Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d1671f58-32fe-3cf6-9bdf-5a0fed5973df.roa
File:                     d1671f58-32fe-3cf6-9bdf-5a0fed5973df.roa (raw, json)
Hash identifier:          u3Fj2mLc+mN/TUnOpwKxH8B2tgBQkGWOyxmdMntJ3kM=
Subject key identifier:   B3:54:FF:13:99:C1:09:A9:F2:EE:A7:C8:59:9B:8D:91:B1:9C:24:ED
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F43285848C2648DFA4E3FB615A89F6C80
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d1671f58-32fe-3cf6-9bdf-5a0fed5973df.roa
Signing time:             Mon 03 Feb 2025 11:16:19 +0000
ROA not before:           Mon 03 Feb 2025 11:16:19 +0000
ROA not after:            Sun 04 May 2025 10:16:19 +0000
asID:                     30036
IP address blocks:        2604:2e88:f400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c2:64:8d:fa:4e:3f:b6:15:a8:9f:6c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Feb  3 11:16:19 2025 GMT
            Not After : May  4 10:16:19 2025 GMT
        Subject: CN=38084af4-ade5-483e-b33c-fa8e35f06ca5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:81:d8:13:e1:9a:f1:22:8c:e8:c3:f5:90:e9:
                    0f:96:ed:bd:91:08:18:d5:f8:69:91:48:6b:73:c5:
                    5c:6f:8d:c7:7f:1f:23:91:fe:01:13:51:77:f3:51:
                    be:ee:5f:1d:6f:0f:21:58:75:bd:60:90:2b:65:21:
                    2b:ee:7b:52:b8:5d:ca:2e:86:69:b2:11:d2:7e:7a:
                    78:cc:2d:95:fe:db:29:88:b7:85:cf:75:8b:9e:58:
                    53:3a:d0:2e:4a:80:46:42:b1:2b:b4:8f:21:1c:da:
                    a0:cf:c9:9b:a6:72:6f:39:6a:6a:6b:73:21:0a:fb:
                    1f:aa:d0:bc:50:2b:ff:da:16:39:56:ee:5f:60:20:
                    cd:f8:f3:0d:c3:3e:21:3a:49:65:13:72:d4:bc:6f:
                    e2:52:4a:53:26:0e:fd:44:b7:1f:af:68:95:be:f6:
                    f9:76:22:6d:fa:38:77:c9:0f:10:7e:10:09:7a:c3:
                    13:62:c6:66:32:6c:82:68:21:26:9b:2a:5c:e0:d5:
                    09:00:5d:cc:94:36:c2:8e:75:90:a5:59:0d:b3:cb:
                    2b:49:10:d2:63:00:b5:8e:87:b1:f7:6b:6b:aa:1b:
                    45:97:4b:ce:8f:2d:1f:0f:86:f1:7d:0e:7a:d6:30:
                    bc:34:80:7c:e5:bf:b2:9a:e4:a8:13:84:47:c7:a6:
                    90:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:54:FF:13:99:C1:09:A9:F2:EE:A7:C8:59:9B:8D:91:B1:9C:24:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d1671f58-32fe-3cf6-9bdf-5a0fed5973df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e88:f400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:94:df:25:e3:bd:97:c7:22:d8:ed:83:f7:b5:77:86:ff:7c:
         a7:19:4b:21:9a:08:e0:4b:e8:5d:64:b6:4f:41:10:c1:84:57:
         86:0f:ab:33:5a:03:ae:80:40:ff:1a:ce:56:bb:a1:4a:1e:d9:
         a0:48:4a:8b:11:79:68:ed:6d:07:91:ba:9a:32:83:53:76:0a:
         fe:bc:a3:83:9a:e1:37:af:40:66:ec:8a:bb:24:a6:f8:55:37:
         e8:5a:6d:50:7c:37:49:3b:4b:66:b6:b6:74:b4:f3:b7:79:36:
         dc:77:fb:e9:2d:30:b4:5d:86:41:90:ea:57:15:af:80:8c:2f:
         fc:5d:30:eb:58:3d:38:9f:a4:8a:80:3a:ce:b4:2c:ea:8f:f0:
         06:e0:32:02:9e:ec:1e:52:63:e2:0d:62:d2:76:01:58:a6:7c:
         78:04:ac:90:fd:03:da:8c:00:6d:c3:10:d9:42:cf:1d:27:31:
         e7:96:6d:5d:72:20:b9:4f:97:8b:44:aa:da:63:52:f2:58:18:
         e7:fd:a3:84:a3:5a:46:bd:7f:f4:7c:8d:83:ed:17:e3:64:ec:
         a8:43:16:10:79:e4:2f:40:2e:a9:59:d6:20:27:7a:0f:83:bc:
         0b:60:5a:40:d5:2f:c7:7d:86:87:41:10:77:75:8f:3f:f5:2a:
         28:32:3b:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:06:29 2025 by rpki-client