Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a1273940-7de2-3d55-9de6-6dd0ad949bb9.roa
File:                     a1273940-7de2-3d55-9de6-6dd0ad949bb9.roa (raw, json)
Hash identifier:          ei5NY2/sAARqMOjXP2v5oBllVZXCamVBKDdB6hDdTtg=
Subject key identifier:   38:A6:45:12:C4:68:21:CE:DE:92:72:0C:E8:6D:91:69:45:75:65:8A
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F43285848C58042AF3C46B601969E5C00
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a1273940-7de2-3d55-9de6-6dd0ad949bb9.roa
Signing time:             Tue 04 Feb 2025 13:59:34 +0000
ROA not before:           Tue 04 Feb 2025 13:59:34 +0000
ROA not after:            Mon 05 May 2025 12:59:34 +0000
asID:                     30036
IP address blocks:        2604:2e8b:a000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:80:42:af:3c:46:b6:01:96:9e:5c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Feb  4 13:59:34 2025 GMT
            Not After : May  5 12:59:34 2025 GMT
        Subject: CN=c0ccb26c-bbac-4049-a100-d29fdea7de4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:85:bd:55:a8:44:11:e1:16:3b:5f:26:31:5f:
                    b0:73:3f:7a:a1:6c:a5:36:40:78:08:31:8c:be:65:
                    17:78:4b:e0:e5:b5:cf:c7:20:53:1a:ae:76:73:a2:
                    a4:48:46:71:f0:f4:67:8f:98:34:70:28:d6:21:14:
                    94:81:0a:8d:b5:cf:ea:e0:da:cc:bd:4f:d7:af:9e:
                    5a:4c:7f:00:da:a5:ed:24:41:3e:e9:55:44:a3:e2:
                    37:43:5a:30:50:38:20:ae:00:de:b1:9a:9a:37:d8:
                    68:02:ce:41:75:8b:35:f2:1f:1b:5e:33:10:6c:bc:
                    ad:88:d6:60:84:73:d5:04:f6:7b:3d:de:8c:5f:88:
                    97:15:37:71:7e:59:f2:35:b3:f5:5d:26:13:47:b9:
                    3f:90:1c:12:76:67:a0:f3:62:10:72:65:9b:41:34:
                    26:32:2d:c6:c2:c0:f3:a7:5c:51:09:42:2f:e1:f5:
                    2c:11:79:88:31:cb:a3:62:85:79:fa:27:0b:e3:23:
                    ff:b5:4c:95:48:0d:d6:ed:15:be:78:f1:8b:11:a0:
                    3b:61:d9:c3:93:94:43:47:ca:66:a1:a8:17:c1:0c:
                    57:17:b3:9c:94:02:f4:c9:e1:a4:0b:3d:2c:fc:dc:
                    74:7e:02:5e:ac:14:00:4d:69:72:e3:ff:52:e9:5f:
                    b5:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:A6:45:12:C4:68:21:CE:DE:92:72:0C:E8:6D:91:69:45:75:65:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a1273940-7de2-3d55-9de6-6dd0ad949bb9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8b:a000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:4e:48:3e:ca:85:71:e3:d7:06:39:86:c4:f7:94:05:88:0f:
         fb:f8:d8:23:bd:06:07:b2:5d:7d:0e:8c:75:8b:ba:9d:6e:2e:
         3b:8b:b2:99:f5:12:93:23:4a:81:af:e8:97:a0:5e:77:9c:93:
         1b:e9:c3:a4:de:3c:87:ff:10:30:c4:d5:fb:99:6c:51:a1:c6:
         a9:06:1c:d2:97:da:1b:aa:17:14:3d:e3:96:c9:0c:ad:82:39:
         10:c8:e5:00:20:32:5a:61:73:05:0b:2b:c1:2c:e0:44:ef:e4:
         74:15:ab:0a:97:a5:67:df:98:2d:3f:ae:9f:ce:5d:45:2b:02:
         03:ea:04:d7:aa:d3:90:c5:39:23:c7:92:6b:b3:18:4c:30:a5:
         e2:2b:65:e4:07:6a:34:e8:15:2b:e2:17:72:1e:46:40:f5:6d:
         21:b4:18:55:62:e1:02:59:f1:e2:5f:a3:c9:33:c2:6c:4f:1b:
         90:d0:d7:56:8b:f8:41:09:d5:c4:ef:81:fb:42:b0:34:58:09:
         07:7d:dc:47:11:4f:c1:b8:b2:9a:82:2a:21:c7:05:7b:db:c8:
         a7:c7:21:41:c1:69:3c:40:f6:ef:46:97:66:cf:8b:3c:0f:a9:
         8a:21:9d:93:1c:49:99:9f:f3:3b:f7:c2:de:49:ae:bc:bf:64:
         ba:ec:ef:64
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEjFgEKvPEa2AZaeXAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI1MDIwNDEzNTkzNFoXDTI1MDUwNTEyNTkzNFowLzEtMCsGA1UEAxMk
YzBjY2IyNmMtYmJhYy00MDQ5LWExMDAtZDI5ZmRlYTdkZTRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAooW9VahEEeEWO18mMV+wcz96oWylNkB4CDGM
vmUXeEvg5bXPxyBTGq52c6KkSEZx8PRnj5g0cCjWIRSUgQqNtc/q4NrMvU/Xr55a
TH8A2qXtJEE+6VVEo+I3Q1owUDggrgDesZqaN9hoAs5BdYs18h8bXjMQbLytiNZg
hHPVBPZ7Pd6MX4iXFTdxflnyNbP1XSYTR7k/kBwSdmeg82IQcmWbQTQmMi3GwsDz
p1xRCUIv4fUsEXmIMcujYoV5+icL4yP/tUyVSA3W7RW+ePGLEaA7YdnDk5RDR8pm
oagXwQxXF7OclAL0yeGkCz0s/Nx0fgJerBQATWly4/9S6V+1nwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFDimRRLEaCHO3pJyDOhtkWlFdWWKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYTEyNzM5NDAtN2RlMi0z
ZDU1LTlkZTYtNmRkMGFkOTQ5YmI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQui6Aw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEASk5IPsqFcePXBjmGxPeUBYgP+/jYI70GB7JdfQ6MdYu6nW4uO4uy
mfUSkyNKga/ol6Bed5yTG+nDpN48h/8QMMTV+5lsUaHGqQYc0pfaG6oXFD3jlskM
rYI5EMjlACAyWmFzBQsrwSzgRO/kdBWrCpelZ9+YLT+un85dRSsCA+oE16rTkMU5
I8eSa7MYTDCl4itl5AdqNOgVK+IXch5GQPVtIbQYVWLhAlnx4l+jyTPCbE8bkNDX
Vov4QQnVxO+B+0KwNFgJB33cRxFPwbiymoIqIccFe9vIp8chQcFpPED270aXZs+L
PA+piiGdkxxJmZ/zO/fC3kmuvL9kuuzvZA==
-----END CERTIFICATE-----
Generated at Wed Apr 9 00:19:52 2025 by rpki-client