Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4a7da5ad-9014-3a0e-bec8-d9ee622881c4.roa
File:                     4a7da5ad-9014-3a0e-bec8-d9ee622881c4.roa (raw, json)
Hash identifier:          IS5AvwKYw8u4F86IY+octq+r1Zp66CbPq5Q7lgVTKuw=
Subject key identifier:   41:09:DE:99:A7:DD:66:8E:71:5A:25:23:E2:14:79:F6:29:7A:78:3D
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584A86DB6F9F2910BA9C27BED440
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4a7da5ad-9014-3a0e-bec8-d9ee622881c4.roa
Signing time:             Tue 15 Jul 2025 13:01:04 +0000
ROA not before:           Tue 15 Jul 2025 13:01:04 +0000
ROA not after:            Mon 13 Oct 2025 13:01:04 +0000
asID:                     30036
IP address blocks:        2604:2e8b:3400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:86:db:6f:9f:29:10:ba:9c:27:be:d4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jul 15 13:01:04 2025 GMT
            Not After : Oct 13 13:01:04 2025 GMT
        Subject: CN=455a8e04-7b0a-4f71-954c-a774da4613c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:22:08:75:8a:6c:fc:c0:6e:3d:61:f4:34:1e:
                    34:65:cb:81:5e:6b:86:5f:4a:e7:50:c2:89:13:36:
                    cc:c3:e9:fd:1a:c2:e5:3a:92:0d:d7:d4:18:3c:cc:
                    0d:7f:20:12:55:48:b5:57:41:85:63:f6:d1:95:61:
                    fc:c1:99:d8:c6:90:fe:52:f2:a6:a0:59:57:6d:a6:
                    ce:ab:1d:19:91:21:9c:90:d3:3d:71:60:54:9b:d9:
                    51:51:09:bc:15:67:c2:9b:a1:3e:46:72:92:30:e2:
                    c0:0e:75:ad:c5:51:49:97:b8:94:69:a7:89:78:32:
                    cf:87:db:ff:98:62:08:b9:92:4d:95:26:05:d7:d5:
                    50:97:34:37:c7:7a:9f:12:f8:73:56:6c:4c:f2:ef:
                    65:02:3c:14:f3:4c:e0:bb:c7:79:e4:6a:05:b5:b9:
                    73:72:00:45:05:c5:30:da:5b:51:25:f4:49:29:54:
                    9e:1b:e9:48:0c:39:86:e6:e3:d5:4c:6e:79:0d:c4:
                    b2:24:3e:ed:cb:07:62:45:bc:9a:c3:37:f1:67:91:
                    b8:b2:6f:d7:72:dd:33:59:0c:6b:c7:51:f8:2e:17:
                    f7:55:11:f3:24:22:ec:47:0c:07:af:3e:f4:65:e4:
                    4c:4d:44:53:62:e0:3b:ac:10:6c:44:1e:3e:5e:b9:
                    52:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:09:DE:99:A7:DD:66:8E:71:5A:25:23:E2:14:79:F6:29:7A:78:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4a7da5ad-9014-3a0e-bec8-d9ee622881c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8b:3400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:39:2a:cd:1f:93:66:c3:18:d4:ff:36:15:3e:a5:a0:eb:2a:
         e1:88:6b:7d:cf:da:c4:ed:d4:c1:cd:da:7b:fc:63:c1:66:50:
         81:25:1e:68:ae:00:77:99:ff:a5:b6:25:37:36:8e:07:90:1d:
         aa:a5:2f:d1:da:4b:7d:50:98:b4:5b:34:fb:df:fe:19:ac:d7:
         5c:50:ce:b9:fb:69:8e:37:06:dd:a3:ab:8d:8f:c0:dc:e1:5b:
         a6:72:36:43:80:0b:38:8e:63:5c:37:d0:2c:df:75:45:76:6a:
         d0:2f:b5:df:99:88:c2:03:c1:3b:9e:d3:2d:8d:bd:59:1e:f0:
         6d:95:17:fa:d4:a6:41:63:a0:76:46:ed:8e:4f:03:4d:ae:26:
         33:86:9a:25:96:91:03:ee:37:7f:a1:b7:85:30:56:b2:9f:b3:
         52:2c:1d:51:58:8e:42:5b:79:07:87:46:99:e8:de:c5:3f:ef:
         da:8c:ca:e5:f9:c2:dc:2e:ec:ae:8f:ec:c3:cd:c3:9a:1f:81:
         e9:cc:02:32:21:7a:84:ba:19:5d:1d:6e:75:63:af:8d:b6:3f:
         74:06:3e:80:95:1d:64:72:b8:6b:fa:a2:b2:df:40:51:b4:bd:
         6b:97:61:43:e7:4e:4c:cd:f3:78:ff:92:df:d8:ad:e0:19:fb:
         71:ec:f8:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:22:25 2025 by rpki-client