Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/dad7d379-8f6b-36b2-90ae-dfb56c93e94d.roa
File:                     dad7d379-8f6b-36b2-90ae-dfb56c93e94d.roa (raw, json)
Hash identifier:          reQf79gfLcSURqWZaNjG1rXlkxO8Vw7bA3FEz/4sFUc=
Subject key identifier:   20:A3:0F:37:A1:FE:0F:03:D2:0D:2E:B8:7E:93:1C:53:75:21:7B:C3
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F43285848C55FC5636A28498AE41A56C0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/dad7d379-8f6b-36b2-90ae-dfb56c93e94d.roa
Signing time:             Tue 04 Feb 2025 12:54:06 +0000
ROA not before:           Tue 04 Feb 2025 12:54:06 +0000
ROA not after:            Mon 05 May 2025 11:54:06 +0000
asID:                     30036
IP address blocks:        2604:2e8a:2800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:5f:c5:63:6a:28:49:8a:e4:1a:56:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Feb  4 12:54:06 2025 GMT
            Not After : May  5 11:54:06 2025 GMT
        Subject: CN=fcce47ed-f065-4b82-8255-5e199e838eb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:39:02:27:3b:0e:62:bc:26:ed:94:d9:52:86:
                    9c:e1:27:ea:3d:e1:aa:8a:41:07:46:92:9a:cf:03:
                    09:25:39:15:8f:9e:e0:9b:97:94:12:2b:b5:3a:27:
                    85:6c:b1:d6:25:de:70:d7:d7:9d:f6:7c:c7:21:cf:
                    ba:5c:5d:a2:d0:14:53:8c:20:79:e5:a5:6c:e0:02:
                    38:04:d1:46:1f:51:53:87:ca:c3:3c:d8:fa:f8:bb:
                    e8:94:a3:24:ef:0a:50:ed:17:ed:4f:9b:f9:93:19:
                    7f:d9:ac:00:53:0c:a4:78:4e:ae:30:2a:5e:c7:e8:
                    ae:57:1d:cc:bf:3f:5a:9a:78:d6:c7:52:16:1e:27:
                    f0:29:a6:48:bc:c3:43:50:45:0f:d7:ef:5f:d1:7b:
                    b0:09:99:03:8d:dd:14:52:d0:a8:2a:03:83:99:87:
                    67:cd:8e:de:24:50:cb:55:de:07:6e:1b:c8:91:56:
                    a9:75:fb:b9:79:15:79:d5:4d:c9:a4:7e:d6:d9:a7:
                    fa:68:27:2f:8f:65:94:2a:9f:20:c4:22:3d:cd:5b:
                    65:45:f6:9d:ee:9c:38:66:77:df:d7:24:82:6f:8f:
                    d9:55:9e:3c:d5:ed:22:bb:a3:9a:c8:bf:cc:a6:54:
                    9e:64:77:3b:1c:42:b5:91:57:02:51:e5:2e:23:6e:
                    a5:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:A3:0F:37:A1:FE:0F:03:D2:0D:2E:B8:7E:93:1C:53:75:21:7B:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/dad7d379-8f6b-36b2-90ae-dfb56c93e94d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8a:2800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:d4:34:56:b7:84:aa:53:a6:82:0f:41:fe:98:61:f8:f2:5f:
         2a:0d:6a:9c:bf:bc:0b:ab:03:42:9a:99:25:5b:8c:47:23:c2:
         92:7f:1a:1e:57:1e:4c:87:25:3d:0c:22:4e:91:8b:6f:9a:53:
         a3:c7:e6:c6:86:27:bf:ee:bf:2d:d9:89:c3:e2:79:33:aa:e0:
         04:2e:7c:07:b0:fd:c6:c5:8d:1c:83:9c:89:f9:ef:6f:43:13:
         80:4b:98:38:44:92:84:ef:c0:9f:35:a2:f3:1b:0c:35:93:e7:
         1e:e5:e8:3f:f6:c6:e9:32:9c:a4:16:fe:87:b4:bc:90:00:7b:
         d1:8b:38:02:bd:34:6f:e3:c9:07:36:60:6f:a0:0d:86:5b:63:
         fb:ee:50:d1:0f:c8:61:d4:bb:6a:c1:d9:21:58:67:10:ed:ac:
         3b:93:b5:62:fc:df:e4:57:0d:62:d2:53:f6:38:b5:a3:cd:04:
         25:04:43:24:8c:53:a6:37:df:a9:5b:82:a7:7f:5e:15:74:c6:
         35:6e:59:ab:32:c9:67:d5:1a:10:3b:bc:33:14:17:44:c0:75:
         1d:7d:66:4e:b4:a6:fe:40:67:dd:07:ef:26:62:fe:6b:78:57:
         00:bc:7f:7a:6f:2c:bf:29:5b:cb:64:8b:7e:61:72:51:72:a8:
         68:72:56:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:48:51 2025 by rpki-client