Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/030e8a48-2429-3aa8-94b1-fa33f945302e.roa
File:                     030e8a48-2429-3aa8-94b1-fa33f945302e.roa (raw, json)
Hash identifier:          hguM3pOeixhG3wV42UO3ML5DcVcQdi3A0+StDChXbOc=
Subject key identifier:   73:F8:39:B7:D0:D7:F6:10:01:AA:3F:E6:77:30:AF:E3:31:D0:BE:42
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584A81463E05E5A9F613A9BB3D00
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/030e8a48-2429-3aa8-94b1-fa33f945302e.roa
Signing time:             Sun 13 Jul 2025 13:01:03 +0000
ROA not before:           Sun 13 Jul 2025 13:01:03 +0000
ROA not after:            Sat 11 Oct 2025 13:01:03 +0000
asID:                     30036
IP address blocks:        2604:2e89:4800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:81:46:3e:05:e5:a9:f6:13:a9:bb:3d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jul 13 13:01:03 2025 GMT
            Not After : Oct 11 13:01:03 2025 GMT
        Subject: CN=fc2af579-cb9b-4b21-b256-9d1f6a75510d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:d8:07:a3:94:a5:da:4a:e4:f8:ed:a1:71:ea:
                    8a:48:a2:3c:67:bb:fb:6c:e0:53:9f:f8:ed:90:8a:
                    a2:75:a3:cf:46:0b:4d:6e:2f:0e:cc:99:28:bc:d0:
                    f5:3f:64:b3:b0:00:63:ef:71:d9:62:e3:27:8e:15:
                    0f:45:b1:87:34:5d:dd:16:4f:f6:dd:e3:ca:01:20:
                    32:ad:72:d7:8f:ee:7b:da:64:4a:c3:0f:86:fa:f1:
                    de:85:61:62:01:09:d7:bd:98:4f:42:2a:75:17:85:
                    bf:03:c5:9a:b0:c5:6e:bb:c8:35:6d:e2:73:2f:fd:
                    c3:6a:ff:e6:3e:b3:3f:50:e6:5c:df:53:9b:40:dd:
                    5d:28:36:2c:db:3c:29:c1:81:84:7d:06:df:f8:6f:
                    1a:4f:17:0c:8c:d9:4f:43:76:da:68:80:a1:44:61:
                    54:42:09:07:e3:f4:df:f0:55:c0:ad:18:b4:30:e1:
                    ab:f8:61:13:b6:d1:96:4d:13:1e:33:cb:5e:10:26:
                    03:66:be:4a:0f:9a:fe:63:fe:cc:93:dc:73:4f:a9:
                    6d:35:00:3a:c7:28:a2:86:43:52:57:d9:d2:e0:a7:
                    8d:56:04:99:04:e2:41:ef:80:8e:f7:26:49:13:b3:
                    43:d7:1f:ca:2c:d0:0e:e3:c3:e3:e2:d4:75:49:8e:
                    85:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:F8:39:B7:D0:D7:F6:10:01:AA:3F:E6:77:30:AF:E3:31:D0:BE:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/030e8a48-2429-3aa8-94b1-fa33f945302e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e89:4800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:4f:d8:83:fd:56:f7:e8:75:1d:81:b6:4c:23:df:bf:98:1a:
         f8:3c:92:a6:5d:18:09:0c:f7:3c:f2:65:d2:fb:ba:68:1d:08:
         e8:fe:fe:c7:a8:29:9f:3e:1e:ae:01:38:81:be:f1:d1:60:ce:
         92:b4:7e:29:16:50:92:7a:bc:e2:2a:ae:9c:5e:3f:be:a8:bd:
         30:99:b7:b0:0d:cf:ae:e4:15:34:8b:9a:20:58:2d:96:fe:cc:
         e3:48:e3:d5:1c:45:34:d4:72:7d:35:08:b7:aa:b6:90:34:f8:
         46:2a:a1:c5:de:6a:7f:c9:88:4d:83:bb:7f:44:b3:bd:bc:5e:
         9e:e1:88:96:f5:3e:f8:06:b2:98:1c:a2:17:2b:72:fa:f6:54:
         f1:1e:c4:0e:4f:9d:40:29:99:28:fe:fb:90:fe:94:4c:67:77:
         7d:37:c6:3c:9e:c0:88:8a:8a:28:40:f8:c8:7b:1d:36:9f:4e:
         bf:37:c1:b2:2e:80:76:e6:33:dc:df:44:1a:da:38:07:09:aa:
         0e:7c:a4:12:19:d3:89:b0:95:46:c6:c0:76:8a:f9:94:a2:f0:
         fd:a5:1f:c2:30:4c:3b:a2:43:f8:10:1f:21:28:40:13:b4:9c:
         a1:8e:5f:92:82:c2:e8:c2:10:70:e0:c6:75:2a:58:c5:b6:74:
         6b:30:44:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:59:16 2025 by rpki-client