Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4473774f-36f8-32e0-ae84-569c15ddb8d0.roa
File:                     4473774f-36f8-32e0-ae84-569c15ddb8d0.roa (raw, json)
Hash identifier:          ma2O9J+hJvFfmnppt9BmDKklLqOc1vuJ/LubRkjrVI0=
Subject key identifier:   45:FA:17:79:A2:C7:24:A1:BA:01:3D:23:9E:6E:43:E4:78:A8:DF:0F
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F43285848C7F841A417830EF37960D300
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4473774f-36f8-32e0-ae84-569c15ddb8d0.roa
Signing time:             Wed 05 Feb 2025 11:12:57 +0000
ROA not before:           Wed 05 Feb 2025 11:12:57 +0000
ROA not after:            Tue 06 May 2025 10:12:57 +0000
asID:                     30036
IP address blocks:        2604:2e8e:bc00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c7:f8:41:a4:17:83:0e:f3:79:60:d3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Feb  5 11:12:57 2025 GMT
            Not After : May  6 10:12:57 2025 GMT
        Subject: CN=c776d228-5ac8-4fcf-ab16-f53429f7682b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:4e:ee:e6:60:31:9b:ab:40:f9:85:7f:34:1e:
                    49:03:42:95:83:7e:5c:1c:a5:fd:50:ce:25:cd:d7:
                    88:35:ee:9e:b8:c6:eb:ab:58:fb:29:b8:fe:b2:e7:
                    c3:bb:b0:ea:f3:07:e1:b3:4d:0b:1e:ee:9f:e3:05:
                    c3:83:66:75:17:8d:6e:3c:73:ba:ac:49:58:02:10:
                    08:da:04:bb:48:6f:b0:ed:2f:20:1c:43:fc:cf:2a:
                    f6:ab:bf:9f:77:54:6d:61:f7:ee:8e:90:78:7f:5e:
                    83:44:0e:a1:48:ab:7b:dc:79:18:76:88:77:ba:ad:
                    0d:e1:80:03:df:a5:6e:9a:5b:6c:12:bb:25:62:7b:
                    2c:7e:85:30:22:b5:ed:ea:21:65:28:b8:13:ab:4e:
                    bf:bf:33:e3:6f:2f:b9:b4:3e:25:8d:96:6c:73:82:
                    9b:3b:1f:ae:55:01:c0:54:e4:38:bb:e5:84:ad:5b:
                    47:ce:ee:70:83:ca:38:05:36:54:65:83:0d:b8:d6:
                    2c:bd:2c:4c:47:d4:23:73:c7:8f:6c:35:a4:cc:9a:
                    bd:11:a9:e8:26:f1:16:4f:cf:3b:35:d6:54:2f:3f:
                    b3:05:da:6a:6a:d9:54:31:b4:f2:d5:bc:5b:76:dd:
                    63:79:2e:75:0c:6a:f8:06:ab:6f:8e:fa:52:78:d5:
                    d9:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:FA:17:79:A2:C7:24:A1:BA:01:3D:23:9E:6E:43:E4:78:A8:DF:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4473774f-36f8-32e0-ae84-569c15ddb8d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8e:bc00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:39:84:76:21:f8:5c:26:bc:81:00:44:da:7f:be:22:81:d3:
         16:96:cb:f1:e8:80:7a:61:af:e0:ad:e5:2e:3b:9d:46:7e:a2:
         73:dc:97:07:17:3c:ff:6b:c5:4b:6b:48:eb:ca:94:e1:c5:37:
         af:cb:3e:ea:93:2e:76:5a:68:b0:eb:a2:bb:28:ed:61:a0:9c:
         43:3e:c5:e0:47:56:4d:89:b6:8d:43:b0:c2:ca:58:58:29:1b:
         f6:08:b7:fb:9f:f8:87:b6:da:e6:ff:67:7b:dd:76:e2:21:bf:
         05:99:5d:80:15:88:a1:f6:98:fd:3f:50:fb:94:1e:70:29:05:
         00:5a:86:9f:0a:b7:3c:46:a6:47:a5:a6:11:9e:2f:0e:e8:e7:
         34:9c:ea:32:b5:3a:79:07:28:75:6f:6a:af:66:21:66:37:c8:
         a1:38:0f:b4:b8:fc:91:99:72:2c:97:6f:9b:17:03:9c:5f:ce:
         23:1b:95:32:c2:c3:72:43:e2:0e:9c:72:75:27:8b:08:f2:5f:
         cb:f6:6f:7b:aa:a3:25:ab:a6:71:88:77:13:ee:1e:1a:ff:67:
         e0:f8:f3:51:f7:ac:3b:4f:16:b1:ea:35:0c:c1:65:8b:b6:47:
         52:54:46:06:e7:f1:7d:3e:89:cb:d7:0f:0f:95:c1:03:06:4c:
         1d:44:6a:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:14:58 2025 by rpki-client