Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/239849b7-f817-3a68-aefe-cc03f9cfbf15.roa
File:                     239849b7-f817-3a68-aefe-cc03f9cfbf15.roa (raw, json)
Hash identifier:          6UdXGXCPlFIaLysDtt7EgUB3vTa3JuMkRuL7zHfNV4o=
Subject key identifier:   88:56:30:5D:4F:5D:D7:4B:8A:15:B6:10:08:B1:B4:D1:90:81:8C:58
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F43285849F2E524D136FD4BB64483BC80
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/239849b7-f817-3a68-aefe-cc03f9cfbf15.roa
Signing time:             Fri 23 May 2025 13:01:03 +0000
ROA not before:           Fri 23 May 2025 13:01:03 +0000
ROA not after:            Thu 21 Aug 2025 13:01:03 +0000
asID:                     30036
IP address blocks:        2604:2e80:1c00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f2:e5:24:d1:36:fd:4b:b6:44:83:bc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: May 23 13:01:03 2025 GMT
            Not After : Aug 21 13:01:03 2025 GMT
        Subject: CN=208d4af6-ec38-47f3-87c3-94afcc9f519b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:67:71:a3:99:6b:2d:f8:86:db:70:e6:f8:fb:
                    e6:13:b8:13:cd:7b:ca:9b:0e:15:83:6f:0a:01:99:
                    e8:6f:25:37:ff:19:56:d1:58:2e:2d:0f:cf:f0:46:
                    b2:0d:88:c6:ad:7a:c9:34:15:75:17:70:71:0c:39:
                    84:fa:ef:cd:8d:81:2c:4c:10:c8:d2:e2:7c:0c:3e:
                    83:c8:62:23:5b:67:c5:24:da:f4:48:16:e4:a2:df:
                    84:e4:69:d1:93:e2:9c:50:a6:1d:7e:7b:d2:34:bf:
                    12:1c:25:aa:96:25:75:6e:cb:f5:80:cc:0a:31:0d:
                    ce:73:bb:21:85:e9:a8:6a:95:03:c9:53:d6:61:80:
                    44:be:ef:41:40:c1:d2:15:b1:d9:cf:6b:c6:6c:3c:
                    ca:a7:61:b9:a1:cf:29:28:1b:75:a7:19:39:c0:6b:
                    0b:66:71:5d:1e:2a:b5:68:5c:43:33:ee:c6:e0:01:
                    27:a2:c2:fa:6e:53:20:de:6d:73:9e:a0:d3:29:ee:
                    65:9c:86:b5:ae:8d:6d:78:bd:e9:1a:2b:2c:34:b7:
                    ac:23:d6:0e:0e:3f:11:f5:b7:9a:0e:5c:50:86:9d:
                    69:66:d9:62:18:00:e5:4c:90:16:83:0c:d2:94:4a:
                    d1:b2:7b:dc:df:01:05:8c:a9:f9:72:0e:5d:80:9f:
                    64:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:56:30:5D:4F:5D:D7:4B:8A:15:B6:10:08:B1:B4:D1:90:81:8C:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/239849b7-f817-3a68-aefe-cc03f9cfbf15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e80:1c00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:d5:a8:a7:08:c1:05:23:46:8a:21:a1:e8:fb:28:84:9e:20:
         63:28:99:53:1e:cc:88:98:a2:a2:51:66:55:a3:17:30:d9:3d:
         65:17:44:fe:1e:e6:c2:eb:c3:d7:e9:31:9e:f0:a2:27:5d:7d:
         2c:1e:0d:2e:d7:39:4d:51:05:00:3c:1d:ed:90:38:91:b2:0a:
         57:57:d4:9a:13:74:76:2d:b0:88:31:22:12:4e:5d:71:78:56:
         b3:70:7f:98:21:16:39:5d:33:26:80:8d:12:4f:56:d8:42:8a:
         a3:2a:68:a9:0c:29:36:f0:a6:93:0a:b6:bd:05:15:d7:d3:87:
         ca:35:e7:d9:f9:98:3c:9d:89:b7:50:cc:70:3a:9b:ea:03:fa:
         a5:fc:9a:a8:ca:1a:cb:e7:2a:e5:3c:0a:09:e9:18:e3:db:7c:
         19:8e:3c:3f:4b:bc:9f:4a:6e:b7:e8:d0:c6:13:ee:be:3a:24:
         17:1d:ce:6d:f4:78:c7:5c:5a:ae:24:f2:ba:ba:cc:72:b6:4b:
         79:99:91:79:55:7b:33:6d:3b:0b:a9:0f:b2:a4:00:fb:58:56:
         8a:4c:2d:aa:dc:4a:7b:5f:42:5a:19:37:0f:0d:2e:23:b0:21:
         2a:3b:da:1c:ff:54:a4:d5:f1:60:63:6a:14:b0:76:c1:3a:ba:
         14:c3:29:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 07:43:11 2025 by rpki-client