Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4ae6d243-3ea1-31d7-ab99-a5ff90b8002e.roa
File:                     4ae6d243-3ea1-31d7-ab99-a5ff90b8002e.roa (raw, json)
Hash identifier:          QDEcCjpzOUefsdVChQvK4gDOSHUy8V5tmZ+QnmN3esY=
Subject key identifier:   80:25:08:C3:96:61:21:A2:A6:D1:31:E1:8B:79:52:40:B2:B0:88:27
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584A1F900E55566B42A33DF4AC00
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4ae6d243-3ea1-31d7-ab99-a5ff90b8002e.roa
Signing time:             Sun 08 Jun 2025 13:01:01 +0000
ROA not before:           Sun 08 Jun 2025 13:01:01 +0000
ROA not after:            Sat 06 Sep 2025 13:01:01 +0000
asID:                     30036
IP address blocks:        2604:2e8b:7000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1f:90:0e:55:56:6b:42:a3:3d:f4:ac:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jun  8 13:01:01 2025 GMT
            Not After : Sep  6 13:01:01 2025 GMT
        Subject: CN=e5210627-2bd3-4a78-8bd0-565c1d3efafd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:c9:0c:2e:b8:08:b9:f0:05:96:a4:9d:5b:f7:
                    c8:ad:22:dd:81:a5:02:45:48:ca:46:ef:68:25:0b:
                    cb:34:78:50:9b:f8:dc:6e:da:ce:81:a7:d7:a2:23:
                    9c:12:1a:9f:ef:9b:42:dc:48:de:57:bc:67:94:d5:
                    d1:1e:b6:96:53:48:5b:09:19:bf:44:16:ac:5e:80:
                    b4:6e:d4:ac:bf:0a:ec:be:2d:ae:bf:93:b4:91:69:
                    5a:3b:96:d2:cc:a0:e7:c0:c5:72:38:53:16:6b:24:
                    ae:4c:25:c8:22:4c:55:1e:b9:95:7b:e4:c1:45:d4:
                    f9:81:35:99:7c:0c:86:a1:b4:1f:9e:5e:24:83:d0:
                    d4:a9:6f:b0:1d:d3:b0:0a:2a:81:d6:36:50:d3:03:
                    58:20:fc:25:d4:a5:5b:4e:63:19:72:b5:d6:6d:2d:
                    82:2a:d2:51:27:7d:36:30:c3:66:49:8b:e4:eb:8c:
                    37:49:29:6b:d1:94:71:8d:43:94:c1:85:7d:b3:f6:
                    cd:00:c7:8e:b1:db:87:1b:6b:8f:e4:97:fd:8a:9c:
                    a9:f8:14:80:ba:81:95:92:c7:ac:9e:9c:21:10:26:
                    be:13:df:79:f1:92:f0:17:4b:5e:2f:d5:b5:97:92:
                    9a:0c:0b:ee:3f:39:7d:67:cb:88:69:2c:b9:80:20:
                    4a:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:25:08:C3:96:61:21:A2:A6:D1:31:E1:8B:79:52:40:B2:B0:88:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4ae6d243-3ea1-31d7-ab99-a5ff90b8002e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8b:7000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:3a:90:7c:da:5c:e9:ab:35:80:15:c3:44:63:5e:be:b6:70:
         47:da:e3:59:6e:75:44:d4:4d:4b:a3:cf:7b:b2:84:02:bd:db:
         e1:ad:d9:ab:ec:85:a8:28:7b:87:27:29:ec:f9:1d:d9:a8:95:
         22:42:cf:da:ef:15:4a:0f:c8:3d:06:22:6c:d0:89:1b:1e:20:
         9a:4c:5e:60:07:cb:21:85:a4:ab:ca:dc:66:ed:28:d6:50:39:
         6e:17:93:d8:e4:d1:10:fb:5a:90:f6:05:07:94:d3:1d:39:79:
         f5:61:3f:b3:1d:82:73:57:59:a7:d0:4b:3d:72:b8:f0:f3:29:
         04:62:39:42:6b:9f:b5:ab:f3:b7:bb:23:19:d9:d5:b4:e7:a1:
         2d:69:7e:df:8a:93:e2:d0:d6:8c:07:ea:af:a7:bc:00:b3:32:
         a5:a6:fc:8c:d7:be:36:70:c0:c8:b3:6a:5f:c5:46:c1:0e:f6:
         ca:52:d8:0a:78:5a:e7:56:75:8f:b5:a4:cf:ed:0d:e8:8d:4a:
         ec:88:ce:81:5b:c2:85:05:d8:92:1c:b4:ca:4a:e8:a6:18:6d:
         3b:72:11:83:0e:ba:aa:e3:d2:1d:7f:33:59:8c:74:77:14:30:
         8e:96:00:cf:b6:26:de:63:9f:77:ff:74:0d:f7:37:9a:67:37:
         92:a6:7c:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 14:05:28 2025 by rpki-client