Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bb0b8e75-408a-30d1-b36f-c42a8861ca68.roa
File:                     bb0b8e75-408a-30d1-b36f-c42a8861ca68.roa (raw, json)
Hash identifier:          7qaGTnFBG87oAe8lrXZt3kF5tALKLfx4LeaO8VzNeCg=
Subject key identifier:   70:FE:FE:D9:1D:1A:E2:86:1E:07:BB:C0:99:80:C9:13:99:0C:57:37
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F43285849B63CE2BEED61B21CBE8759A0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bb0b8e75-408a-30d1-b36f-c42a8861ca68.roa
Signing time:             Thu 01 May 2025 19:33:37 +0000
ROA not before:           Thu 01 May 2025 19:33:37 +0000
ROA not after:            Wed 30 Jul 2025 19:33:37 +0000
asID:                     19905
IP address blocks:        2604:2e87:1000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b6:3c:e2:be:ed:61:b2:1c:be:87:59:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: May  1 19:33:37 2025 GMT
            Not After : Jul 30 19:33:37 2025 GMT
        Subject: CN=a0b89982-7d7b-4752-90bb-9e710a0ef653
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:73:e2:9c:dd:59:c8:88:78:1f:a1:4b:ac:93:
                    01:4b:ca:d2:8b:77:29:73:c8:82:08:f5:8d:ee:f2:
                    df:2c:f4:ef:a8:07:e7:c5:31:f1:df:d8:a6:42:51:
                    3f:4c:ed:06:a0:82:76:c6:29:1f:d7:da:86:88:00:
                    bf:76:ac:de:07:a7:bf:b4:c2:05:43:59:83:d1:0a:
                    ee:6d:c6:91:ea:1d:6b:50:a8:66:2c:cc:f7:2f:f4:
                    58:4b:54:1c:42:44:09:60:99:8e:b6:ae:8b:a0:d8:
                    8f:81:9b:4f:6d:9f:7e:bb:e3:df:77:4c:1e:49:c5:
                    b3:71:de:e8:24:7b:7b:97:6d:3c:b2:68:73:f2:eb:
                    70:68:60:49:b1:cc:14:01:c3:d9:a0:52:35:d5:eb:
                    27:ed:03:33:8f:72:81:88:96:84:69:2f:05:04:b2:
                    68:c2:3e:ec:07:9b:97:40:a5:5f:e1:a4:0d:52:dc:
                    6b:4b:54:70:d6:22:9f:c0:49:c1:13:2c:5c:78:69:
                    ff:07:5b:5d:de:8b:ef:0e:76:ff:42:09:d3:e0:cc:
                    c0:dc:24:3c:f6:3a:72:db:13:4a:1f:b4:62:a0:61:
                    0a:b4:a5:85:01:b6:fa:1d:13:d9:75:ab:7c:54:9a:
                    be:ac:56:b1:f5:97:6c:99:cd:eb:b0:e1:1b:d4:61:
                    a1:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:FE:FE:D9:1D:1A:E2:86:1E:07:BB:C0:99:80:C9:13:99:0C:57:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bb0b8e75-408a-30d1-b36f-c42a8861ca68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e87:1000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:a6:9a:d0:7e:7d:cb:48:18:eb:6c:b9:9f:af:f5:1d:72:11:
         3e:78:87:8b:21:b8:6c:01:39:e5:94:a4:25:10:c2:00:6a:05:
         7e:04:f4:f1:d1:e1:cc:b7:6a:84:a8:44:a7:f8:63:7e:d5:91:
         a4:9b:0e:83:25:dd:22:ef:b2:3b:87:73:68:f5:d3:be:54:b6:
         c2:17:6f:98:be:c8:97:0d:8a:71:d0:93:79:21:6f:07:2f:37:
         1c:ad:d4:60:5d:d6:93:71:b3:34:a1:64:d9:45:5f:30:07:e6:
         76:6a:3a:a2:7a:1e:cd:28:a0:7e:e2:4c:da:c6:0e:f5:74:33:
         fc:3d:7e:19:e5:1a:43:77:37:8b:5d:f6:82:20:d0:b2:b8:e9:
         1c:f8:a2:0b:1f:93:05:c4:45:33:7c:1d:14:07:5f:c3:51:67:
         8f:82:66:22:1e:bd:03:a0:74:cb:e9:b8:a2:bd:79:72:0b:f6:
         92:e8:7d:48:dc:93:1c:b2:6e:d3:98:a5:25:aa:0b:8a:7f:65:
         43:7d:2b:94:b9:58:ec:f7:11:04:e4:47:02:f7:bf:fc:d9:46:
         e0:b1:58:96:2e:01:b4:5f:a0:c6:5a:ac:b0:f0:f5:88:92:80:
         35:2e:be:fe:cf:cc:2f:1c:ef:c8:cb:5f:52:b6:69:cf:3f:49:
         2f:fd:e4:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 16:50:26 2025 by rpki-client