Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bf89dd6a-88cb-3df4-ba01-72fb10210bfd.roa
File:                     bf89dd6a-88cb-3df4-ba01-72fb10210bfd.roa (raw, json)
Hash identifier:          wAoQhANDXBzFS/Fz27jaX8B7G4thgQEeCwND1+25cn4=
Subject key identifier:   B0:1F:F4:54:0D:99:C8:9E:CA:B6:F6:3A:24:80:29:38:77:9E:CE:F8
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F43285848B73775CEB8FE2AD3A75C5010
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bf89dd6a-88cb-3df4-ba01-72fb10210bfd.roa
Signing time:             Thu 30 Jan 2025 11:11:34 +0000
ROA not before:           Thu 30 Jan 2025 11:11:34 +0000
ROA not after:            Wed 30 Apr 2025 10:11:34 +0000
asID:                     30036
IP address blocks:        2604:2e88:7000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b7:37:75:ce:b8:fe:2a:d3:a7:5c:50:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jan 30 11:11:34 2025 GMT
            Not After : Apr 30 10:11:34 2025 GMT
        Subject: CN=2a274ea7-2307-4367-934d-d978425d5055
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:c1:43:3d:ff:7b:09:70:40:ac:14:b9:9a:1b:
                    8f:ea:ff:a1:92:af:a5:ac:99:14:0d:93:27:1f:42:
                    58:b3:37:f7:c7:cb:24:73:f9:5c:9f:50:c4:50:6e:
                    2d:cf:38:f6:6e:55:0c:c9:5d:1e:9c:a7:5d:80:b7:
                    59:05:8c:18:20:65:cc:19:e0:e8:ce:bf:1b:43:67:
                    f2:12:38:43:57:00:06:63:90:14:4c:0d:56:92:5c:
                    86:4b:8b:46:16:de:bc:e1:05:93:67:04:45:66:b7:
                    df:9c:a2:63:46:19:cb:2a:65:eb:ba:a0:23:8f:d5:
                    2c:cc:dd:6f:cb:75:9d:f5:e0:37:e7:1d:64:4a:b6:
                    af:98:d5:65:c4:d9:b2:e2:30:8a:b0:3d:bb:71:d2:
                    99:bc:88:7e:7d:5d:b9:2a:1a:38:31:93:05:f3:4b:
                    3d:09:47:9e:5c:8a:6a:55:9c:f9:94:7d:38:99:1e:
                    0e:80:28:2f:8d:a2:d2:24:b7:ef:a7:22:bb:74:b3:
                    02:5a:75:de:d1:21:2a:7b:d6:05:ee:b2:e6:2d:d7:
                    71:da:70:d0:10:e6:9c:2f:75:d4:94:6a:61:9d:ef:
                    94:9f:4e:fa:41:49:32:c4:25:ac:fd:12:4d:0c:1a:
                    fa:25:c7:ee:55:89:84:02:a9:05:c6:16:b8:de:19:
                    59:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:1F:F4:54:0D:99:C8:9E:CA:B6:F6:3A:24:80:29:38:77:9E:CE:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bf89dd6a-88cb-3df4-ba01-72fb10210bfd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e88:7000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:47:fe:a4:2c:cd:77:8b:2c:6d:25:75:ff:19:ea:3b:c6:fb:
         62:34:ae:5a:bf:97:27:e8:34:b4:f9:59:d2:1a:3f:c4:7e:4f:
         43:b6:fa:6b:a2:dd:7a:93:6a:bc:ea:42:a0:e2:a1:ae:3e:cc:
         f4:75:da:8b:6e:6c:cf:b7:ef:18:34:e1:a1:76:2c:89:db:cd:
         d6:ce:fe:56:9c:b6:20:b5:33:80:a9:7d:39:5e:d8:d6:e5:13:
         47:32:42:19:32:fd:ea:db:f4:d1:36:f7:8f:91:6b:ab:cd:cc:
         0d:ac:38:c4:1a:96:58:01:de:84:83:6f:a4:25:5a:92:c6:41:
         a0:fa:2c:8f:6f:57:1e:76:62:b7:a1:ef:83:07:14:96:1b:5c:
         47:23:9d:a6:07:b7:68:cc:5f:46:c7:6a:9e:c5:07:84:cb:09:
         68:52:47:ce:a1:4f:75:8a:ce:08:81:0f:3f:13:37:48:6d:08:
         54:06:6b:fd:34:37:02:dc:74:ac:aa:62:06:a8:fe:92:56:9f:
         98:5a:12:a0:20:fe:7c:33:4f:4c:d0:c8:0c:dd:b1:60:3b:0f:
         08:24:42:97:06:e9:18:67:0d:ae:ac:8f:84:aa:c1:72:c7:ef:
         2e:71:7b:6b:39:f0:ef:ca:88:7f:52:0e:1e:06:39:ed:ce:c0:
         d9:0a:b6:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 05:45:37 2025 by rpki-client