Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0d96436f-1071-382a-9550-6b47da5a5562.roa
File:                     0d96436f-1071-382a-9550-6b47da5a5562.roa (raw, json)
Hash identifier:          yo2ptxM+WK7L9tUzPEIJ7L3cHb7fvEgMORXyC2wc8C4=
Subject key identifier:   BB:95:A1:ED:FF:14:A5:31:DF:64:80:CE:95:8C:36:D0:EF:87:1F:A8
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F43285848C2652CFCA74FEE33D86C64C0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0d96436f-1071-382a-9550-6b47da5a5562.roa
Signing time:             Mon 03 Feb 2025 11:17:34 +0000
ROA not before:           Mon 03 Feb 2025 11:17:34 +0000
ROA not after:            Sun 04 May 2025 10:17:34 +0000
asID:                     30036
IP address blocks:        2604:2e8e:cc00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c2:65:2c:fc:a7:4f:ee:33:d8:6c:64:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Feb  3 11:17:34 2025 GMT
            Not After : May  4 10:17:34 2025 GMT
        Subject: CN=cc1dd119-314a-4946-8eba-c0eb6c4aab60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:25:7e:ea:39:8b:f8:82:fd:75:fe:2a:79:a2:
                    73:6e:79:74:59:fc:46:f1:94:0e:ba:fa:d1:2e:b1:
                    0a:f0:9b:7d:5a:97:65:2d:e2:d4:1b:c6:af:73:dc:
                    95:5e:13:3d:8e:54:18:f7:d8:c4:d6:b7:66:cc:2a:
                    96:f0:e2:5f:84:e6:91:f6:4b:94:ed:ac:ca:0a:c9:
                    46:2a:a0:3e:46:af:44:70:59:09:0f:30:c5:7e:ec:
                    ec:b2:89:d9:71:92:0c:52:0b:64:a8:f6:4e:06:fa:
                    fa:c5:0c:09:08:3e:fb:37:45:a6:f8:07:7d:8a:43:
                    20:5c:03:38:46:20:45:d9:ea:f4:0a:02:52:7f:16:
                    f3:fa:25:d7:c9:ab:a2:20:2f:f9:ed:95:45:f1:ba:
                    e9:3d:85:20:ab:da:7d:39:af:d8:69:6d:0a:ee:f8:
                    5c:f0:23:42:04:b6:06:c6:21:38:cb:f9:77:e8:44:
                    2f:c3:d0:61:75:25:8d:0d:ab:b1:34:35:53:e7:55:
                    1e:8b:18:c7:35:0e:00:80:d4:9f:f0:61:78:32:03:
                    42:8f:1a:59:93:74:03:1b:5b:45:aa:e0:d9:a4:00:
                    9a:ea:00:50:a1:ea:16:b5:c0:34:05:68:f3:23:46:
                    9a:eb:8e:cc:d6:9e:91:4a:a3:bd:1e:09:9f:d4:e0:
                    c9:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:95:A1:ED:FF:14:A5:31:DF:64:80:CE:95:8C:36:D0:EF:87:1F:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0d96436f-1071-382a-9550-6b47da5a5562.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8e:cc00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:2e:7b:89:f5:3c:3f:25:98:45:cf:70:6a:96:6f:d5:a4:2e:
         35:bb:a7:9a:5b:cc:a4:fc:8b:95:a2:d2:ae:ab:6c:c4:d8:5c:
         a9:43:bf:06:d7:90:01:24:16:4d:cb:a3:6a:e6:35:76:0b:88:
         46:a2:e9:ae:6a:82:70:f1:9a:99:10:68:e6:d0:5d:8f:e5:e3:
         c7:f1:90:85:a2:19:1e:0e:0f:d2:18:d4:39:f6:48:35:e9:35:
         8f:09:c5:06:6b:d5:aa:97:c5:cb:3f:b6:d6:b4:03:33:e5:1e:
         26:16:b4:9b:79:5f:80:95:9a:76:92:4b:22:f2:80:c7:41:6c:
         3f:3d:ed:59:dc:c9:da:da:8a:54:d3:14:88:32:ed:15:d1:9b:
         b5:a4:e9:83:e9:e8:0f:1e:39:a4:74:e2:fb:59:14:fa:55:16:
         39:d8:14:51:d3:7d:05:24:28:b4:19:ba:2e:f3:82:3e:f1:be:
         c6:98:6c:3e:9c:3c:16:62:50:ef:0c:5f:36:04:98:91:64:0a:
         b9:1e:31:8b:db:28:25:ed:1d:82:4c:53:74:33:88:31:bb:c3:
         a4:e1:ad:ba:64:7f:dd:2b:6f:e5:b3:69:bd:9e:ae:2d:83:66:
         85:9a:61:08:5c:b5:26:44:ac:8d:ec:23:c2:19:97:43:f2:06:
         2e:da:b0:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 05:24:00 2025 by rpki-client