Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5cf95f17-3faf-3248-9bee-3e328e385d93.roa
File:                     5cf95f17-3faf-3248-9bee-3e328e385d93.roa (raw, json)
Hash identifier:          auiidN5+D/PRzQga84RX27SK1MU+zi77Z1trL334IhY=
Subject key identifier:   11:40:46:0C:03:E2:86:7D:BF:D4:34:AA:89:CA:DB:CE:6D:EC:5C:2D
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F43285848C26486C9D959048DD22152C0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5cf95f17-3faf-3248-9bee-3e328e385d93.roa
Signing time:             Mon 03 Feb 2025 11:16:15 +0000
ROA not before:           Mon 03 Feb 2025 11:16:15 +0000
ROA not after:            Sun 04 May 2025 10:16:15 +0000
asID:                     30036
IP address blocks:        2604:2e88:e400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c2:64:86:c9:d9:59:04:8d:d2:21:52:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Feb  3 11:16:15 2025 GMT
            Not After : May  4 10:16:15 2025 GMT
        Subject: CN=017ec37a-8973-4ceb-b931-16feb7801a97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:19:e1:b5:27:2f:31:90:e4:73:30:ef:50:ab:
                    a5:15:03:24:99:ab:4c:39:cd:a3:ba:7a:d7:8f:58:
                    36:e8:95:20:3b:d9:9d:3f:1f:f7:36:b8:0f:a6:03:
                    a0:7c:c5:37:ec:2f:e3:a1:55:a0:58:9b:07:f5:6b:
                    5e:71:b3:77:41:49:ef:e3:bf:77:f4:c9:74:01:7f:
                    a0:26:6a:f5:17:d1:54:0f:8e:cc:74:51:e3:cf:c3:
                    fd:9d:99:4e:3c:7d:af:15:cc:b0:2d:f2:14:46:85:
                    db:27:54:4b:43:c4:53:65:28:a6:1a:b9:be:cf:d9:
                    0e:95:b5:6b:93:19:ca:f9:4b:24:ee:5c:c3:06:2b:
                    97:eb:8b:3c:b7:7c:8f:fc:34:83:ce:01:ec:72:46:
                    20:e6:45:bb:26:3b:1e:39:5f:24:d0:40:ac:bb:35:
                    6e:c1:23:5e:7d:d3:81:06:c8:8a:c7:ae:84:9a:f7:
                    a6:3f:c3:a7:09:a9:ca:8c:f8:5d:c0:47:f5:d4:e1:
                    30:3e:39:a5:32:12:4e:7c:21:d1:b5:87:4b:df:3d:
                    b2:84:3f:fe:62:8b:15:26:82:08:f1:01:c2:25:85:
                    71:ac:c8:82:db:50:82:01:ae:f7:8b:6f:b6:49:7d:
                    bb:4c:ac:60:7e:88:9c:7c:4a:d3:1c:8e:59:d5:49:
                    5e:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:40:46:0C:03:E2:86:7D:BF:D4:34:AA:89:CA:DB:CE:6D:EC:5C:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5cf95f17-3faf-3248-9bee-3e328e385d93.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e88:e400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:89:9b:13:47:b8:6a:a6:e9:f6:45:b4:8d:8d:36:b1:80:30:
         ef:5c:ad:8c:92:7a:ba:cb:c0:48:e4:ef:9c:b8:f2:07:55:77:
         c4:c3:ce:ad:26:c5:3d:26:2a:6b:96:2d:fd:29:e8:12:de:5e:
         75:d5:84:92:76:c5:ec:43:54:99:3d:5a:0c:35:08:c7:18:09:
         85:34:10:2e:13:02:97:28:8e:26:3d:4c:84:fa:6e:db:03:59:
         b2:45:3f:98:6e:22:7f:44:9c:b9:47:00:57:b2:99:93:4d:10:
         35:eb:b6:1f:70:39:ff:a9:ad:bf:87:52:0d:3e:0b:b3:df:37:
         1a:87:0d:e9:f3:61:4c:7a:20:c2:e1:8e:db:c4:01:de:55:49:
         81:6b:8c:24:6d:5b:02:07:6b:e1:52:5f:0f:cf:25:33:bc:d0:
         6b:94:b2:01:1f:dd:55:43:19:a8:9d:79:5e:96:02:70:b9:75:
         bb:c5:bd:ca:f4:d2:36:c6:ca:80:23:5f:6d:f3:6f:10:7f:07:
         51:83:f5:2a:19:5a:41:1c:ef:48:ae:f7:0d:cc:39:8e:a8:1a:
         a3:93:08:25:1e:ed:3f:08:ab:a9:e5:3d:47:11:54:f3:51:90:
         61:5b:81:a4:9d:d7:8b:4d:1f:97:7c:f5:46:bb:ae:06:ac:00:
         47:6b:c9:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:20:03 2025 by rpki-client