Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/75f362a6-93c2-3d15-a3ed-45a825cae6db.roa
File:                     75f362a6-93c2-3d15-a3ed-45a825cae6db.roa (raw, json)
Hash identifier:          3st2p9MhMzDXnVj7IookB+WG3N+rCKOnG/jk2nmmLK4=
Subject key identifier:   D3:9E:DF:7E:0B:9C:7A:C1:9B:79:27:98:52:D7:4C:A6:FC:D5:70:14
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584902AD385C6C79BF6DFD29C740
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/75f362a6-93c2-3d15-a3ed-45a825cae6db.roa
Signing time:             Wed 26 Feb 2025 11:54:28 +0000
ROA not before:           Wed 26 Feb 2025 11:54:28 +0000
ROA not after:            Tue 27 May 2025 10:54:28 +0000
asID:                     30036
IP address blocks:        2604:2e80:1400::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:02:ad:38:5c:6c:79:bf:6d:fd:29:c7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Feb 26 11:54:28 2025 GMT
            Not After : May 27 10:54:28 2025 GMT
        Subject: CN=f0fc49b2-b966-4562-bcdc-0393234f56a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:9f:57:00:8b:30:86:97:8b:36:cb:08:47:92:
                    c0:d2:d2:0a:fd:fe:1a:48:1d:a7:12:d2:f5:ca:21:
                    e5:a2:18:8d:e4:f7:43:c5:3a:54:c7:a3:9c:65:42:
                    80:ce:84:4a:65:d5:f1:13:d4:9a:97:91:42:d3:35:
                    cf:35:0f:c8:c7:a6:43:9b:3c:f3:f6:8e:49:11:49:
                    e2:20:15:2a:e5:85:21:1e:f7:20:6d:48:ae:56:f7:
                    37:5f:75:01:a3:e2:a4:c3:b5:da:22:48:4d:2f:8d:
                    20:8c:63:cb:9e:c7:34:35:fb:4a:8b:ea:dc:cf:17:
                    41:83:9c:7c:6e:dd:59:2d:b0:78:0c:96:63:db:d9:
                    6f:c0:34:10:82:e4:7f:48:9f:8f:82:6a:8a:26:2e:
                    d1:ee:28:20:54:f0:b7:b4:76:df:47:d9:cf:e8:9e:
                    1a:73:cd:bc:b0:e4:f1:4e:b8:0e:10:67:d2:3d:28:
                    7a:27:89:d4:0e:56:ac:3a:7f:71:6d:58:7d:a2:b2:
                    37:ce:d7:7b:96:cf:2e:4f:c3:58:61:53:19:d4:de:
                    6d:6a:b8:ec:57:1b:51:f3:ce:d0:a6:47:94:37:9a:
                    04:00:03:26:b4:d2:ec:ef:0b:3a:1f:1d:26:85:28:
                    5e:cd:bf:38:ea:e8:39:5e:26:df:fd:b7:59:c7:d1:
                    c7:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:9E:DF:7E:0B:9C:7A:C1:9B:79:27:98:52:D7:4C:A6:FC:D5:70:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/75f362a6-93c2-3d15-a3ed-45a825cae6db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e80:1400::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:49:13:93:ba:25:85:f2:44:34:65:90:54:9a:e4:f1:69:11:
         4f:16:ea:53:fc:d4:5a:01:81:05:20:d4:6f:23:5b:90:62:59:
         cc:0e:0a:10:54:d6:5f:fd:6c:6a:ed:31:e0:d5:76:5b:25:0c:
         ee:83:78:1f:cc:58:63:0a:43:ad:d5:29:b6:f5:52:2a:04:fe:
         4f:34:bb:fe:d7:39:8b:6c:4a:93:5f:1d:5d:aa:96:8d:7f:8b:
         6e:20:0f:f6:6f:e8:7a:3f:c1:44:31:4f:17:db:65:79:e0:e1:
         87:75:68:77:18:ac:d7:9a:c3:3e:98:ab:02:9f:02:5b:fa:f7:
         1d:d6:bd:d6:d2:26:fb:b5:50:ae:d2:88:38:64:08:ec:60:fb:
         16:71:f4:1c:ee:c5:db:07:ea:39:96:43:09:20:7a:1f:b4:3b:
         1f:86:03:a7:b9:27:66:a0:b3:00:fd:71:01:5a:8c:7d:16:0f:
         a3:8e:1b:5a:56:ad:76:a6:1f:26:dc:9d:be:4d:b8:13:6e:78:
         2e:d0:30:86:65:53:79:85:11:44:6f:cc:88:51:12:a5:4d:5d:
         7e:a3:8d:1f:58:25:8d:87:15:7a:06:fb:9d:78:3f:20:24:5d:
         e6:b2:48:6f:55:68:ff:da:19:f7:fd:9f:47:f6:d4:26:2c:f1:
         ae:00:e1:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:58:38 2025 by rpki-client