cd:78:43:ef:c1:12:9d:24:71:d4:a6:fb:05:80:b6:
                    b7:6d:df:94:65:e6:ab:ef:0f:58:01:f7:64:58:91:
                    95:a4:28:d5:aa:73:c8:14:3d:75:ac:b3:52:e6:6c:
                    68:13:b4:88:88:28:12:e4:14:e7:26:7d:79:d6:0e:
                    f8:0c:29:4f:32:f0:55:30:82:d0:e7:89:26:90:5f:
                    46:2b:2d:d1:b9:2b:9a:da:e7:c0:83:39:17:da:4a:
                    cb:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:F3:10:DD:98:F8:48:0F:7D:7C:F5:EF:DD:91:42:DB:E0:3F:7C:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/00c90f4e-23f6-3e45-9d0e-84d0937f4bce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8a:f400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:bc:b4:74:89:38:86:c0:5a:ff:c2:5c:aa:6b:b7:c3:f3:31:
         d5:e8:d6:48:0a:83:ff:e3:c8:44:1d:13:da:67:a4:76:d1:0e:
         8a:d1:b3:13:0d:26:c3:3d:fe:cf:f7:dd:14:cc:02:fc:f1:3b:
         71:89:6d:c3:e2:aa:43:28:b6:2e:78:f1:49:5e:42:d9:25:9a:
         95:76:36:a2:70:98:7a:56:ab:62:6b:ed:2c:4d:e0:ef:cf:31:
         1e:a5:ac:6d:5e:c4:6d:c0:59:95:3c:51:ea:69:bc:8f:35:12:
         f8:3c:7f:3e:d8:e1:aa:bf:19:aa:ba:86:db:2b:9d:c9:f4:d0:
         4c:d1:08:7b:a6:59:11:85:31:2a:1e:1e:e2:08:b7:da:27:32:
         0b:05:07:59:ea:ab:30:93:7d:f9:48:8f:20:38:f2:60:d7:f1:
         e8:38:77:32:6e:c9:cb:ff:63:f0:f4:31:2c:c0:cb:c6:e2:66:
         4f:91:97:52:da:ca:10:a4:e7:89:f1:4f:0a:45:73:52:79:81:
         71:e0:dd:e2:99:4d:c9:b7:a1:d2:bd:78:6b:0e:3d:b8:69:78:
         1a:91:e3:71:4f:76:61:5a:11:8d:86:f9:ef:84:e6:5a:d9:99:
         38:26:e5:e8:5a:bc:b3:cc:5c:03:59:e0:2b:d4:e3:63:2a:f6:
         e1:a3:3f:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 09:29:07 2025 by rpki-client