Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2cf5c72c-6009-30e5-bc38-7a930697bf35.roa
File:                     2cf5c72c-6009-30e5-bc38-7a930697bf35.roa (raw, json)
Hash identifier:          e3uKFf/+3DXIZK6QZ6/hWOILzTV/buwnP7WPninFXds=
Subject key identifier:   04:4B:00:EF:AA:4D:CF:E5:B8:20:2F:71:68:E2:07:F0:0B:A3:91:23
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584A86DB6E1A8309C20FC6CB7400
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2cf5c72c-6009-30e5-bc38-7a930697bf35.roa
Signing time:             Tue 15 Jul 2025 13:01:04 +0000
ROA not before:           Tue 15 Jul 2025 13:01:04 +0000
ROA not after:            Mon 13 Oct 2025 13:01:04 +0000
asID:                     30036
IP address blocks:        2604:2e8e:1400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:86:db:6e:1a:83:09:c2:0f:c6:cb:74:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jul 15 13:01:04 2025 GMT
            Not After : Oct 13 13:01:04 2025 GMT
        Subject: CN=b973fb03-b0cf-4cce-8f31-1f284ce636ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:c6:12:94:f0:f5:79:06:ef:c8:c3:e0:14:98:
                    ef:25:1c:52:d3:b3:fd:6b:0d:25:43:76:ce:b0:82:
                    63:6b:cd:55:49:85:c1:f3:3c:39:01:ca:05:0d:3b:
                    3c:37:69:ad:69:15:c2:6b:76:eb:6d:18:87:1c:cc:
                    dc:be:93:60:d4:99:6b:bc:d2:fb:98:f1:33:68:b6:
                    62:01:e9:da:ef:00:5d:45:d3:be:36:30:7d:d6:5d:
                    a3:77:34:88:72:35:3a:02:c1:0c:7a:e0:7b:cf:f2:
                    58:ea:de:3c:a4:74:78:fa:91:c8:95:ca:0b:6b:97:
                    69:58:e1:18:fc:53:0f:df:c9:a0:aa:f5:c3:8a:fe:
                    cd:16:47:34:71:d9:ba:bb:ac:62:68:ec:24:a4:37:
                    1b:e8:ca:b1:b1:6d:34:b1:d1:60:e2:42:21:f1:4e:
                    cd:91:40:19:8c:98:d3:bb:46:f1:3f:fc:fd:bc:e0:
                    a1:08:61:19:1d:36:f3:52:6b:bc:cb:4b:2f:9d:1a:
                    8f:4f:82:79:45:95:28:6a:aa:1d:72:92:ab:d6:da:
                    26:0a:57:f6:8c:8d:5c:e6:84:b8:a1:fc:95:cd:99:
                    6a:1d:8b:4d:67:98:e7:8c:12:87:3d:59:ee:26:77:
                    22:18:21:c9:0e:47:51:29:5a:ae:a7:c7:09:4f:20:
                    23:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:4B:00:EF:AA:4D:CF:E5:B8:20:2F:71:68:E2:07:F0:0B:A3:91:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2cf5c72c-6009-30e5-bc38-7a930697bf35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8e:1400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:d7:cd:49:73:ac:97:13:6a:4a:ce:9a:5f:ca:65:c8:5b:6d:
         de:43:8d:db:2f:21:e4:d9:6d:74:80:67:e3:70:e2:4a:03:d5:
         d7:ef:90:ff:a5:aa:a0:1a:ac:40:41:bc:ec:be:2e:e5:de:40:
         8d:f4:d5:e0:03:3d:c3:81:b1:ed:0e:3b:e9:7b:d7:26:4d:5a:
         a0:da:fd:7f:b8:61:10:2b:52:b3:b4:c4:40:35:56:0f:9f:6d:
         c2:20:81:02:1c:e1:25:41:27:d0:cd:65:8d:ce:ed:6c:cf:7a:
         42:1f:bf:ed:28:e0:70:04:0f:d2:bf:7d:1c:03:fb:08:fd:73:
         e6:18:89:91:c2:17:54:6f:7e:28:3c:a3:b5:30:51:ad:b8:57:
         af:93:2e:53:5b:23:a6:3c:c4:22:d5:d2:cc:77:18:3c:af:32:
         e4:8d:c9:a9:1e:e1:79:a0:21:d9:62:f5:c0:24:10:3d:65:54:
         21:b2:5e:3a:62:8c:ea:39:f0:f4:ca:c7:da:12:4d:4d:c5:23:
         40:5e:0a:1d:ab:e1:9c:fe:1f:26:de:4d:d0:2f:97:a0:15:5f:
         c3:6e:20:35:c7:26:a3:99:d3:1f:07:dd:98:08:0b:d6:45:96:
         6b:0a:38:ff:57:c1:2c:6d:a8:2a:63:e1:84:f5:e3:4e:6c:51:
         87:e1:03:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:22:02 2025 by rpki-client