Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b676ee1c-2986-3918-a733-65b7aa3030e6.roa
File:                     b676ee1c-2986-3918-a733-65b7aa3030e6.roa (raw, json)
Hash identifier:          67N16d9j1wbRx62yfGsJyQXgXY4YhYLE8PVb4ZSYBM4=
Subject key identifier:   A5:69:BE:92:A7:67:AA:64:82:29:1E:EF:6E:5A:35:31:D8:93:02:C5
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F43285848C7F8135CFD77F9848DD38700
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b676ee1c-2986-3918-a733-65b7aa3030e6.roa
Signing time:             Wed 05 Feb 2025 11:12:35 +0000
ROA not before:           Wed 05 Feb 2025 11:12:35 +0000
ROA not after:            Tue 06 May 2025 10:12:35 +0000
asID:                     30036
IP address blocks:        2604:2e8b:6c00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c7:f8:13:5c:fd:77:f9:84:8d:d3:87:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Feb  5 11:12:35 2025 GMT
            Not After : May  6 10:12:35 2025 GMT
        Subject: CN=78f63eb7-5f88-4f3d-bedc-e552f0f388f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:6b:bd:f0:dc:3e:43:8f:ca:df:9a:89:15:1e:
                    e0:61:c5:e1:e7:92:dd:e8:2e:78:c7:4b:34:9b:d5:
                    81:df:7c:2e:b7:bc:fa:fd:0c:76:48:2e:e3:98:c2:
                    01:0f:2f:1c:91:8a:b6:f7:46:f0:e8:bf:43:65:2f:
                    84:ea:9f:87:91:ae:bd:f2:75:87:8b:55:6b:a5:38:
                    58:69:0a:71:bc:43:c9:f4:1c:39:fd:29:27:45:19:
                    09:16:a9:dc:a8:13:4a:1a:46:97:aa:a5:6c:15:88:
                    ac:06:5d:86:99:01:10:da:15:f7:b3:93:97:41:3d:
                    78:22:c1:eb:24:80:78:7e:0d:66:60:7d:fd:dc:4f:
                    a2:56:fc:12:58:97:a9:a2:c9:2c:9c:f0:ec:23:1c:
                    fa:89:0f:76:4f:a9:31:f8:14:81:82:5b:83:2f:e8:
                    a8:a8:ce:07:8f:fb:b3:7a:66:ec:7b:80:d2:c3:cf:
                    ea:2b:a5:d8:74:74:dc:85:9e:fd:e4:e9:dd:67:68:
                    0e:6d:e9:d3:84:27:fa:75:0f:a6:6d:94:5c:46:63:
                    33:ef:a4:59:8d:68:e2:8e:0a:5c:c0:ed:77:57:34:
                    03:7b:55:55:79:a8:28:3b:e0:30:e4:89:fa:c3:1c:
                    59:64:eb:7b:00:44:f0:b3:6a:0e:65:8d:83:d3:e2:
                    a5:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:69:BE:92:A7:67:AA:64:82:29:1E:EF:6E:5A:35:31:D8:93:02:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b676ee1c-2986-3918-a733-65b7aa3030e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8b:6c00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:fa:3c:b9:21:ea:b5:93:b7:32:8f:51:ae:1d:ec:62:8f:35:
         f8:51:11:39:d0:09:ef:4f:c1:15:63:c4:fb:35:b4:40:b7:97:
         4f:52:4b:6b:3a:f8:33:58:f6:d6:c3:58:ee:88:e5:f9:14:27:
         2b:d2:d0:80:4e:37:ad:d1:e8:f3:e0:ac:ba:cf:62:0b:3b:1d:
         31:06:57:ee:a9:9f:a1:1a:13:73:5d:1c:1c:94:98:19:96:a0:
         71:66:a4:6e:08:78:b7:2d:9a:f5:85:81:ef:fd:0f:82:c4:24:
         68:dc:e9:f7:50:b2:d2:61:5e:f1:66:65:f6:cf:89:92:d0:3a:
         7c:f8:4d:88:f1:6a:08:75:88:a0:3d:3c:d7:1b:11:d8:5b:73:
         a3:75:9a:d1:cc:7a:b7:c7:0b:50:a0:06:d1:67:16:3c:6a:93:
         f6:07:c7:ce:54:47:87:ed:5b:3f:52:73:7a:40:8b:94:9b:e2:
         35:37:3c:e2:17:5f:e2:5e:0b:8c:d1:56:2c:54:c5:42:c7:2a:
         d1:78:47:91:e1:54:31:ea:8b:db:e9:55:79:5a:b5:f2:af:8b:
         17:98:b6:46:ff:4c:5f:d1:9d:8f:4a:34:1b:9e:79:c3:1a:da:
         a1:85:6d:30:a2:95:ce:21:5f:ee:35:6b:8e:30:a6:0a:f1:14:
         c0:70:ba:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:08:55 2025 by rpki-client