Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/28fdf0f6-ef7d-305c-a395-adc1a76c85b4.roa
File:                     28fdf0f6-ef7d-305c-a395-adc1a76c85b4.roa (raw, json)
Hash identifier:          76IGPkIW2rTaVuT2j/0Dqe0v8uvSYP+S5pq9AaK/C8s=
Subject key identifier:   8D:F4:D4:21:32:72:59:EA:D9:82:11:6A:50:55:4E:19:11:E7:81:E1
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F43285849A8E9DD0D450DFE9DB9C701C0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/28fdf0f6-ef7d-305c-a395-adc1a76c85b4.roa
Signing time:             Sun 27 Apr 2025 01:00:46 +0000
ROA not before:           Sun 27 Apr 2025 01:00:46 +0000
ROA not after:            Sat 26 Jul 2025 01:00:46 +0000
asID:                     30036
IP address blocks:        2604:2e8d:b800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 May 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a8:e9:dd:0d:45:0d:fe:9d:b9:c7:01:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Apr 27 01:00:46 2025 GMT
            Not After : Jul 26 01:00:46 2025 GMT
        Subject: CN=9729f24b-7ae6-4bc5-9549-1bb7138bf49e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c9:e8:06:a7:9d:fd:57:f5:27:44:c1:97:20:
                    14:10:8d:69:fd:24:cd:3d:3e:12:b1:9d:96:78:4e:
                    8d:06:20:bb:05:1e:b2:fb:b0:29:ab:b7:01:22:ab:
                    f2:f5:b9:a8:09:d2:bc:9e:3b:ec:81:23:12:e2:38:
                    99:f1:bf:cf:16:b6:3b:d8:7e:e9:12:a1:d8:c2:56:
                    f2:df:10:50:bf:22:16:4b:e2:67:29:d4:dc:14:6e:
                    f0:2d:1f:00:9e:32:0c:ad:dc:a4:f9:53:2f:df:23:
                    65:fb:95:2f:4a:4a:49:5b:e7:a0:da:26:70:60:4b:
                    9e:fb:2f:30:26:32:75:67:93:8e:11:e6:f2:2a:79:
                    47:1b:76:fd:27:97:ac:2c:13:ef:85:51:06:58:13:
                    08:b0:7c:e0:2b:26:8f:1b:11:cd:5b:f7:8d:14:8e:
                    c8:71:e2:ea:2d:bd:c1:c6:0c:88:1a:0b:36:ee:44:
                    ff:c6:6e:50:c6:58:0c:44:a0:9f:76:bc:a0:68:1c:
                    a2:dd:ea:7d:55:e7:db:1d:c7:34:e5:af:78:2f:2c:
                    8c:d5:21:18:4d:a4:65:91:db:88:c1:cf:17:d1:cb:
                    b2:4a:39:f2:8e:b9:13:5f:95:23:6f:67:17:20:7e:
                    b8:98:1e:90:bc:2c:b7:ad:17:9d:7e:a6:5c:6e:25:
                    90:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:F4:D4:21:32:72:59:EA:D9:82:11:6A:50:55:4E:19:11:E7:81:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/28fdf0f6-ef7d-305c-a395-adc1a76c85b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8d:b800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:97:9a:b3:95:04:37:31:ca:de:52:ed:ee:11:9f:b0:08:16:
         49:8a:87:8b:76:9c:6f:4a:41:9a:63:2f:10:d5:12:cf:22:83:
         e3:04:c9:ca:96:2c:81:1f:c7:d3:81:ca:d6:5e:d9:34:c6:4d:
         18:5e:fc:b3:e6:b2:05:c0:90:1b:da:1b:46:e7:86:4c:9f:21:
         ac:3a:ca:14:81:93:aa:2e:ed:7c:58:47:fe:30:07:9b:d9:9d:
         93:c0:90:fa:24:db:42:c8:e7:dd:39:cf:6d:67:87:dd:4e:7b:
         37:fb:40:ac:c2:5f:ee:76:9f:76:1c:91:dd:32:cb:59:71:37:
         38:5b:8c:c2:b2:8b:d4:1e:91:9b:17:04:d1:cc:a0:dc:d9:53:
         ea:ae:a0:51:2c:e2:d7:58:2e:d3:54:26:2e:74:52:5e:d6:a1:
         da:44:34:3f:c3:dd:3d:cd:27:5d:88:1f:4a:52:5d:50:cf:a1:
         ac:70:f6:22:59:f1:73:1a:fa:8f:22:4c:a6:7f:a4:ac:de:a1:
         8d:86:fd:40:91:73:30:3f:ce:d6:fd:38:7f:df:5b:e9:e9:a9:
         46:c0:8d:7c:c4:9d:f2:6a:5d:b1:27:4d:74:2a:23:fd:70:09:
         f5:c6:37:72:46:35:68:62:a5:a6:14:48:bc:77:c0:ca:18:2d:
         4b:22:6b:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 01:23:17 2025 by rpki-client