Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0080bb82-5914-3851-a7c3-e0f6d5cabb62.roa
File:                     0080bb82-5914-3851-a7c3-e0f6d5cabb62.roa (raw, json)
Hash identifier:          G0sea5LbhSbPr2FezwWEBu1Nm794Ptspf47qSVLH7vc=
Subject key identifier:   1D:E8:D2:35:59:2D:3B:12:B9:4F:73:D1:6A:AB:62:3B:E9:F2:99:6D
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584A761B5DE9D7911BEDDC8D4680
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0080bb82-5914-3851-a7c3-e0f6d5cabb62.roa
Signing time:             Wed 09 Jul 2025 13:01:04 +0000
ROA not before:           Wed 09 Jul 2025 13:01:04 +0000
ROA not after:            Tue 07 Oct 2025 13:01:04 +0000
asID:                     30036
IP address blocks:        2604:2e88:3000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:76:1b:5d:e9:d7:91:1b:ed:dc:8d:46:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jul  9 13:01:04 2025 GMT
            Not After : Oct  7 13:01:04 2025 GMT
        Subject: CN=c5fdcdde-7aae-4141-bd55-8ff0e21b77c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:9b:3d:e3:1d:27:79:2a:21:eb:31:7c:c3:bf:
                    a8:8c:d0:e8:53:3a:20:f7:74:fa:30:f1:7c:66:d9:
                    6d:16:e6:cd:d6:b2:49:4b:0d:55:6c:46:8a:3c:0c:
                    aa:b3:25:9c:f5:27:c4:29:b0:ea:0d:f5:a6:7a:d6:
                    61:a8:49:8a:d9:69:73:17:a1:5d:ba:8d:c4:fa:a6:
                    53:b3:3d:5e:88:55:1b:1d:22:a1:a1:2a:65:d5:84:
                    30:d4:58:fb:e1:3f:08:56:64:c7:9c:9b:3a:e0:c2:
                    fd:d0:a0:5b:37:ae:28:5c:a9:9d:f3:5b:0e:9c:04:
                    bc:df:0f:c0:06:bc:e0:4a:b9:ea:72:87:b4:43:de:
                    aa:27:19:33:2f:50:a8:ea:f3:54:2b:70:de:35:25:
                    cc:54:b0:91:1d:26:d3:21:0f:a9:4c:2f:37:cc:40:
                    c6:17:f7:8e:63:15:f3:4c:25:55:84:76:14:c9:15:
                    ff:69:49:f2:c8:10:94:d0:72:63:65:72:d0:17:65:
                    5e:7c:17:a1:de:4f:61:d3:4e:32:a0:17:ad:9b:fc:
                    11:2b:9e:34:f9:c6:1b:c4:d3:52:a9:b2:25:d8:29:
                    3b:ba:3b:e3:a4:81:46:d1:ca:3e:c2:a7:5e:4f:27:
                    37:84:47:e9:20:9c:13:50:5f:62:7a:5c:38:9b:10:
                    60:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:E8:D2:35:59:2D:3B:12:B9:4F:73:D1:6A:AB:62:3B:E9:F2:99:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0080bb82-5914-3851-a7c3-e0f6d5cabb62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e88:3000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:b1:f8:84:69:5a:01:4a:b5:90:51:8f:97:0f:ec:e4:c4:a7:
         fe:89:23:7e:6c:0e:58:1b:3a:db:bd:be:7a:12:af:85:5b:aa:
         c9:ba:71:6b:d4:5c:1d:bd:1c:b0:1d:68:27:b9:7f:9e:9d:5c:
         8d:00:b2:29:05:3b:87:d2:9c:95:c7:a8:66:ff:71:a5:4a:72:
         5d:2c:7d:93:1c:d7:f0:e4:5f:e2:2f:41:86:0e:56:11:78:c4:
         00:85:75:c2:42:9b:63:33:ff:81:6a:dc:6b:90:ff:87:29:1a:
         8f:8d:22:bd:12:4a:8c:55:7a:05:c3:ab:40:10:e6:c1:a4:55:
         e4:da:eb:23:e1:99:ce:07:79:e6:9f:f8:2f:75:a7:f5:d8:72:
         20:eb:ba:71:d3:11:f6:c5:1e:a4:61:41:62:81:c6:af:4d:67:
         13:3d:1c:15:66:4e:ca:d3:a6:f6:13:76:09:16:af:8a:7f:85:
         04:d4:52:43:bd:23:e4:38:79:c4:49:b0:c4:36:32:79:09:88:
         82:00:4c:f9:da:ba:c7:af:4b:c2:29:27:d5:67:48:13:d2:bd:
         44:b8:72:42:bc:d0:22:f2:8d:2a:f6:8e:14:ec:78:28:81:87:
         52:90:c5:39:86:e8:72:96:52:ac:53:a5:01:43:74:16:f1:3f:
         9a:93:d9:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:42:54 2025 by rpki-client