Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/05191253-1c5e-337b-b182-33f9fa75e30e.roa
File:                     05191253-1c5e-337b-b182-33f9fa75e30e.roa (raw, json)
Hash identifier:          vl7noXtaPRd/JDwDnHfclzAWKE2oO9QV2PxEXWxsKuA=
Subject key identifier:   F2:83:8E:AF:06:87:E1:C5:C7:B8:42:FB:1B:0A:59:D6:45:22:0F:A1
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F43285848B737B3EFF89401D8C11AA0A0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/05191253-1c5e-337b-b182-33f9fa75e30e.roa
Signing time:             Thu 30 Jan 2025 11:12:03 +0000
ROA not before:           Thu 30 Jan 2025 11:12:03 +0000
ROA not after:            Wed 30 Apr 2025 10:12:03 +0000
asID:                     30036
IP address blocks:        2604:2e8c:ec00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b7:37:b3:ef:f8:94:01:d8:c1:1a:a0:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jan 30 11:12:03 2025 GMT
            Not After : Apr 30 10:12:03 2025 GMT
        Subject: CN=d127398f-7edd-4bff-a85a-b8a37e9f8835
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:7d:d6:57:17:c0:b8:5b:fc:7e:4d:81:e4:59:
                    f5:0d:72:04:e8:e1:8c:67:48:89:2a:ec:e6:10:25:
                    c8:d7:47:ba:13:08:a4:63:25:ad:b0:68:6c:54:da:
                    35:96:19:a3:a9:28:38:56:21:e7:b4:3e:23:d2:31:
                    5b:32:ad:e7:b5:a7:da:cb:00:42:bf:86:66:05:ff:
                    10:0a:75:ca:f3:24:42:49:aa:a2:d9:bb:0a:3a:03:
                    8a:8f:69:9e:ef:2a:22:a7:66:63:90:a9:16:c4:5a:
                    74:c5:01:14:ef:b6:ae:22:40:f0:30:f6:b0:6a:79:
                    10:bf:44:47:43:91:3f:a5:d0:9c:05:54:1c:c3:76:
                    95:0d:ee:42:90:3d:18:58:2a:fe:b7:4b:c0:d9:9c:
                    42:3f:82:f9:d3:c9:5a:05:e0:d5:74:54:a6:07:92:
                    45:cc:38:31:26:ae:9f:6f:27:01:53:f2:c5:a3:bb:
                    e0:7f:73:6e:b9:f7:51:da:f4:85:ce:fa:66:8d:4c:
                    97:2c:42:58:66:fb:24:5b:fa:88:52:69:5a:1e:ec:
                    f1:6c:39:ad:e3:21:10:da:7f:fc:26:03:84:5b:55:
                    c8:31:1f:c9:8a:d8:04:4e:8e:12:82:6b:0e:eb:dd:
                    55:bc:3b:fd:58:96:cf:25:13:99:51:c9:41:90:b2:
                    b3:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:83:8E:AF:06:87:E1:C5:C7:B8:42:FB:1B:0A:59:D6:45:22:0F:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/05191253-1c5e-337b-b182-33f9fa75e30e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8c:ec00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:ce:a0:ce:b9:89:3b:d9:b4:e3:85:9c:ec:4d:cf:6f:54:8e:
         3a:20:53:05:3b:83:c1:1f:ba:72:ef:c6:af:d4:33:dd:e8:77:
         2c:cb:39:bb:ae:5d:be:77:16:4c:ca:5a:9b:53:fa:f2:c9:42:
         e6:65:55:ee:76:8c:35:77:3b:ae:20:c4:38:41:18:e3:91:3d:
         37:d7:14:82:8e:c2:81:a8:40:52:16:4a:d3:a6:26:7c:5c:a8:
         7b:c5:ce:44:e8:34:17:a3:52:1a:3c:2b:ad:d2:f6:66:c5:cb:
         2b:16:be:f3:d2:93:94:96:79:b5:54:bd:b4:c1:7f:a9:9a:9c:
         d2:e5:19:7b:e2:7e:dc:e3:2f:fc:e2:06:4f:11:59:cb:74:cb:
         a5:88:8e:d8:e0:8e:0f:79:1e:ed:07:8d:1a:2e:40:3b:e4:df:
         f2:d1:66:fd:d2:5b:09:6c:28:d1:45:78:ca:85:5b:4e:6e:64:
         1f:cd:88:84:af:6e:52:28:72:06:c5:ff:35:87:13:55:54:fa:
         58:91:c3:19:74:47:be:51:39:02:6d:f9:8c:74:0d:d9:7b:06:
         a5:c7:fe:12:2e:7a:cf:eb:30:77:c9:ad:a5:c8:1b:ce:82:d7:
         c6:55:fb:9e:4a:a3:a4:85:75:cd:ea:cb:fa:e5:50:28:09:74:
         7d:f3:fb:94
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEi3N7Pv+JQB2MEaoKAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI1MDEzMDExMTIwM1oXDTI1MDQzMDEwMTIwM1owLzEtMCsGA1UEAxMk
ZDEyNzM5OGYtN2VkZC00YmZmLWE4NWEtYjhhMzdlOWY4ODM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy33WVxfAuFv8fk2B5Fn1DXIE6OGMZ0iJKuzm
ECXI10e6EwikYyWtsGhsVNo1lhmjqSg4ViHntD4j0jFbMq3ntafaywBCv4ZmBf8Q
CnXK8yRCSaqi2bsKOgOKj2me7yoip2ZjkKkWxFp0xQEU77auIkDwMPawankQv0RH
Q5E/pdCcBVQcw3aVDe5CkD0YWCr+t0vA2ZxCP4L508laBeDVdFSmB5JFzDgxJq6f
bycBU/LFo7vgf3NuufdR2vSFzvpmjUyXLEJYZvskW/qIUmlaHuzxbDmt4yEQ2n/8
JgOEW1XIMR/JitgETo4SgmsO691VvDv9WJbPJROZUclBkLKzhQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFPKDjq8Gh+HFx7hC+xsKWdZFIg+hMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMDUxOTEyNTMtMWM1ZS0z
MzdiLWIxODItMzNmOWZhNzVlMzBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujOww
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAk86gzrmJO9m044Wc7E3Pb1SOOiBTBTuDwR+6cu/Gr9Qz3eh3LMs5
u65dvncWTMpam1P68slC5mVV7naMNXc7riDEOEEY45E9N9cUgo7CgahAUhZK06Ym
fFyoe8XOROg0F6NSGjwrrdL2ZsXLKxa+89KTlJZ5tVS9tMF/qZqc0uUZe+J+3OMv
/OIGTxFZy3TLpYiO2OCOD3ke7QeNGi5AO+Tf8tFm/dJbCWwo0UV4yoVbTm5kH82I
hK9uUihyBsX/NYcTVVT6WJHDGXRHvlE5Am35jHQN2XsGpcf+Ei56z+swd8mtpcgb
zoLXxlX7nkqjpIV1zerL+uVQKAl0ffP7lA==
-----END CERTIFICATE-----
Generated at Wed Apr 9 01:55:58 2025 by rpki-client