Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/046cf5fb-866a-3acd-b80a-0fee0c90c9e2.roa
File:                     046cf5fb-866a-3acd-b80a-0fee0c90c9e2.roa (raw, json)
Hash identifier:          tZ+EssCMCv6VwG6zQOWn2XviCzRIu7Mfl5pTWbX5S40=
Subject key identifier:   D0:9C:A7:81:E0:E9:C5:78:76:07:A5:49:33:10:8E:B9:FF:D2:5B:78
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F432858493B69A2C922A731EAA02C8B00
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/046cf5fb-866a-3acd-b80a-0fee0c90c9e2.roa
Signing time:             Tue 18 Mar 2025 19:39:22 +0000
ROA not before:           Tue 18 Mar 2025 19:39:22 +0000
ROA not after:            Mon 16 Jun 2025 19:39:22 +0000
asID:                     30036
IP address blocks:        2604:2e8d:4800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:3b:69:a2:c9:22:a7:31:ea:a0:2c:8b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Mar 18 19:39:22 2025 GMT
            Not After : Jun 16 19:39:22 2025 GMT
        Subject: CN=0fbb51e6-21c6-45a6-8f80-600a3cc8d455
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:dc:65:62:79:30:b8:5a:33:41:6e:fb:e6:fe:
                    70:b1:03:78:1f:a5:20:ad:ea:ab:1b:2a:82:1c:3b:
                    86:50:00:ad:5f:d8:b7:6f:86:3e:11:ed:62:3c:aa:
                    85:e4:47:52:e6:b7:ff:43:79:ad:e3:5a:c6:21:8f:
                    da:38:4b:7e:50:01:ab:b3:f3:64:46:6f:54:02:63:
                    ce:17:93:50:12:69:74:27:46:a3:bd:6f:78:ea:8c:
                    0f:c5:f4:7f:ed:f5:33:b6:2a:e9:61:15:10:bb:ce:
                    8c:f6:6b:65:e1:08:59:7e:3e:4e:74:91:97:b8:1b:
                    35:d8:d8:34:a1:39:0c:b9:a3:3a:56:09:f1:d2:06:
                    df:e0:ce:91:01:2a:f4:f4:dc:6e:34:d2:db:b7:15:
                    7b:eb:d7:ab:b9:45:de:5b:a7:70:07:74:c1:a4:43:
                    c5:0b:d4:b1:b6:59:56:a1:7e:25:e9:19:df:ff:03:
                    a4:ad:81:89:a1:72:67:46:1c:c2:1f:66:b1:8a:86:
                    e1:3e:34:ee:1b:4f:e3:56:b1:9b:57:3e:c9:03:6e:
                    33:f3:04:8e:07:a8:bd:a0:e3:04:15:44:fb:2b:39:
                    ba:d1:96:66:85:84:a4:d4:82:7a:ad:c8:d6:c3:11:
                    19:74:62:41:fb:db:1a:d3:46:22:5a:c7:77:8a:56:
                    f0:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:9C:A7:81:E0:E9:C5:78:76:07:A5:49:33:10:8E:B9:FF:D2:5B:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/046cf5fb-866a-3acd-b80a-0fee0c90c9e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8d:4800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:c1:45:26:e5:11:d5:ec:56:74:69:b0:8b:d7:f1:47:36:22:
         80:4e:a3:76:98:6f:e4:6a:90:47:32:75:f3:f6:d1:e2:20:b8:
         5c:92:f3:54:b2:3a:92:e3:0b:78:26:6a:2c:28:bb:8f:1e:63:
         28:d5:6b:31:34:26:3e:0f:58:d2:c6:51:f2:14:60:c7:4f:93:
         8d:67:7e:0c:66:54:a0:dc:27:74:87:5f:e6:a8:25:1c:4d:0e:
         8a:4a:f5:33:dc:5b:2b:f6:6b:2e:52:89:4b:cc:78:50:f0:ef:
         ae:c9:4d:0b:f4:fa:84:11:fb:d2:d0:bc:34:51:0f:e6:e7:f2:
         4f:43:36:98:1e:ab:fc:09:b1:cf:d2:a7:72:cd:7d:9a:b9:ed:
         40:d2:e6:aa:bb:46:d1:3a:7f:e1:1a:03:1c:25:ff:33:0d:23:
         05:8c:6e:df:8e:21:4b:24:32:30:95:89:be:10:98:b3:a4:7a:
         86:6f:9c:33:75:7c:41:7c:5f:d3:c1:60:4a:30:84:5e:ec:bf:
         c0:1f:fe:b4:11:88:84:16:11:7c:73:8e:d6:33:08:f6:81:94:
         a7:ab:9f:c3:09:20:37:c0:5f:98:3d:b5:4e:5d:75:2d:fe:34:
         98:f9:93:16:a1:6a:2a:c2:8e:34:32:b5:e6:c4:c5:7f:1f:df:
         ef:6b:e3:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:48:47 2025 by rpki-client