Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d0bea4c5-e332-3297-bcf8-9d6014723baf.roa
File:                     d0bea4c5-e332-3297-bcf8-9d6014723baf.roa (raw, json)
Hash identifier:          8b2BpCdyxSpSrOCgv/1FIZJci0FenCcmUC9LJaEfsYg=
Subject key identifier:   15:96:3F:19:2C:81:87:25:FD:AE:6C:22:C6:0A:7B:1D:C9:E9:D7:7B
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F43285848C558F08F4E5D82D0D091D680
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d0bea4c5-e332-3297-bcf8-9d6014723baf.roa
Signing time:             Tue 04 Feb 2025 12:40:20 +0000
ROA not before:           Tue 04 Feb 2025 12:40:20 +0000
ROA not after:            Mon 05 May 2025 11:40:20 +0000
asID:                     30036
IP address blocks:        2604:2e8a:1400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:58:f0:8f:4e:5d:82:d0:d0:91:d6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Feb  4 12:40:20 2025 GMT
            Not After : May  5 11:40:20 2025 GMT
        Subject: CN=97cbe721-a1b6-4784-becd-bf9d8e4ed758
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:9b:df:db:52:c0:73:af:1b:46:8d:70:34:50:
                    90:21:d9:ad:21:1a:49:a3:d3:d1:ae:75:d0:ad:3b:
                    a5:6a:21:7b:24:3a:2e:0a:b9:11:6e:78:b0:6f:4c:
                    e2:00:e5:7a:9e:d8:ae:26:9d:05:a5:22:15:87:c7:
                    78:16:fb:06:bb:f7:0f:b3:fa:87:aa:44:8b:61:98:
                    b1:5c:c9:3d:25:3b:9b:a4:d0:17:47:05:f2:f6:fd:
                    5c:37:b1:8f:4d:8c:ba:4d:b3:20:86:e1:f0:a8:72:
                    05:be:62:69:b8:96:e0:2c:20:99:57:ad:b5:a0:8f:
                    62:f2:5b:36:31:4a:57:06:c4:30:17:a6:09:8e:53:
                    13:5a:b7:60:19:95:3a:b1:af:dd:ed:ff:46:50:52:
                    8f:c2:f4:1f:1b:71:c3:42:01:b6:6c:60:ae:bb:24:
                    13:73:e2:4b:54:a7:90:7d:59:9b:68:39:0f:41:3a:
                    70:9a:49:9c:43:1b:3b:af:bc:d4:fd:ef:04:56:24:
                    04:2d:95:36:cf:31:a4:17:f9:00:ff:ec:de:6b:01:
                    54:5a:1c:de:17:e0:88:f1:60:83:04:07:07:52:cd:
                    45:33:33:f0:c7:2b:69:b7:8c:dc:55:99:5a:25:93:
                    a8:d3:13:04:22:ff:1b:9b:20:e2:82:f1:b1:47:9b:
                    62:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:96:3F:19:2C:81:87:25:FD:AE:6C:22:C6:0A:7B:1D:C9:E9:D7:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d0bea4c5-e332-3297-bcf8-9d6014723baf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8a:1400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:93:8c:75:28:28:be:3f:68:96:13:5e:7d:00:9d:96:c9:34:
         1e:46:30:2a:34:65:9e:c0:74:1f:bc:ec:3d:b6:f4:17:05:87:
         1c:ee:17:1e:23:0c:fd:78:9d:40:10:5b:4e:fa:6b:92:71:72:
         df:f6:80:09:05:6e:d1:e0:9e:d8:97:7c:f2:8c:97:07:7c:5c:
         fa:e7:7e:ea:67:15:b4:5d:94:54:ba:93:ed:ab:07:b8:99:53:
         72:9c:5f:4e:26:28:ab:00:a0:71:75:fe:4e:11:38:98:d1:79:
         5b:ce:36:56:e2:6a:a4:2f:c9:62:63:1a:bd:6d:f6:0d:09:41:
         d4:16:12:31:4f:fe:55:5b:34:1d:88:ed:5f:bf:17:ef:f2:f5:
         f7:f1:d7:25:7c:26:b7:89:43:7c:a2:e7:26:de:f4:a6:cf:e0:
         67:ce:58:3e:0e:3a:b9:92:54:b5:70:56:86:73:66:ca:4a:3f:
         55:b0:bb:4d:0b:93:a9:a3:5f:f5:bd:5a:c4:a2:0f:06:77:7c:
         88:c3:4a:c2:6a:a7:96:44:e9:6d:e8:23:4e:bb:79:5b:fb:de:
         3d:a1:2a:c2:b0:d0:b9:89:3e:e8:0e:0d:bb:2f:9e:ad:08:4c:
         2f:c0:0c:b7:75:16:4d:2f:af:05:88:09:5c:bc:b7:11:9a:67:
         6e:2a:97:e9
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEjFWPCPTl2C0NCR1oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI1MDIwNDEyNDAyMFoXDTI1MDUwNTExNDAyMFowLzEtMCsGA1UEAxMk
OTdjYmU3MjEtYTFiNi00Nzg0LWJlY2QtYmY5ZDhlNGVkNzU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJvf21LAc68bRo1wNFCQIdmtIRpJo9PRrnXQ
rTulaiF7JDouCrkRbniwb0ziAOV6ntiuJp0FpSIVh8d4FvsGu/cPs/qHqkSLYZix
XMk9JTubpNAXRwXy9v1cN7GPTYy6TbMghuHwqHIFvmJpuJbgLCCZV621oI9i8ls2
MUpXBsQwF6YJjlMTWrdgGZU6sa/d7f9GUFKPwvQfG3HDQgG2bGCuuyQTc+JLVKeQ
fVmbaDkPQTpwmkmcQxs7r7zU/e8EViQELZU2zzGkF/kA/+zeawFUWhzeF+CI8WCD
BAcHUs1FMzPwxytpt4zcVZlaJZOo0xMEIv8bmyDigvGxR5tiIwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFBWWPxksgYcl/a5sIsYKex3J6dd7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvZDBiZWE0YzUtZTMzMi0z
Mjk3LWJjZjgtOWQ2MDE0NzIzYmFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuihQw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAKpOMdSgovj9olhNefQCdlsk0HkYwKjRlnsB0H7zsPbb0FwWHHO4X
HiMM/XidQBBbTvprknFy3/aACQVu0eCe2Jd88oyXB3xc+ud+6mcVtF2UVLqT7asH
uJlTcpxfTiYoqwCgcXX+ThE4mNF5W842VuJqpC/JYmMavW32DQlB1BYSMU/+VVs0
HYjtX78X7/L19/HXJXwmt4lDfKLnJt70ps/gZ85YPg46uZJUtXBWhnNmyko/VbC7
TQuTqaNf9b1axKIPBnd8iMNKwmqnlkTpbegjTrt5W/vePaEqwrDQuYk+6A4Nuy+e
rQhML8AMt3UWTS+vBYgJXLy3EZpnbiqX6Q==
-----END CERTIFICATE-----
Generated at Wed Apr 9 00:09:03 2025 by rpki-client