Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/30490a35-c0d8-32d6-849a-a465e85d9337.roa
File:                     30490a35-c0d8-32d6-849a-a465e85d9337.roa (raw, json)
Hash identifier:          mzfx6evTTPDA+/HhHBrCwr6bhldqlOmwbCBivq96n3Q=
Subject key identifier:   44:91:12:B4:16:B0:46:9F:73:9F:88:BF:1C:0D:3D:F7:87:1A:61:9D
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584A84124ABC45418A8E34D940E0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/30490a35-c0d8-32d6-849a-a465e85d9337.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     30036
IP address blocks:        2604:2e8d:8800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:4a:bc:45:41:8a:8e:34:d9:40:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=7fa6a6f1-beb2-4e5a-b877-028c770357d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:bf:bf:91:26:04:67:0c:f7:0e:f9:b2:51:07:
                    6a:ea:f9:c6:ee:99:36:4d:9e:99:8b:7e:85:e8:62:
                    65:92:69:02:96:ed:9a:59:68:98:2e:18:d5:5e:f4:
                    b4:a8:d2:94:4a:a3:76:5e:0e:16:81:12:7d:14:b5:
                    e4:ac:30:0a:f6:cd:80:e5:6d:51:eb:04:ba:05:16:
                    dd:e8:ad:c0:5b:f8:46:94:52:34:5b:43:96:7f:d3:
                    e0:98:96:8d:d7:6b:8d:54:88:8c:b5:6a:0c:3d:53:
                    fe:81:35:e9:89:87:7c:47:b5:d5:20:b3:16:20:48:
                    dc:a7:f7:9a:73:a8:ff:62:53:d3:d0:29:a3:ad:26:
                    c0:24:48:e0:15:4d:aa:3a:d4:8a:5c:93:ca:58:7b:
                    af:20:a5:b2:0e:d8:cd:24:2b:94:26:d4:36:ab:c4:
                    ca:8f:e6:ed:a8:04:5b:11:f6:23:02:cd:37:d9:89:
                    36:e3:f2:19:92:9c:ed:1b:1c:b2:13:12:05:b6:0d:
                    73:5d:80:53:9b:28:0f:45:0e:25:14:da:da:2e:64:
                    15:a8:e4:41:3b:f9:5c:53:a3:52:00:f7:02:89:5c:
                    76:5e:71:1b:6d:69:93:7d:00:ba:fa:35:2b:bc:2a:
                    d9:a3:4a:30:59:79:5e:de:63:16:d4:f8:eb:57:3d:
                    bc:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:91:12:B4:16:B0:46:9F:73:9F:88:BF:1C:0D:3D:F7:87:1A:61:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/30490a35-c0d8-32d6-849a-a465e85d9337.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8d:8800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:bd:db:7f:2d:4c:d9:fb:98:f1:99:99:25:df:0f:b7:be:a0:
         cc:f9:2d:b9:99:88:c9:48:4d:57:d4:25:24:7d:8e:26:9c:a8:
         ca:81:e7:f7:5b:20:2c:ce:b0:4c:e0:90:e9:a9:b8:be:78:cc:
         7c:53:dd:26:9f:a2:49:d9:fd:d5:f8:be:4c:1b:3b:67:a7:cd:
         4e:1f:81:7d:02:da:5d:c3:ae:bd:70:7e:76:3c:64:07:b0:90:
         c2:43:59:5f:6e:f0:f0:72:c7:3a:ec:90:53:38:80:53:44:93:
         8b:ad:18:1f:5c:36:b9:97:69:4b:d6:5c:c0:d1:0d:b1:23:d5:
         65:fa:ca:67:bd:f9:65:de:16:be:22:8c:0f:00:a5:12:1e:f7:
         d3:d5:e6:00:cc:e3:fe:8b:81:74:86:72:1f:b5:24:24:89:e4:
         e4:00:5d:b5:0a:88:68:1a:9b:e7:77:3a:89:ce:6a:78:a8:cc:
         de:ac:65:30:3c:a0:f6:97:a0:a2:32:9c:36:3b:f7:29:9b:dd:
         e2:cd:7d:5e:18:ec:3c:03:3d:1e:c5:90:90:5f:5e:2f:7b:22:
         67:e0:b1:fe:64:7f:39:ce:20:ce:fe:32:31:f1:57:a4:80:53:
         8c:19:e9:32:ab:07:55:ee:70:85:a0:76:5e:f2:9c:3e:1a:f0:
         e1:12:da:ee
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEqEEkq8RUGKjjTZQOAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk
N2ZhNmE2ZjEtYmViMi00ZTVhLWI4NzctMDI4Yzc3MDM1N2QwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8b+/kSYEZwz3DvmyUQdq6vnG7pk2TZ6Zi36F
6GJlkmkClu2aWWiYLhjVXvS0qNKUSqN2Xg4WgRJ9FLXkrDAK9s2A5W1R6wS6BRbd
6K3AW/hGlFI0W0OWf9PgmJaN12uNVIiMtWoMPVP+gTXpiYd8R7XVILMWIEjcp/ea
c6j/YlPT0CmjrSbAJEjgFU2qOtSKXJPKWHuvIKWyDtjNJCuUJtQ2q8TKj+btqARb
EfYjAs032Yk24/IZkpztGxyyExIFtg1zXYBTmygPRQ4lFNraLmQVqORBO/lcU6NS
APcCiVx2XnEbbWmTfQC6+jUrvCrZo0owWXle3mMW1PjrVz28rwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFESRErQWsEafc5+IvxwNPfeHGmGdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMzA0OTBhMzUtYzBkOC0z
MmQ2LTg0OWEtYTQ2NWU4NWQ5MzM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujYgw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAXb3bfy1M2fuY8ZmZJd8Pt76gzPktuZmIyUhNV9QlJH2OJpyoyoHn
91sgLM6wTOCQ6am4vnjMfFPdJp+iSdn91fi+TBs7Z6fNTh+BfQLaXcOuvXB+djxk
B7CQwkNZX27w8HLHOuyQUziAU0STi60YH1w2uZdpS9ZcwNENsSPVZfrKZ735Zd4W
viKMDwClEh7309XmAMzj/ouBdIZyH7UkJInk5ABdtQqIaBqb53c6ic5qeKjM3qxl
MDyg9pegojKcNjv3KZvd4s19XhjsPAM9HsWQkF9eL3siZ+Cx/mR/Oc4gzv4yMfFX
pIBTjBnpMqsHVe5whaB2XvKcPhrw4RLa7g==
-----END CERTIFICATE-----
Generated at Thu Aug 7 02:07:12 2025 by rpki-client