Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c7b7c5f8-ae71-375c-9984-48a72dcc97ee.roa
File:                     c7b7c5f8-ae71-375c-9984-48a72dcc97ee.roa (raw, json)
Hash identifier:          EUV7LcwO6Y2Oq+N/QA/x1gjeJlebOV39R/D1GEKsQKA=
Subject key identifier:   B1:A5:AF:1A:D6:EF:CC:4D:A3:59:D8:BF:DB:F5:FF:3E:C6:10:36:DE
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F43285848C7FE269703D11CC02B334680
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c7b7c5f8-ae71-375c-9984-48a72dcc97ee.roa
Signing time:             Wed 05 Feb 2025 11:24:50 +0000
ROA not before:           Wed 05 Feb 2025 11:24:50 +0000
ROA not after:            Tue 06 May 2025 10:24:50 +0000
asID:                     30036
IP address blocks:        2604:2e88:bc00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c7:fe:26:97:03:d1:1c:c0:2b:33:46:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Feb  5 11:24:50 2025 GMT
            Not After : May  6 10:24:50 2025 GMT
        Subject: CN=0a3606ac-3141-4c4f-9f4f-4b7b0a575b89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:10:7e:f1:c0:24:6a:c1:86:d5:22:84:62:f0:
                    47:8b:d3:1d:a8:d2:a9:1b:9b:b9:b1:75:da:d5:71:
                    85:85:3f:67:ae:10:d3:72:94:c7:e7:6a:28:29:3d:
                    dd:ca:dc:7d:57:bd:3c:f8:31:83:f7:31:52:d8:8d:
                    36:ec:34:7a:cb:85:8a:ae:34:dd:5b:5e:f5:16:d8:
                    c5:dd:31:62:27:5c:ee:64:2f:40:8f:9e:b8:d8:85:
                    a0:9c:c9:f8:0f:97:9d:c6:60:7d:6b:8a:35:3a:bf:
                    6d:8e:7c:db:54:60:dc:09:0b:cb:de:ec:72:05:7f:
                    df:f5:f1:b0:ca:4b:5f:ee:f7:64:5e:58:15:ea:87:
                    d2:be:72:af:e5:e1:dd:6d:f3:94:fc:4c:9a:ed:0e:
                    50:7f:3f:c1:c1:3b:08:6c:cc:c2:7e:00:93:f0:fe:
                    18:6a:77:83:3d:a1:5b:4d:d6:42:ee:01:9f:7a:77:
                    16:42:f7:4b:a3:d3:9a:47:6c:cd:a5:e8:30:7f:cc:
                    0e:0f:ce:4f:9a:e8:63:ab:5b:e5:3c:26:48:72:db:
                    2f:2b:a4:29:7b:53:36:48:04:52:90:0d:fd:1e:a4:
                    d7:35:52:c8:d5:40:5b:8d:de:1d:a8:6b:b2:cd:c0:
                    79:74:c7:f8:cc:69:b3:f6:4f:c3:0c:d6:ef:60:ae:
                    d5:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:A5:AF:1A:D6:EF:CC:4D:A3:59:D8:BF:DB:F5:FF:3E:C6:10:36:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c7b7c5f8-ae71-375c-9984-48a72dcc97ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e88:bc00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:2c:7d:fc:f1:a8:a6:ca:8f:52:d2:31:d7:b1:3a:2e:bf:36:
         fb:f0:4e:40:84:20:e9:b5:94:bf:6d:29:21:85:0f:45:32:4c:
         7b:9b:f2:86:55:6e:9d:84:99:38:0f:10:4a:d8:64:42:49:00:
         e1:8a:bc:7e:b7:06:c5:cb:50:9f:55:d9:12:30:8f:a4:95:10:
         a3:5c:9e:ba:80:55:15:4d:5e:d1:14:53:a8:8f:b9:31:9e:70:
         03:a0:ab:55:50:23:c2:45:f1:ee:54:ce:db:71:d1:07:50:b4:
         02:04:a2:8b:bf:e3:b6:51:dd:dc:b0:fd:88:ab:c1:b7:af:02:
         d7:b2:61:73:87:2c:86:a0:88:f3:5d:1e:42:b2:81:a0:a7:04:
         f9:de:54:10:cc:08:08:6d:96:8c:1d:2e:7e:d3:4e:29:18:73:
         ca:67:1b:46:20:88:a6:c6:af:67:99:73:d6:b0:1f:4e:00:3b:
         93:9c:e4:3b:62:57:02:b7:b6:38:ea:c6:b7:d8:79:52:6c:19:
         04:e7:18:8c:9e:3d:56:72:be:8d:64:cf:19:f2:af:f9:f7:48:
         da:43:d7:f9:52:f2:4d:dc:66:bc:b9:60:3f:ff:44:3f:8d:b8:
         52:89:26:0e:88:fa:e7:72:b6:6b:ae:9b:d1:4a:76:31:99:a6:
         1b:5a:92:d4
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEjH/iaXA9EcwCszRoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI1MDIwNTExMjQ1MFoXDTI1MDUwNjEwMjQ1MFowLzEtMCsGA1UEAxMk
MGEzNjA2YWMtMzE0MS00YzRmLTlmNGYtNGI3YjBhNTc1Yjg5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxB+8cAkasGG1SKEYvBHi9MdqNKpG5u5sXXa
1XGFhT9nrhDTcpTH52ooKT3dytx9V708+DGD9zFS2I027DR6y4WKrjTdW171FtjF
3TFiJ1zuZC9Aj5642IWgnMn4D5edxmB9a4o1Or9tjnzbVGDcCQvL3uxyBX/f9fGw
yktf7vdkXlgV6ofSvnKv5eHdbfOU/Eya7Q5Qfz/BwTsIbMzCfgCT8P4YaneDPaFb
TdZC7gGfencWQvdLo9OaR2zNpegwf8wOD85Pmuhjq1vlPCZIctsvK6Qpe1M2SARS
kA39HqTXNVLI1UBbjd4dqGuyzcB5dMf4zGmz9k/DDNbvYK7V9QIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFLGlrxrW78xNo1nYv9v1/z7GEDbeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYzdiN2M1ZjgtYWU3MS0z
NzVjLTk5ODQtNDhhNzJkY2M5N2VlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiLww
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEARix9/PGopsqPUtIx17E6Lr82+/BOQIQg6bWUv20pIYUPRTJMe5vy
hlVunYSZOA8QSthkQkkA4Yq8frcGxctQn1XZEjCPpJUQo1yeuoBVFU1e0RRTqI+5
MZ5wA6CrVVAjwkXx7lTO23HRB1C0AgSii7/jtlHd3LD9iKvBt68C17Jhc4cshqCI
810eQrKBoKcE+d5UEMwICG2WjB0uftNOKRhzymcbRiCIpsavZ5lz1rAfTgA7k5zk
O2JXAre2OOrGt9h5UmwZBOcYjJ49VnK+jWTPGfKv+fdI2kPX+VLyTdxmvLlgP/9E
P424UokmDoj653K2a66b0Up2MZmmG1qS1A==
-----END CERTIFICATE-----
Generated at Tue Apr 8 23:56:18 2025 by rpki-client