Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/13f1be87-f0fe-33e2-bb02-2b398d03b667.roa
File:                     13f1be87-f0fe-33e2-bb02-2b398d03b667.roa (raw, json)
Hash identifier:          vR1mMfEQcraVu0GgkmDVdjolsbGtPp+w0+3nzuU5SX4=
Subject key identifier:   D1:00:15:46:F6:A4:1C:91:7F:C7:DB:62:6A:06:F3:86:00:3D:40:8C
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584A8146417C333AC2EA7E402E60
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/13f1be87-f0fe-33e2-bb02-2b398d03b667.roa
Signing time:             Sun 13 Jul 2025 13:01:03 +0000
ROA not before:           Sun 13 Jul 2025 13:01:03 +0000
ROA not after:            Sat 11 Oct 2025 13:01:03 +0000
asID:                     30036
IP address blocks:        2604:2e89:3800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:81:46:41:7c:33:3a:c2:ea:7e:40:2e:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jul 13 13:01:03 2025 GMT
            Not After : Oct 11 13:01:03 2025 GMT
        Subject: CN=19978336-6202-4a69-876b-e0b3929970bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:58:3c:b2:0c:29:a0:95:24:99:a3:ed:91:03:
                    dc:c3:fc:8d:65:92:36:59:ae:a5:fd:c8:5e:d3:38:
                    37:ee:f7:4f:76:16:b7:40:a7:e1:4b:af:7e:96:c1:
                    ed:57:ec:7d:0b:2f:67:da:ff:d3:71:d1:91:0a:12:
                    e6:43:11:32:c9:e1:ef:55:23:7b:ec:81:41:68:6f:
                    c0:d9:35:24:18:14:3f:4a:c9:de:9a:a5:da:a7:2a:
                    05:3f:46:df:3f:22:61:ca:47:b7:6c:01:7c:ac:f9:
                    00:14:ff:5e:36:9e:bd:b7:96:59:d0:b0:fb:00:76:
                    fc:c1:49:b7:eb:cd:5b:36:85:20:c6:3c:6d:38:fc:
                    33:4c:7a:f3:b2:06:80:2c:8b:00:b3:7e:b3:3a:c6:
                    1a:98:6a:91:17:f1:21:6f:a2:f8:a9:26:cb:85:66:
                    9d:ef:39:9b:16:8b:50:94:84:0d:8f:a3:6d:f3:1c:
                    00:20:45:3e:88:d9:c5:c3:72:cc:c3:c1:57:2a:7c:
                    d2:a4:5a:08:74:99:d9:8d:0f:16:c2:8d:66:6d:5d:
                    ed:c4:2c:28:a1:92:49:4e:e6:05:79:9e:01:e4:14:
                    55:fc:f8:01:4d:dd:ea:06:1f:8d:4c:88:f4:d5:80:
                    01:ef:9b:59:dc:1f:4f:10:9a:dd:ee:ea:7c:d4:ef:
                    80:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:00:15:46:F6:A4:1C:91:7F:C7:DB:62:6A:06:F3:86:00:3D:40:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/13f1be87-f0fe-33e2-bb02-2b398d03b667.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e89:3800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:e0:66:75:98:cf:7f:3f:cf:97:d4:51:07:30:74:5b:bd:1c:
         cb:3d:60:20:5f:40:42:c2:16:f3:d7:20:b7:f6:60:9c:21:ea:
         ee:19:64:db:cd:c3:25:01:13:81:d7:3c:d2:77:5d:0b:1c:df:
         14:5c:22:cd:0c:d8:e9:1e:ba:ec:57:e9:24:d7:9b:92:7b:40:
         30:df:ee:48:70:c9:f5:4f:30:e7:6a:a1:8a:e9:9f:29:e3:24:
         9c:26:74:c5:9f:ab:37:4b:4f:83:76:9e:e9:5d:6a:fe:be:2c:
         71:44:89:08:0a:4c:9f:43:6b:85:07:91:8f:0f:f2:19:f5:ee:
         fa:0a:d3:43:94:cf:70:c0:0d:76:32:83:66:1f:d5:fe:74:39:
         18:2b:c8:ca:29:1f:b8:fa:5d:22:d8:54:97:34:a2:bd:07:e1:
         80:23:7a:a4:44:d0:72:5b:7b:48:b7:06:4e:50:fc:3b:0a:d8:
         6f:1c:65:1c:fb:ef:8b:62:01:31:57:92:70:0d:7b:ff:e4:0f:
         bf:3b:eb:e3:69:23:20:1c:0f:3e:40:f7:df:8d:b4:08:eb:f0:
         23:cb:6f:46:ca:da:5e:27:e0:1b:72:c6:65:76:4d:bd:b0:58:
         04:14:1e:41:32:20:d3:06:89:f2:aa:3b:91:f8:2e:b7:34:53:
         ac:5b:b4:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:17:24 2025 by rpki-client