Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1be280b1-76ec-3b34-8a6b-1cf4708608e0.roa
File:                     1be280b1-76ec-3b34-8a6b-1cf4708608e0.roa (raw, json)
Hash identifier:          exxbjGXpDdafEJG6UEovFJjYSSEPUGjHfnxuK2QIv3Q=
Subject key identifier:   49:65:AE:F0:71:9F:A5:E1:4B:16:0D:BB:34:43:FD:33:1C:18:CF:04
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584A8412583A8CDDAF6C8D071240
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1be280b1-76ec-3b34-8a6b-1cf4708608e0.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     30036
IP address blocks:        2604:2e8e:f400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:58:3a:8c:dd:af:6c:8d:07:12:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=fdef17dd-6e5b-46d0-be2b-66474bd86b46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:7f:44:24:8d:b7:97:c0:a1:24:5c:77:6e:59:
                    f2:24:da:a2:28:f5:48:fc:18:fc:eb:8f:53:ff:15:
                    49:eb:02:ed:b6:7d:da:23:96:2b:8e:48:73:c7:fb:
                    41:79:d4:13:d4:fd:3b:8e:9f:ee:1f:27:52:45:c0:
                    af:74:79:48:4e:d7:89:d3:b5:63:c5:4c:f7:33:d5:
                    47:b5:46:71:ae:b2:c3:18:e1:8e:dd:f6:05:eb:36:
                    69:e5:d6:62:53:98:31:a8:e2:47:79:ea:21:5d:26:
                    de:6f:12:33:99:e6:d2:de:f8:38:01:98:d6:d3:74:
                    5a:56:ae:ec:b1:c9:e8:94:19:a7:bb:5d:7d:41:1b:
                    cc:4b:10:27:97:0e:9f:a6:f2:cc:fb:a8:26:ee:d4:
                    81:21:e0:34:02:5a:3c:d2:a2:33:b1:52:22:b5:74:
                    1b:86:df:43:e5:43:17:36:1f:0c:33:cb:fc:22:08:
                    98:b7:cf:78:37:13:bc:ea:bd:95:06:a1:70:be:1f:
                    e3:9a:2c:78:cd:d2:0e:cf:26:3c:92:25:bc:77:b8:
                    0c:2e:34:d7:4a:bc:fa:fc:96:6e:f5:47:ec:0a:86:
                    ef:f9:26:22:90:24:77:7d:b9:1d:e1:85:1d:fc:a7:
                    7a:86:2c:d1:1f:12:f9:0d:9e:fc:d0:57:2c:8a:df:
                    45:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:65:AE:F0:71:9F:A5:E1:4B:16:0D:BB:34:43:FD:33:1C:18:CF:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1be280b1-76ec-3b34-8a6b-1cf4708608e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8e:f400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:dc:b6:9b:f0:67:d3:7e:9c:2f:40:3c:36:35:4d:95:5e:00:
         93:78:7e:4f:b4:f3:97:26:df:d3:b5:21:28:1e:de:f1:57:45:
         5d:c7:bf:65:ea:15:79:08:13:ed:70:57:62:07:40:9b:b6:f6:
         65:23:55:b9:fe:f0:27:98:f6:7c:90:0b:1b:b0:72:15:94:31:
         ef:19:8a:c2:76:91:f1:4f:0a:fb:1e:9e:e8:08:04:16:7a:70:
         e1:19:43:04:6f:37:9e:3d:a6:d7:fb:6e:c0:8f:6b:4b:e2:19:
         f8:1c:78:5a:59:e5:3f:46:5d:4c:14:5c:6b:e2:3a:bf:94:40:
         6e:ac:b1:23:0b:17:75:7c:fd:b8:9f:b0:35:0f:2a:53:df:3a:
         e3:58:c9:03:30:74:d1:9d:67:15:c7:3c:b2:09:d3:c0:08:96:
         af:e5:ba:c9:21:51:df:78:5d:a4:b9:44:83:6b:97:ce:f3:8f:
         e0:99:e9:c1:24:f0:20:5b:06:14:73:62:d5:28:76:fb:0c:59:
         70:5c:f6:4e:3a:20:07:f1:7f:86:48:6f:40:c8:d0:5f:e9:42:
         9f:95:64:c9:73:e1:ca:04:ee:a1:e9:29:d4:0e:ac:d5:7f:9d:
         59:13:6d:ad:e8:ac:65:44:f8:b8:98:52:6d:4f:47:dd:1c:a0:
         17:74:7a:fe
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEqEElg6jN2vbI0HEkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk
ZmRlZjE3ZGQtNmU1Yi00NmQwLWJlMmItNjY0NzRiZDg2YjQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsH9EJI23l8ChJFx3blnyJNqiKPVI/Bj8649T
/xVJ6wLttn3aI5Yrjkhzx/tBedQT1P07jp/uHydSRcCvdHlITteJ07VjxUz3M9VH
tUZxrrLDGOGO3fYF6zZp5dZiU5gxqOJHeeohXSbebxIzmebS3vg4AZjW03RaVq7s
scnolBmnu119QRvMSxAnlw6fpvLM+6gm7tSBIeA0Alo80qIzsVIitXQbht9D5UMX
Nh8MM8v8IgiYt894NxO86r2VBqFwvh/jmix4zdIOzyY8kiW8d7gMLjTXSrz6/JZu
9UfsCobv+SYikCR3fbkd4YUd/Kd6hizRHxL5DZ780Fcsit9FwQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFEllrvBxn6XhSxYNuzRD/TMcGM8EMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMWJlMjgwYjEtNzZlYy0z
YjM0LThhNmItMWNmNDcwODYwOGUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujvQw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAT9y2m/Bn036cL0A8NjVNlV4Ak3h+T7Tzlybf07UhKB7e8VdFXce/
ZeoVeQgT7XBXYgdAm7b2ZSNVuf7wJ5j2fJALG7ByFZQx7xmKwnaR8U8K+x6e6AgE
Fnpw4RlDBG83nj2m1/tuwI9rS+IZ+Bx4WlnlP0ZdTBRca+I6v5RAbqyxIwsXdXz9
uJ+wNQ8qU98641jJAzB00Z1nFcc8sgnTwAiWr+W6ySFR33hdpLlEg2uXzvOP4Jnp
wSTwIFsGFHNi1Sh2+wxZcFz2TjogB/F/hkhvQMjQX+lCn5VkyXPhygTuoekp1A6s
1X+dWRNtreisZUT4uJhSbU9H3RygF3R6/g==
-----END CERTIFICATE-----
Generated at Thu Aug 7 02:07:44 2025 by rpki-client