Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/6bd8eb70-c4c4-362c-abfe-0e4c9ed06d58.roa
File:                     6bd8eb70-c4c4-362c-abfe-0e4c9ed06d58.roa (raw, json)
Hash identifier:          EPClqHZwSCk6yTnV3oyjAELdjrQZjN8cYZ0dsJazLCg=
Subject key identifier:   87:CD:79:84:34:26:FA:66:06:2B:85:E7:B1:2F:95:99:95:A5:06:62
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F43285849A4BA4850C579B33E38589480
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/6bd8eb70-c4c4-362c-abfe-0e4c9ed06d58.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     30036
IP address blocks:        2604:2e8c:f400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 May 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:48:50:c5:79:b3:3e:38:58:94:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=231590f9-e333-42a6-9c4b-8628a32ea536
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:3f:0e:e9:e0:51:36:6f:b8:66:43:17:81:b5:
                    11:f6:24:6a:81:33:2c:03:69:e1:c5:f2:6f:79:f2:
                    a9:d9:72:77:16:22:48:2f:2b:48:e9:54:64:c1:67:
                    cf:c4:d0:72:42:7f:c3:4f:ee:4b:90:c1:83:72:10:
                    c9:39:4e:e6:ed:67:bc:f0:53:7c:91:fa:7c:c8:bf:
                    d2:fb:42:e0:3b:63:bc:8b:e2:ac:c4:19:09:3f:8e:
                    d4:eb:98:0c:84:ac:34:77:7d:21:b2:58:2e:4f:80:
                    ca:d6:11:02:79:b9:e2:ac:de:b7:82:80:63:7f:da:
                    9c:10:e2:fd:4a:ea:81:d1:84:21:75:7b:51:f0:55:
                    03:cf:ee:50:11:7c:b7:f1:20:2b:3e:44:71:9e:be:
                    cc:96:09:ae:8f:64:93:dd:58:c2:d9:8b:dc:17:63:
                    25:ed:87:9c:01:f6:b6:78:18:00:e1:72:4f:e0:58:
                    cf:ef:b0:11:db:1d:41:5c:4e:fc:a6:0e:a0:d8:a6:
                    6f:5b:65:5e:06:78:89:a2:3d:5c:5f:a5:89:ae:6d:
                    0e:8a:da:77:b3:2f:0a:86:8d:b6:1f:63:72:a0:e6:
                    23:46:ad:37:d9:f4:95:e0:c6:28:41:a9:ce:fb:79:
                    d8:93:82:79:8a:d1:05:28:b7:a4:96:fd:ac:6b:53:
                    a4:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:CD:79:84:34:26:FA:66:06:2B:85:E7:B1:2F:95:99:95:A5:06:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/6bd8eb70-c4c4-362c-abfe-0e4c9ed06d58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8c:f400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:fd:4f:98:b1:f5:f8:6b:c3:74:4a:cf:18:42:6f:f5:5a:19:
         ba:47:b0:dd:92:0d:e4:80:bb:b3:8d:8d:f7:a7:67:3c:a9:22:
         8b:64:e2:35:92:e9:e4:bd:98:20:44:ed:f8:11:b7:f2:69:5b:
         97:d7:d4:98:2e:1e:dc:28:30:66:75:96:b3:d9:8c:6d:7b:50:
         24:16:f2:b1:dc:92:14:d9:a4:9c:09:ae:75:8e:bc:5c:6e:3f:
         34:ae:53:db:10:fa:53:71:42:1d:e6:cb:54:07:89:41:f0:30:
         7a:50:d7:91:95:d5:85:5b:a9:e7:81:c6:64:f4:94:de:22:cc:
         95:6b:95:59:7f:29:b3:2c:46:b7:ad:cf:ca:4f:db:c2:8e:ca:
         b3:b3:08:6e:31:34:ff:96:64:85:d1:c1:77:9a:64:db:8b:7f:
         e5:0f:50:8d:50:31:0f:78:44:21:ef:fd:2e:13:f4:3d:6a:76:
         a9:dd:76:8b:a8:d0:2d:7a:46:f0:da:5f:c8:00:3f:54:2a:45:
         e5:aa:b0:18:af:78:9a:64:14:56:06:b3:ad:ea:79:d8:9c:91:
         4f:b5:f2:e0:46:94:88:61:af:22:f4:92:88:fe:ff:9a:22:12:
         98:40:45:85:b2:16:fe:ee:33:8d:f9:a9:5f:27:52:fd:64:1b:
         da:6c:4f:25
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEmkukhQxXmzPjhYlIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk
MjMxNTkwZjktZTMzMy00MmE2LTljNGItODYyOGEzMmVhNTM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5j8O6eBRNm+4ZkMXgbUR9iRqgTMsA2nhxfJv
efKp2XJ3FiJILytI6VRkwWfPxNByQn/DT+5LkMGDchDJOU7m7We88FN8kfp8yL/S
+0LgO2O8i+KsxBkJP47U65gMhKw0d30hslguT4DK1hECebnirN63goBjf9qcEOL9
SuqB0YQhdXtR8FUDz+5QEXy38SArPkRxnr7Mlgmuj2ST3VjC2YvcF2Ml7YecAfa2
eBgA4XJP4FjP77AR2x1BXE78pg6g2KZvW2VeBniJoj1cX6WJrm0Oitp3sy8Kho22
H2NyoOYjRq032fSV4MYoQanO+3nYk4J5itEFKLeklv2sa1Ok2wIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFIfNeYQ0JvpmBiuF57EvlZmVpQZiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNmJkOGViNzAtYzRjNC0z
NjJjLWFiZmUtMGU0YzllZDA2ZDU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujPQw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEARP1PmLH1+GvDdErPGEJv9VoZukew3ZIN5IC7s42N96dnPKkii2Ti
NZLp5L2YIETt+BG38mlbl9fUmC4e3CgwZnWWs9mMbXtQJBbysdySFNmknAmudY68
XG4/NK5T2xD6U3FCHebLVAeJQfAwelDXkZXVhVup54HGZPSU3iLMlWuVWX8psyxG
t63Pyk/bwo7Ks7MIbjE0/5ZkhdHBd5pk24t/5Q9QjVAxD3hEIe/9LhP0PWp2qd12
i6jQLXpG8NpfyAA/VCpF5aqwGK94mmQUVgazrep52JyRT7Xy4EaUiGGvIvSSiP7/
miISmEBFhbIW/u4zjfmpXydS/WQb2mxPJQ==
-----END CERTIFICATE-----
Generated at Thu May 15 01:06:36 2025 by rpki-client