Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/54a3b59b-c811-3e3f-9347-9eadb65c4fd4.roa
File:                     54a3b59b-c811-3e3f-9347-9eadb65c4fd4.roa (raw, json)
Hash identifier:          I+y1pHdbuQjfxtHGi9AcZwKe7NtvroGa8ja2YYilRwk=
Subject key identifier:   09:B0:92:DD:E8:00:49:9C:13:91:10:E9:0B:96:CE:3D:3A:9D:B4:31
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584A8410E9A88794233A1AF34800
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/54a3b59b-c811-3e3f-9347-9eadb65c4fd4.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     30036
IP address blocks:        2604:2e8d:8c00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:10:e9:a8:87:94:23:3a:1a:f3:48:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=0b1da30f-5de6-4b5c-8c9a-b9cf3dd82703
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c4:2f:02:c0:b7:f2:6a:c0:8e:4e:7b:4c:c7:
                    f6:b6:74:c8:37:43:0b:59:ca:8e:ca:89:5c:31:de:
                    f6:91:0c:86:a9:b5:6a:a6:8b:70:a5:8e:09:91:f4:
                    02:93:18:ca:7a:d3:dc:3b:2c:a9:85:aa:43:b2:95:
                    3e:63:59:cf:6f:3b:b1:a2:2e:e7:37:11:37:36:50:
                    19:6e:d3:ef:40:12:f0:fe:9e:13:d6:60:5e:78:58:
                    a2:52:e7:6a:55:6e:81:11:c1:93:e3:63:b0:58:c1:
                    82:42:99:16:98:90:8a:a7:26:ad:25:9d:44:78:1c:
                    f4:cf:d6:d9:c0:15:7f:81:32:4e:17:ba:2d:95:f3:
                    64:e8:95:b2:91:2e:27:41:d6:b3:56:03:dd:f1:6b:
                    72:76:90:af:98:08:5c:d9:41:52:f6:35:d8:89:a3:
                    f7:2d:af:f9:6b:2f:9c:09:6b:05:02:fd:16:31:63:
                    56:57:41:6c:b9:64:a5:76:eb:b3:69:a0:92:af:e7:
                    e9:45:5c:03:3b:6d:eb:13:ed:22:0b:a4:d2:77:6e:
                    31:4e:6f:4b:b4:50:10:95:0d:e5:33:a9:df:54:d5:
                    92:da:bb:8c:cb:94:b0:5f:23:a0:53:65:8f:28:1c:
                    02:5a:d0:85:64:e1:68:f3:31:3d:41:d5:c5:32:b1:
                    76:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:B0:92:DD:E8:00:49:9C:13:91:10:E9:0B:96:CE:3D:3A:9D:B4:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/54a3b59b-c811-3e3f-9347-9eadb65c4fd4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8d:8c00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:aa:a4:1f:b9:e3:09:2f:59:e1:fd:07:80:47:e3:12:33:4b:
         0a:73:37:f2:f2:3f:dc:01:03:63:63:9e:9f:31:cb:05:36:72:
         1b:7e:4b:ae:e0:a2:e6:79:9f:27:4a:8a:dc:2b:e4:d1:c5:09:
         c9:a0:05:7f:bf:3a:b9:a1:60:59:fd:6e:fe:82:5d:b4:16:4d:
         ba:5f:c7:04:bb:90:80:25:ab:cb:d5:6d:85:58:60:39:bc:91:
         42:f7:f6:ec:8d:a5:6e:5c:3e:b7:f0:65:2f:d1:0f:c5:be:2f:
         f4:26:cd:1c:44:9a:c9:92:3e:e3:4d:06:65:62:64:3a:51:05:
         51:58:24:8b:fd:14:18:b6:8e:23:a0:4f:cd:b8:9e:b2:71:f3:
         01:46:4d:07:80:d6:37:2e:12:15:5a:c6:a2:60:f9:a1:23:86:
         6f:0f:ad:59:2c:73:f5:08:f2:c4:c4:d3:9c:4b:1f:dc:47:57:
         bf:87:e9:ff:23:e3:62:ab:08:f2:f1:5a:9d:18:9d:7f:23:8e:
         ba:38:aa:c6:09:1f:78:d9:82:59:10:b1:1d:19:3c:46:fb:90:
         91:31:5c:f1:f5:2d:f0:dd:ef:13:8f:f4:aa:71:0b:16:b6:87:
         0c:88:24:63:52:33:08:2e:92:80:3a:5c:3f:92:16:a3:0b:9e:
         8d:9b:cc:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 00:44:36 2025 by rpki-client