Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/80939abe-b918-3e98-bf49-7b9dc0e79a76.roa
File:                     80939abe-b918-3e98-bf49-7b9dc0e79a76.roa (raw, json)
Hash identifier:          iFzDKXMucyPOVw4Fyyt3ppOBVb0WxsNEKJQIUefptKk=
Subject key identifier:   EB:BC:B9:14:A7:F5:A5:CE:C6:2F:6C:87:C2:6C:15:EC:78:85:49:E1
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F43285848C7F83601C582FE17F72C8480
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/80939abe-b918-3e98-bf49-7b9dc0e79a76.roa
Signing time:             Wed 05 Feb 2025 11:12:52 +0000
ROA not before:           Wed 05 Feb 2025 11:12:52 +0000
ROA not after:            Tue 06 May 2025 10:12:52 +0000
asID:                     30036
IP address blocks:        2604:2e8d:3000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c7:f8:36:01:c5:82:fe:17:f7:2c:84:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Feb  5 11:12:52 2025 GMT
            Not After : May  6 10:12:52 2025 GMT
        Subject: CN=0164896a-0315-4300-b7e0-efa4e660282d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:0e:84:ad:99:93:25:20:bd:58:16:15:89:0c:
                    82:64:bf:35:84:fb:2c:e1:6c:23:c7:47:11:ae:5c:
                    6e:43:43:21:d3:a8:48:f3:62:e2:0d:96:c0:47:ca:
                    2d:1f:32:9b:7c:92:e5:c6:74:71:c2:70:fe:07:71:
                    79:cb:2b:f8:57:ac:43:56:81:f1:aa:ac:f3:37:8e:
                    fb:15:6f:cf:d9:86:a0:fd:02:5c:d8:48:41:66:15:
                    ba:a5:01:ed:02:08:d3:8c:fd:8b:f1:13:31:1d:9f:
                    80:7f:bd:3d:02:93:fd:a3:a7:1c:7f:81:63:13:4f:
                    47:e3:34:93:af:ab:92:64:e4:01:70:3f:bc:4a:d0:
                    ac:10:33:2f:86:25:1f:d4:0d:48:16:2c:56:23:89:
                    95:3e:d3:98:57:75:6e:fb:09:e1:98:79:53:ef:43:
                    d2:03:ad:4f:98:26:d8:8c:23:82:ba:ac:b2:62:ef:
                    60:74:3c:0f:ce:0f:9b:d2:05:4a:76:d8:47:a9:02:
                    f5:23:9c:52:ce:d7:9f:fd:45:89:7c:fe:2d:0d:a2:
                    ff:80:ea:52:61:4d:a2:c6:ef:d8:42:99:ad:c9:97:
                    b9:7f:e0:c2:71:2c:f5:f8:d6:75:68:0b:ca:72:cf:
                    a9:67:f4:fb:28:a5:2a:39:d1:e5:59:15:87:5b:a0:
                    35:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:BC:B9:14:A7:F5:A5:CE:C6:2F:6C:87:C2:6C:15:EC:78:85:49:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/80939abe-b918-3e98-bf49-7b9dc0e79a76.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8d:3000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:3d:c4:ba:d5:1c:b7:b3:50:41:44:9e:33:d5:a7:bd:9f:dd:
         94:e9:1d:a3:9e:fb:ce:fd:e5:18:aa:5c:19:6b:ee:71:03:19:
         d7:17:09:cf:68:aa:d4:2c:f4:3d:f5:33:b4:91:8e:ae:b6:e2:
         6e:1e:13:22:46:9f:a9:67:f0:a8:6e:8c:f3:ba:08:a1:3d:91:
         66:00:09:17:2c:f2:ea:78:cf:e8:e8:ff:97:9f:0f:ce:e0:9b:
         33:2e:f6:01:60:c0:ee:e0:45:83:6d:c2:63:51:70:fd:ef:9a:
         1a:1c:2e:06:8a:41:1b:9f:77:ff:10:2b:63:b8:7b:2a:11:21:
         1e:f4:2b:ff:ab:28:97:81:e8:aa:ef:3e:14:3e:bb:7a:75:83:
         02:5d:4c:02:f5:31:82:fa:4c:64:72:f6:e6:36:43:e2:89:24:
         49:a4:4b:a5:be:6c:1e:e7:c7:9f:3d:de:14:49:77:f4:9d:f7:
         8b:01:e0:4b:19:36:a2:2e:d1:48:75:d9:09:1d:64:79:30:d8:
         8a:0f:9c:33:da:dc:f1:7a:74:5b:15:dc:6d:18:39:b7:16:1c:
         06:2d:ee:c9:72:57:2f:0e:80:5a:c6:1f:b7:c3:af:ae:aa:ec:
         58:a5:d7:52:44:bc:bd:ed:57:bc:ad:e6:ec:7d:55:fb:0b:db:
         75:aa:e2:71
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEjH+DYBxYL+F/cshIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI1MDIwNTExMTI1MloXDTI1MDUwNjEwMTI1MlowLzEtMCsGA1UEAxMk
MDE2NDg5NmEtMDMxNS00MzAwLWI3ZTAtZWZhNGU2NjAyODJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwg6ErZmTJSC9WBYViQyCZL81hPss4Wwjx0cR
rlxuQ0Mh06hI82LiDZbAR8otHzKbfJLlxnRxwnD+B3F5yyv4V6xDVoHxqqzzN477
FW/P2Yag/QJc2EhBZhW6pQHtAgjTjP2L8RMxHZ+Af709ApP9o6ccf4FjE09H4zST
r6uSZOQBcD+8StCsEDMvhiUf1A1IFixWI4mVPtOYV3Vu+wnhmHlT70PSA61PmCbY
jCOCuqyyYu9gdDwPzg+b0gVKdthHqQL1I5xSztef/UWJfP4tDaL/gOpSYU2ixu/Y
QpmtyZe5f+DCcSz1+NZ1aAvKcs+pZ/T7KKUqOdHlWRWHW6A1KQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFOu8uRSn9aXOxi9sh8JsFex4hUnhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvODA5MzlhYmUtYjkxOC0z
ZTk4LWJmNDktN2I5ZGMwZTc5YTc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujTAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAgz3EutUct7NQQUSeM9WnvZ/dlOkdo577zv3lGKpcGWvucQMZ1xcJ
z2iq1Cz0PfUztJGOrrbibh4TIkafqWfwqG6M87oIoT2RZgAJFyzy6njP6Oj/l58P
zuCbMy72AWDA7uBFg23CY1Fw/e+aGhwuBopBG593/xArY7h7KhEhHvQr/6sol4Ho
qu8+FD67enWDAl1MAvUxgvpMZHL25jZD4okkSaRLpb5sHufHnz3eFEl39J33iwHg
Sxk2oi7RSHXZCR1keTDYig+cM9rc8Xp0WxXcbRg5txYcBi3uyXJXLw6AWsYft8Ov
rqrsWKXXUkS8ve1XvK3m7H1V+wvbdaricQ==
-----END CERTIFICATE-----
Generated at Wed Apr 9 00:12:47 2025 by rpki-client