Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4ae6d243-3ea1-31d7-ab99-a5ff90b8002e.roa
File:                     4ae6d243-3ea1-31d7-ab99-a5ff90b8002e.roa (raw, json)
Hash identifier:          C3p7i5wh79csGEC4PL5CIQvbvAo1/6P/WXkuhzFQ8m4=
Subject key identifier:   E8:35:31:2C:DD:ED:91:E7:1B:86:7B:D3:23:BD:61:6C:B3:17:07:97
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F432858493FC66920C1E1FD615BB9C300
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4ae6d243-3ea1-31d7-ab99-a5ff90b8002e.roa
Signing time:             Thu 20 Mar 2025 09:09:31 +0000
ROA not before:           Thu 20 Mar 2025 09:09:31 +0000
ROA not after:            Wed 18 Jun 2025 09:09:31 +0000
asID:                     30036
IP address blocks:        2604:2e8b:7000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:3f:c6:69:20:c1:e1:fd:61:5b:b9:c3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Mar 20 09:09:31 2025 GMT
            Not After : Jun 18 09:09:31 2025 GMT
        Subject: CN=7b101c01-78cf-4a9a-b864-9619a2cfe943
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:a8:3f:78:ed:a4:f7:7e:c6:59:26:5d:c8:20:
                    9b:50:ba:16:54:a3:89:64:20:69:96:84:b8:27:37:
                    21:ad:bf:e7:54:36:d4:b3:54:c8:d7:ae:27:e8:b7:
                    0d:fb:0b:44:ad:03:17:af:02:fd:35:d8:1f:b0:6f:
                    6f:aa:be:48:18:e8:7e:9f:2d:e3:c1:a6:70:0e:dd:
                    58:15:50:51:35:98:80:9e:9f:1b:6b:4a:be:85:42:
                    f7:d4:59:09:4a:8c:0e:66:78:7e:69:7a:8e:a2:28:
                    8a:e7:5e:11:fe:d9:b6:7c:12:9d:d0:d5:4b:c6:8f:
                    24:ca:88:e5:26:ab:3c:bf:cf:1f:ef:29:67:db:d3:
                    a7:0b:a2:1f:ec:27:86:35:8e:8e:ff:39:67:dc:5f:
                    23:b2:e7:95:7f:e2:f7:b4:a4:f3:19:91:32:33:9f:
                    38:3a:c5:3c:9c:33:46:89:50:f4:fb:bd:60:59:a5:
                    7d:3c:7e:d4:ac:7b:9c:aa:04:5c:54:a1:1b:4a:e7:
                    60:5c:cb:ac:af:fa:91:fa:6f:e1:51:b2:b8:75:75:
                    9f:89:bb:c8:f0:e4:3c:2f:57:9c:ff:1d:d6:4b:1a:
                    09:d7:d7:06:2f:c2:ac:2e:00:46:1c:bf:89:29:b3:
                    0c:b7:9e:6c:f0:ff:20:d9:b5:43:c6:db:2f:90:09:
                    10:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:35:31:2C:DD:ED:91:E7:1B:86:7B:D3:23:BD:61:6C:B3:17:07:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4ae6d243-3ea1-31d7-ab99-a5ff90b8002e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8b:7000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:2e:c1:7b:10:58:3c:36:00:ee:6f:87:22:b3:22:61:f0:97:
         0b:e8:b0:32:74:0a:b7:7d:e2:70:8d:07:83:98:e8:f8:fa:a6:
         ac:24:3c:8c:9b:f1:db:b3:b0:d1:2e:ca:50:ad:c1:9e:a9:f7:
         ae:90:0f:94:e3:0d:23:db:52:af:82:07:4f:f4:c7:e0:6e:0c:
         d2:60:5d:6b:b0:76:56:fb:06:c6:83:41:dd:5f:95:5f:49:f4:
         0d:97:05:77:3f:ad:8c:93:cd:7b:b6:44:5f:b0:16:c6:41:9f:
         2b:51:6f:9a:1e:97:38:77:16:80:af:86:a1:4d:ef:22:6a:0c:
         2a:cf:d3:9f:1c:f9:fc:29:a6:0a:d5:70:28:df:38:11:59:6a:
         45:13:81:4f:e2:62:a3:e7:cc:b2:89:00:f9:29:4b:48:68:c6:
         91:23:5b:e4:95:01:71:21:62:29:fc:3f:6f:a8:6b:25:7e:40:
         32:88:f2:de:a1:13:84:77:86:9f:25:09:68:6e:97:f6:78:24:
         0c:64:d0:dc:23:ab:ff:9a:5c:ff:43:e4:81:43:c7:c5:e4:8d:
         00:4c:a2:98:17:78:6f:b0:9d:9a:86:37:78:55:5e:3a:63:da:
         96:24:7e:50:e4:71:96:de:2f:25:64:9e:19:ed:47:af:2b:e6:
         73:90:38:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:01:09 2025 by rpki-client