Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/229aa618-e791-3a56-9b12-73e308d2db33.roa
File:                     229aa618-e791-3a56-9b12-73e308d2db33.roa (raw, json)
Hash identifier:          elEkOD7t3QU7gfnkx0tSvTo9JEDvccoCnMVvhiwys3I=
Subject key identifier:   ED:3B:E8:40:4D:E3:CF:E3:3D:A7:13:D9:EB:B3:F7:49:8F:B2:8A:D4
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F43285848C264D8C3ADBEDAB27C935A00
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/229aa618-e791-3a56-9b12-73e308d2db33.roa
Signing time:             Mon 03 Feb 2025 11:16:54 +0000
ROA not before:           Mon 03 Feb 2025 11:16:54 +0000
ROA not after:            Sun 04 May 2025 10:16:54 +0000
asID:                     30036
IP address blocks:        2604:2e8a:5c00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c2:64:d8:c3:ad:be:da:b2:7c:93:5a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Feb  3 11:16:54 2025 GMT
            Not After : May  4 10:16:54 2025 GMT
        Subject: CN=32311ac9-5ea0-46a0-ad7a-f622d8e6b5e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ba:46:b8:b1:09:fb:49:71:41:fe:4d:4d:04:
                    13:f5:8c:46:77:24:0a:1b:b6:0d:50:64:0b:57:d1:
                    5f:1a:b0:61:bd:68:6b:84:29:37:96:e6:82:29:3f:
                    4f:ce:5b:c0:1d:62:c8:2f:bb:3f:6b:6f:2e:84:68:
                    2f:97:a0:1a:a3:b5:67:fb:56:9c:6d:0f:2d:fc:d6:
                    da:b3:3f:c0:95:31:a2:bf:ab:14:5a:3c:6c:15:16:
                    97:37:47:35:84:d9:3c:f1:79:2c:9d:27:d8:3c:3b:
                    b7:02:70:ed:ec:60:ca:20:df:67:f3:30:fa:62:ff:
                    e0:a2:0a:2d:fb:af:e2:07:ed:13:19:64:39:10:db:
                    95:eb:b9:95:e8:3f:3d:2d:af:bc:d1:a1:12:ee:d7:
                    a9:42:ac:e4:90:81:58:25:58:8d:4c:4c:b9:b0:37:
                    6c:27:a8:b3:97:9b:64:bc:2e:b3:2b:d7:2f:d2:3f:
                    85:8a:f1:3c:7c:5d:23:e4:49:40:d5:e2:e3:2d:d0:
                    47:ad:1d:54:56:20:c6:d1:2a:69:2b:c5:c6:11:85:
                    d7:f5:6d:02:a5:c7:4d:5c:96:7b:8f:cd:d0:a8:cb:
                    2c:8d:eb:40:9e:48:46:74:af:51:07:39:bc:2b:a6:
                    ef:40:ce:56:dc:f1:25:38:63:5f:8c:22:b0:af:8f:
                    68:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:3B:E8:40:4D:E3:CF:E3:3D:A7:13:D9:EB:B3:F7:49:8F:B2:8A:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/229aa618-e791-3a56-9b12-73e308d2db33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8a:5c00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:da:c5:1b:0b:dc:11:8f:c9:e1:c1:b2:86:9b:37:73:b2:30:
         5a:f4:4a:c7:20:2a:50:7c:1a:8b:6d:26:fa:e6:37:97:69:7d:
         74:a1:0b:5f:db:52:d8:0d:c7:2a:9a:74:96:28:09:a3:38:42:
         e1:40:6d:3c:e7:74:63:65:ab:75:6a:5d:e3:2f:80:f5:ee:35:
         74:28:58:07:eb:ee:db:6f:1e:ac:44:4c:64:f8:d9:55:b3:92:
         1a:0f:98:3d:01:ae:a5:8a:92:20:21:86:bd:31:e4:05:de:5d:
         2e:f3:16:95:21:40:67:96:5f:a8:e6:48:93:ad:7f:61:49:01:
         21:b4:64:8e:f1:4d:25:db:ae:c2:91:79:c2:84:97:f5:10:1b:
         72:bc:44:37:3c:06:f5:5a:3b:92:92:f0:d6:2f:73:7e:48:91:
         c8:f0:47:ce:33:8b:a3:85:61:6c:55:47:cf:9a:60:54:ca:03:
         65:ea:57:32:40:b3:d4:af:0a:a2:eb:42:6a:5d:c2:f4:83:8b:
         5c:fe:52:ec:e3:5f:61:ca:d4:fa:e5:1c:7b:61:e8:bc:30:7f:
         3e:dc:99:d6:6f:9f:29:d2:d1:57:64:19:c4:44:1f:2c:34:f3:
         2a:d8:48:94:7a:48:5d:43:3f:56:54:83:8a:94:b6:c4:aa:69:
         4f:e8:56:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:14:26 2025 by rpki-client