Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4c3de2f2-204a-3c51-847f-60a6fd0c4d1b.roa
File:                     4c3de2f2-204a-3c51-847f-60a6fd0c4d1b.roa (raw, json)
Hash identifier:          KrBqirWgjWlJ7unooRw/Er8xpteEB48M1I5q495jBPw=
Subject key identifier:   AD:86:57:26:06:43:96:56:A9:48:8A:24:7D:D5:5B:86:22:47:6A:1D
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584A2C200B61561387703777F100
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4c3de2f2-204a-3c51-847f-60a6fd0c4d1b.roa
Signing time:             Fri 13 Jun 2025 01:00:51 +0000
ROA not before:           Fri 13 Jun 2025 01:00:51 +0000
ROA not after:            Thu 11 Sep 2025 01:00:51 +0000
asID:                     30036
IP address blocks:        2604:2e8d:4c00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2c:20:0b:61:56:13:87:70:37:77:f1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jun 13 01:00:51 2025 GMT
            Not After : Sep 11 01:00:51 2025 GMT
        Subject: CN=5cc21724-bd0e-4168-ae27-b811d3f0ab4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:87:d9:41:5c:b9:d0:b3:97:b7:f3:a5:32:72:
                    fa:4a:ec:07:2e:f6:96:9f:c2:c8:d4:46:b4:7f:e0:
                    87:66:da:0e:fd:9c:db:c4:49:e1:8a:f6:be:10:7c:
                    bf:62:ee:1f:89:a9:83:98:51:6d:2c:26:e4:e5:d1:
                    c3:15:db:9d:76:92:3e:11:c3:dc:a6:aa:ad:1e:02:
                    ab:00:c0:3c:ed:cf:67:1e:70:95:96:8e:aa:b1:6f:
                    cc:ac:d1:c7:48:92:62:b7:9b:af:5f:b6:1d:aa:e9:
                    3e:37:5a:ae:00:82:b2:73:77:5b:f8:57:d1:f5:a5:
                    e1:6a:eb:06:ae:77:57:23:11:ef:63:3a:fe:6f:98:
                    22:a0:48:3e:06:10:c8:bf:d1:c2:61:e1:98:77:4c:
                    ce:f0:53:c0:d6:23:2a:4f:81:46:7b:e2:78:0f:11:
                    2a:7e:87:43:ce:8c:7d:78:00:58:34:5f:9a:24:d8:
                    9a:51:8d:79:fb:46:15:f6:43:9a:74:59:d7:c5:0d:
                    ff:af:56:5a:da:c3:00:aa:4d:95:a4:fe:b6:9d:9f:
                    7a:3c:c5:a5:6e:87:4d:0f:d4:4b:89:d8:ae:ee:20:
                    d0:6b:e0:54:0a:aa:38:42:9e:80:28:fb:d9:95:6d:
                    24:b0:e3:ab:ea:82:56:fc:43:1a:5b:73:3c:f6:bc:
                    d9:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:86:57:26:06:43:96:56:A9:48:8A:24:7D:D5:5B:86:22:47:6A:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4c3de2f2-204a-3c51-847f-60a6fd0c4d1b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8d:4c00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:c7:4e:8a:b0:28:1b:09:d6:b9:03:0b:66:3a:d7:b5:d8:e0:
         5a:ba:29:57:78:58:04:b8:ab:ca:a7:9a:1a:96:92:34:ec:a9:
         40:d4:57:89:d4:91:4e:4a:8e:a8:70:fe:ff:7d:73:ad:fb:fa:
         78:78:0f:e6:4b:15:76:fb:ab:53:6a:f3:3e:c1:49:6b:e3:f9:
         fe:db:67:9f:2d:50:76:b8:cd:c1:39:05:0e:80:4a:13:d7:95:
         a3:3b:7d:c1:1e:78:a8:46:01:33:4d:00:d5:fd:72:ef:a4:38:
         0d:8f:08:b4:9b:8a:a2:f4:e3:2a:b4:0f:86:ac:60:8f:98:67:
         c2:10:59:ff:72:95:7e:e7:23:49:10:88:aa:8d:2e:02:df:9a:
         eb:65:a6:83:75:79:e4:45:0a:84:28:a0:88:37:8d:d5:1b:b2:
         b4:43:91:bb:36:64:1f:ec:de:d3:4d:1b:83:23:78:34:09:57:
         31:25:1e:bd:38:5b:d0:73:43:33:fd:3b:cb:ce:58:c3:95:9a:
         fd:7d:57:da:9a:b1:75:37:29:96:7f:f2:99:d3:63:b7:0a:dd:
         a0:b6:ec:f1:50:6b:6f:a7:ae:31:1b:72:96:94:5d:0d:4b:b5:
         6a:bd:ab:53:97:39:eb:5d:7d:38:54:48:d6:a1:f6:3f:42:fb:
         65:66:db:e4
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEosIAthVhOHcDd38QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI1MDYxMzAxMDA1MVoXDTI1MDkxMTAxMDA1MVowLzEtMCsGA1UEAxMk
NWNjMjE3MjQtYmQwZS00MTY4LWFlMjctYjgxMWQzZjBhYjRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlIfZQVy50LOXt/OlMnL6SuwHLvaWn8LI1Ea0
f+CHZtoO/ZzbxEnhiva+EHy/Yu4fiamDmFFtLCbk5dHDFduddpI+EcPcpqqtHgKr
AMA87c9nHnCVlo6qsW/MrNHHSJJit5uvX7Ydquk+N1quAIKyc3db+FfR9aXhausG
rndXIxHvYzr+b5gioEg+BhDIv9HCYeGYd0zO8FPA1iMqT4FGe+J4DxEqfodDzox9
eABYNF+aJNiaUY15+0YV9kOadFnXxQ3/r1Za2sMAqk2VpP62nZ96PMWlbodND9RL
idiu7iDQa+BUCqo4Qp6AKPvZlW0ksOOr6oJW/EMaW3M89rzZwQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFK2GVyYGQ5ZWqUiKJH3VW4YiR2odMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNGMzZGUyZjItMjA0YS0z
YzUxLTg0N2YtNjBhNmZkMGM0ZDFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujUww
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEABMdOirAoGwnWuQMLZjrXtdjgWropV3hYBLiryqeaGpaSNOypQNRX
idSRTkqOqHD+/31zrfv6eHgP5ksVdvurU2rzPsFJa+P5/ttnny1QdrjNwTkFDoBK
E9eVozt9wR54qEYBM00A1f1y76Q4DY8ItJuKovTjKrQPhqxgj5hnwhBZ/3KVfucj
SRCIqo0uAt+a62Wmg3V55EUKhCigiDeN1RuytEORuzZkH+ze000bgyN4NAlXMSUe
vThb0HNDM/07y85Yw5Wa/X1X2pqxdTcpln/ymdNjtwrdoLbs8VBrb6euMRtylpRd
DUu1ar2rU5c56119OFRI1qH2P0L7ZWbb5A==
-----END CERTIFICATE-----
Generated at Tue Jul 1 10:00:07 2025 by rpki-client