Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a7ee35d5-4565-33e0-8db9-510fe03a184a.roa
File:                     a7ee35d5-4565-33e0-8db9-510fe03a184a.roa (raw, json)
Hash identifier:          Yzl3RJsptlFv6sM0cS7dTcZT3YCaFabU/OagL73SGJA=
Subject key identifier:   5F:EF:D8:A3:77:19:73:18:A0:B0:EE:4E:34:EC:66:0B:BC:2D:90:B1
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584902AD300CAEA483F5F8E90000
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a7ee35d5-4565-33e0-8db9-510fe03a184a.roa
Signing time:             Wed 26 Feb 2025 11:54:24 +0000
ROA not before:           Wed 26 Feb 2025 11:54:24 +0000
ROA not after:            Tue 27 May 2025 10:54:24 +0000
asID:                     30036
IP address blocks:        2604:2e80:802::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:02:ad:30:0c:ae:a4:83:f5:f8:e9:00:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Feb 26 11:54:24 2025 GMT
            Not After : May 27 10:54:24 2025 GMT
        Subject: CN=ae1eab0c-3fc5-4f18-bb9c-f4c166123e3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:58:ad:64:e2:0e:80:54:6b:22:c3:ba:30:64:
                    96:4e:72:7f:b6:38:d0:61:31:7d:b5:97:97:51:63:
                    08:07:24:74:6f:cc:92:70:64:7d:c4:11:d6:0d:28:
                    32:e6:18:bb:a7:5f:56:df:9b:68:79:f3:9d:93:c2:
                    83:28:65:61:4d:4d:35:ee:b7:ee:14:84:d8:46:4b:
                    f9:06:48:e1:72:95:50:2b:61:93:d4:0d:94:1b:cd:
                    16:f6:e0:a6:8a:d3:77:3e:34:a3:db:c1:c8:1f:70:
                    0a:ac:2f:64:0c:d2:28:92:c6:95:6a:6b:76:e1:0d:
                    63:f4:04:63:1e:98:2f:cd:6b:26:6f:b4:d8:2a:00:
                    aa:0c:eb:ee:b3:94:12:7e:e7:98:10:71:d2:ba:30:
                    a7:aa:54:b2:83:8f:71:87:57:2a:28:bd:fc:9f:40:
                    d6:54:0f:a6:bd:35:3a:95:64:fc:11:93:2f:b9:19:
                    97:92:a5:f3:3f:f6:01:e5:3c:84:01:f8:94:f8:70:
                    10:85:08:03:f3:78:fb:c6:b2:a1:bf:48:07:74:25:
                    f8:ca:6a:90:52:9b:60:fe:9d:57:a7:70:d7:af:2f:
                    82:91:90:7e:4b:4d:48:7a:a4:5e:06:26:e4:a9:b3:
                    d4:c1:0f:cd:00:95:f9:bf:11:ad:81:54:6f:cb:5f:
                    a5:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:EF:D8:A3:77:19:73:18:A0:B0:EE:4E:34:EC:66:0B:BC:2D:90:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a7ee35d5-4565-33e0-8db9-510fe03a184a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e80:802::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:0a:fa:e8:34:e0:ca:e5:bc:e0:28:cf:f5:c5:cd:9d:08:c3:
         12:56:f9:fd:d3:60:eb:43:a2:cd:6a:e0:d8:ea:29:c8:6e:63:
         18:2a:bf:c6:e3:cf:d0:7d:40:01:14:b2:93:42:86:bd:b4:72:
         38:47:b4:50:9d:9c:22:83:32:20:e5:88:ac:dc:73:44:c2:91:
         07:88:33:4e:8a:8e:13:fa:e8:6d:ca:44:7c:2e:cc:80:95:87:
         ac:8e:c4:b5:81:2f:b6:11:45:47:c3:a7:2c:00:0c:6d:c4:46:
         7e:bf:e9:3b:da:9d:65:79:64:99:cd:cd:4e:cd:62:d8:ed:64:
         fc:50:8c:9a:83:74:a2:9c:2d:87:43:6b:0b:80:b2:ba:76:37:
         77:0b:64:db:46:91:48:5b:dc:88:19:68:94:c4:7b:29:65:a2:
         64:45:56:d2:3c:ee:55:00:3d:7c:25:6f:da:99:65:4e:0f:f3:
         fa:e1:cc:05:8d:19:da:9d:56:ef:80:44:24:e5:8b:af:14:c2:
         cd:31:11:7b:51:73:16:4d:65:f2:ee:d7:21:49:b3:c6:0d:d1:
         46:de:f6:34:65:7e:4b:8c:34:0d:9b:33:f7:00:1b:00:bf:90:
         0c:21:3f:31:36:98:aa:5b:ef:85:15:02:5a:ad:bb:6a:5b:fd:
         51:a0:de:98
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkCrTAMrqSD9fjpAAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI1MDIyNjExNTQyNFoXDTI1MDUyNzEwNTQyNFowLzEtMCsGA1UEAxMk
YWUxZWFiMGMtM2ZjNS00ZjE4LWJiOWMtZjRjMTY2MTIzZTNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFitZOIOgFRrIsO6MGSWTnJ/tjjQYTF9tZeX
UWMIByR0b8yScGR9xBHWDSgy5hi7p19W35toefOdk8KDKGVhTU017rfuFITYRkv5
BkjhcpVQK2GT1A2UG80W9uCmitN3PjSj28HIH3AKrC9kDNIoksaVamt24Q1j9ARj
HpgvzWsmb7TYKgCqDOvus5QSfueYEHHSujCnqlSyg49xh1cqKL38n0DWVA+mvTU6
lWT8EZMvuRmXkqXzP/YB5TyEAfiU+HAQhQgD83j7xrKhv0gHdCX4ymqQUptg/p1X
p3DXry+CkZB+S01IeqReBibkqbPUwQ/NAJX5vxGtgVRvy1+lKQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFF/v2KN3GXMYoLDuTjTsZgu8LZCxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYTdlZTM1ZDUtNDU2NS0z
M2UwLThkYjktNTEwZmUwM2ExODRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgQugAgC
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAI0K+ug04MrlvOAoz/XFzZ0IwxJW+f3TYOtDos1q4NjqKchuYxgq
v8bjz9B9QAEUspNChr20cjhHtFCdnCKDMiDliKzcc0TCkQeIM06KjhP66G3KRHwu
zICVh6yOxLWBL7YRRUfDpywADG3ERn6/6TvanWV5ZJnNzU7NYtjtZPxQjJqDdKKc
LYdDawuAsrp2N3cLZNtGkUhb3IgZaJTEeyllomRFVtI87lUAPXwlb9qZZU4P8/rh
zAWNGdqdVu+ARCTli68Uws0xEXtRcxZNZfLu1yFJs8YN0Ube9jRlfkuMNA2bM/cA
GwC/kAwhPzE2mKpb74UVAlqtu2pb/VGg3pg=
-----END CERTIFICATE-----
Generated at Wed Apr 9 00:20:25 2025 by rpki-client