Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/043e1d1c-7030-3cea-8e6c-6cbe2de9b6ce.roa
File:                     043e1d1c-7030-3cea-8e6c-6cbe2de9b6ce.roa (raw, json)
Hash identifier:          GXdOsEAoQkCr5fYmfpP79+8AK9Vxw716CTr+1fa/JWw=
Subject key identifier:   DA:1E:10:4F:3B:74:92:76:F9:7A:9C:AB:56:F9:4A:51:8C:18:07:4E
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584A86DB70F1FC15CD9C53E8B3C0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/043e1d1c-7030-3cea-8e6c-6cbe2de9b6ce.roa
Signing time:             Tue 15 Jul 2025 13:01:04 +0000
ROA not before:           Tue 15 Jul 2025 13:01:04 +0000
ROA not after:            Mon 13 Oct 2025 13:01:04 +0000
asID:                     30036
IP address blocks:        2604:2e8b:2000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:86:db:70:f1:fc:15:cd:9c:53:e8:b3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jul 15 13:01:04 2025 GMT
            Not After : Oct 13 13:01:04 2025 GMT
        Subject: CN=1836ae01-166b-4669-9270-17e142e79fcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:6b:b8:7c:c1:f8:b6:2a:cb:d8:0d:d6:21:81:
                    78:98:b5:5b:35:1e:45:44:ed:f2:a7:a7:33:77:09:
                    ad:f2:a5:0d:fa:12:0e:9a:4d:c5:42:f2:e1:58:31:
                    85:8b:d5:7c:ee:cc:d8:ea:6f:dc:76:d2:f3:75:59:
                    31:14:02:2a:7a:58:b0:57:a0:e2:27:00:68:04:04:
                    d5:df:6f:aa:bc:39:f7:5c:13:44:11:66:e6:3f:af:
                    5c:b3:83:5b:87:6c:4c:3c:71:65:f8:a5:28:83:bf:
                    13:53:f2:43:59:96:a6:bb:0b:f9:0c:44:f4:fd:d7:
                    27:e7:78:5b:4c:d6:d6:2d:f2:b9:da:56:1c:b9:45:
                    6e:37:94:8c:5c:0b:fe:6c:fb:81:cb:e9:b4:6b:e2:
                    59:36:22:a2:70:cb:05:61:74:e0:b4:3a:88:cd:20:
                    88:0c:9b:0c:71:af:f4:47:88:2f:d5:38:03:8f:9b:
                    bb:e9:8a:d6:07:09:27:96:93:01:3f:bc:38:f1:1a:
                    40:a3:4f:06:ee:79:52:8f:7d:af:65:69:54:4c:46:
                    29:1f:75:dc:01:36:2a:d3:c3:19:59:28:90:77:6c:
                    cc:aa:bf:63:98:20:cd:88:fa:9b:1b:6a:d7:bd:da:
                    39:42:97:dd:51:80:bd:07:83:fb:34:46:f8:1a:6a:
                    19:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:1E:10:4F:3B:74:92:76:F9:7A:9C:AB:56:F9:4A:51:8C:18:07:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/043e1d1c-7030-3cea-8e6c-6cbe2de9b6ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8b:2000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:8f:09:6d:a2:f1:6a:e9:a7:a5:24:a9:75:8a:59:4f:1c:bf:
         36:52:82:42:18:21:f8:1e:63:35:9e:4f:5f:2d:e3:5e:0e:9a:
         ca:ec:77:f5:72:2f:40:b1:88:f9:94:33:45:4f:db:86:24:bb:
         3e:8b:c9:e3:63:f0:76:a5:2b:a3:bd:52:54:78:a1:10:c7:06:
         29:41:30:c1:d0:89:8b:cc:83:c4:15:10:57:c1:c0:ec:ad:d1:
         df:91:56:2e:33:b1:47:31:be:50:d7:77:b1:f0:8b:76:67:08:
         4c:95:18:79:35:88:df:48:db:f4:a6:3b:bf:74:ba:ba:1c:76:
         cb:c6:4d:08:0a:fd:25:b3:a7:2f:5c:29:d8:17:82:95:4a:75:
         11:d4:dd:59:8c:1b:f4:b6:f5:5a:e7:4c:56:af:19:64:f9:c7:
         b5:37:5c:6b:3e:e5:32:2d:99:6b:c1:5f:a7:87:6d:28:1a:eb:
         54:4a:53:ca:bc:c4:3b:19:30:d1:2e:a2:8a:3c:54:5b:a7:7b:
         86:a4:9f:59:49:e3:8a:3a:d6:b4:02:44:29:68:fa:7a:09:59:
         cc:27:c2:43:e7:cc:10:62:9c:26:19:31:1d:df:ea:f1:d0:cb:
         8b:d3:98:4a:72:5c:62:92:ca:1a:8f:51:e1:1f:6a:ef:27:c4:
         6f:78:93:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 00:38:36 2025 by rpki-client