Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a0b54477-31eb-3a70-8ad2-5889947a36b3.roa
File:                     a0b54477-31eb-3a70-8ad2-5889947a36b3.roa (raw, json)
Hash identifier:          D+1qeU45oOpT3ps922RrAu7UmjppJ1WQUBPfDgwg3a0=
Subject key identifier:   C1:5B:0C:7D:05:22:1A:50:B0:B5:E0:02:48:EE:64:9A:4A:41:85:BD
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584902AD3AD50CCA333EFF9A37C0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a0b54477-31eb-3a70-8ad2-5889947a36b3.roa
Signing time:             Wed 26 Feb 2025 11:54:29 +0000
ROA not before:           Wed 26 Feb 2025 11:54:29 +0000
ROA not after:            Tue 27 May 2025 10:54:29 +0000
asID:                     30036
IP address blocks:        2604:2e80:1c01::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:02:ad:3a:d5:0c:ca:33:3e:ff:9a:37:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Feb 26 11:54:29 2025 GMT
            Not After : May 27 10:54:29 2025 GMT
        Subject: CN=b02e6a78-03dd-4783-b077-3d765d69b5e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:38:81:37:c8:13:06:1e:d0:af:e6:03:b1:fc:
                    2f:25:4c:84:93:38:df:c3:ab:4d:b8:96:37:05:1d:
                    d2:dd:2d:3a:d4:1c:cc:77:76:cd:34:cb:1f:d0:85:
                    9b:9f:58:4f:f1:c7:5c:dd:d6:22:71:39:de:ce:b8:
                    6d:21:4c:3b:d5:96:02:ac:5b:9e:ed:e1:42:91:33:
                    98:6d:84:48:28:36:e0:c4:4e:06:40:58:a8:e9:fd:
                    70:16:4b:e0:c2:7d:24:e2:6b:94:b9:c4:c4:8f:22:
                    18:18:e3:d6:e7:54:1b:13:ae:e2:d2:a9:c6:34:49:
                    64:20:3d:8a:b9:43:f5:ff:25:fa:75:e2:e2:49:5e:
                    6a:c3:e4:b6:6f:87:66:0f:a9:5c:a8:27:e4:fd:cb:
                    12:79:b5:71:44:8a:18:18:54:17:85:b5:52:cf:3b:
                    45:de:a9:7c:41:3f:fb:56:f1:61:c2:b6:b7:e6:bf:
                    4b:14:1b:7d:9a:48:1d:8b:46:1b:37:7d:34:95:62:
                    af:80:8a:eb:1d:0f:e8:bb:06:5f:60:58:b9:81:b3:
                    33:9d:3c:9f:bd:09:4f:52:11:90:1d:bc:f2:02:db:
                    22:6b:aa:3c:04:1a:8a:d4:75:9d:09:11:19:43:7b:
                    d6:24:5b:21:24:38:15:b0:4d:87:08:74:c2:b7:3a:
                    2d:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:5B:0C:7D:05:22:1A:50:B0:B5:E0:02:48:EE:64:9A:4A:41:85:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a0b54477-31eb-3a70-8ad2-5889947a36b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e80:1c01::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:13:a5:51:29:4e:3b:c2:e9:6d:90:14:60:5a:be:ff:95:3a:
         36:92:c2:14:38:7d:43:ef:48:70:03:39:a5:f0:fd:3e:3c:75:
         80:d7:6d:38:76:78:4c:b1:15:ad:c0:72:a9:40:0e:59:a3:e3:
         23:d5:1b:26:44:f5:a5:30:97:2b:49:76:d6:2c:9f:e0:4e:4b:
         29:99:67:95:d8:b4:2c:3b:de:2b:e5:d1:2b:cb:5d:19:1f:d1:
         bf:62:6b:83:4f:11:6d:45:21:a8:aa:f9:4d:45:47:50:02:33:
         ac:cd:77:6c:32:15:1a:20:0a:f9:41:fe:c5:0b:67:cd:f3:f0:
         98:8a:5b:7e:80:5d:93:e1:87:e9:40:a3:3b:02:ca:58:e1:90:
         65:21:4e:4e:d1:72:1d:1b:cc:f7:93:3b:0d:dc:f9:39:f7:8b:
         b7:21:31:22:eb:6f:c7:98:3f:07:f7:c4:97:56:1a:c3:03:4a:
         9d:b0:d3:fc:9c:4b:44:94:52:bd:89:1d:ba:1d:62:6c:0d:10:
         30:b0:40:04:b1:73:8a:d0:b8:d4:1f:e2:fb:55:df:84:4a:44:
         55:ae:4e:ba:72:82:09:8b:cd:ea:80:ec:6b:55:a1:16:ca:cb:
         6a:3b:b1:aa:36:a6:ff:37:c6:37:0e:5a:93:b2:7b:dd:03:58:
         40:6e:c8:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 02:00:39 2025 by rpki-client