Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/807ff782-0ddd-36f8-985a-a16d51d966e3.roa
File:                     807ff782-0ddd-36f8-985a-a16d51d966e3.roa (raw, json)
Hash identifier:          jymb04XqTFXfiFJSBNDt5pNd/3ubO2c8W64zJ9OP+74=
Subject key identifier:   06:77:7F:C3:94:64:B2:3A:07:45:F3:8B:B6:2F:34:AF:8C:9E:BB:68
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F43285848C26510968E46C1109E1C5700
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/807ff782-0ddd-36f8-985a-a16d51d966e3.roa
Signing time:             Mon 03 Feb 2025 11:17:20 +0000
ROA not before:           Mon 03 Feb 2025 11:17:20 +0000
ROA not after:            Sun 04 May 2025 10:17:20 +0000
asID:                     30036
IP address blocks:        2604:2e8c:bc00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c2:65:10:96:8e:46:c1:10:9e:1c:57:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Feb  3 11:17:20 2025 GMT
            Not After : May  4 10:17:20 2025 GMT
        Subject: CN=5ae372d1-6db1-489b-8617-ae47ead4512b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:48:f2:ab:d6:c6:29:77:94:26:be:17:71:30:
                    2b:fe:b7:a0:3f:5c:83:f7:f6:6c:cf:a7:b0:98:2d:
                    37:93:1d:d6:ef:89:10:ed:7d:5e:b2:21:e3:17:cd:
                    0d:4e:c9:0a:f5:9e:83:da:1f:90:dc:fe:4a:48:24:
                    5d:08:08:0f:17:0a:e2:69:3d:55:7d:bc:85:09:83:
                    ea:44:90:5c:14:68:a5:46:97:b7:07:03:6b:e1:6b:
                    9e:5e:f7:12:b1:8d:fb:db:7e:48:a0:fb:7c:b8:cf:
                    a1:0c:5b:fd:4c:10:d8:c3:22:54:f1:ee:d4:29:23:
                    b7:0e:64:7b:80:b1:12:c8:a3:18:04:54:28:f1:0b:
                    5a:11:7f:16:77:e2:12:23:42:f6:49:5e:07:31:91:
                    70:d0:a6:0b:41:ee:a7:a4:e2:6f:ca:f8:7e:6b:50:
                    75:48:02:b2:c0:29:62:eb:dd:7b:46:91:bf:11:c3:
                    8c:35:49:50:3d:dd:b2:eb:30:66:b1:d7:8d:c8:39:
                    9b:39:f5:d7:1b:cb:b5:f2:26:bc:33:c0:ed:87:f5:
                    b2:87:16:fb:59:80:33:6b:17:01:ac:de:4d:0b:b9:
                    b0:db:b3:f2:4a:1f:0c:13:15:3b:af:d8:29:65:6c:
                    59:a6:3c:71:fa:f6:71:f2:b1:67:ca:1c:d6:31:a4:
                    be:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:77:7F:C3:94:64:B2:3A:07:45:F3:8B:B6:2F:34:AF:8C:9E:BB:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/807ff782-0ddd-36f8-985a-a16d51d966e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8c:bc00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:43:ab:5a:78:c1:c6:d9:39:f2:39:2f:a1:db:f9:6a:78:a0:
         b1:20:18:ea:83:a2:44:96:79:13:15:41:3a:15:5d:37:0b:cd:
         8d:ba:81:e9:62:65:cf:48:58:39:84:01:11:fb:28:3a:0f:ef:
         4c:5b:45:1b:68:ea:4e:e7:4f:3b:6b:a3:c1:69:bd:d4:5a:4f:
         dc:16:a3:e4:b8:42:81:56:d4:83:d0:de:1d:50:2e:01:01:87:
         8f:d6:85:ab:89:9f:58:0c:ec:50:80:23:ed:9a:4e:d8:4f:b4:
         ff:74:6b:78:c3:2e:5b:89:4b:3e:41:5e:19:cf:09:f2:c5:6d:
         d3:37:6b:35:52:a2:90:cf:8a:9d:f8:cb:81:b0:dd:45:3d:a4:
         f7:e4:ec:11:75:13:4b:2e:d1:9b:3b:17:f2:c1:ad:b2:d5:8e:
         68:66:e9:61:80:49:38:af:ed:72:7a:b8:ab:76:31:81:a5:29:
         3a:38:01:de:7d:78:69:ee:d2:c1:f1:22:70:2f:da:42:77:ea:
         45:5f:e4:c1:24:ac:a3:e9:fb:33:f6:b6:ee:dd:f2:79:9f:fa:
         31:90:7b:76:ea:b7:ed:11:10:64:cb:5d:82:50:a2:72:07:6b:
         5e:b9:2b:bc:6b:1c:49:7e:85:0d:41:6f:ad:3c:f7:64:53:77:
         ed:47:68:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:09:05 2025 by rpki-client