Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/56c3146e-072f-3ca2-a668-a6547817abe6.roa
File:                     56c3146e-072f-3ca2-a668-a6547817abe6.roa (raw, json)
Hash identifier:          rZYdV4w6gQI8gEy4q7Lr7pWeLXw39uasmX6v3cvmtnA=
Subject key identifier:   AF:A2:0F:E1:D7:22:5F:FE:9C:BE:E8:C0:60:73:76:91:53:15:49:9F
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584A8410E700B7838095DC8C20C0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/56c3146e-072f-3ca2-a668-a6547817abe6.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     30036
IP address blocks:        2604:2e8d:7800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:10:e7:00:b7:83:80:95:dc:8c:20:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=67a94412-2d32-42cc-a000-6d47b7b9b9e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:3b:e5:f3:e5:55:21:31:4a:48:3f:fd:c1:e7:
                    97:c2:e9:87:12:9c:64:9a:59:83:2f:d1:b7:69:5d:
                    a2:d6:be:2d:80:35:ca:a8:c2:2a:65:e4:2f:fa:72:
                    e2:2d:36:a1:f1:f7:df:d6:b5:fa:df:cd:65:54:85:
                    e5:73:39:af:d9:57:9d:a1:52:38:94:4b:0e:3b:92:
                    43:ae:95:39:67:fc:c1:51:7f:2f:0d:27:21:f6:36:
                    8e:dc:97:73:db:fc:92:15:6b:c3:33:44:1c:6c:2b:
                    c5:2a:63:5d:ed:4d:32:c1:04:49:ba:5b:bd:ab:5d:
                    5c:a7:b4:8f:29:ba:90:c0:dc:ea:d4:5c:e6:f9:59:
                    ca:06:f0:48:08:19:ae:e2:da:0a:4a:a1:08:e9:50:
                    9a:5d:ea:43:e6:23:c4:1c:2b:cb:9c:ff:d1:a0:8b:
                    04:6e:6e:59:9a:ce:df:bb:9e:d9:0b:5c:2d:65:e6:
                    57:78:83:94:3b:d3:66:cc:4a:a8:75:7b:e0:5e:11:
                    6d:30:11:62:4d:61:bf:2b:80:68:ef:b3:68:f7:54:
                    3e:c6:2a:61:82:4b:41:2b:58:d1:d5:7f:12:25:b3:
                    30:51:d1:de:f4:8f:80:3a:45:87:5f:3e:1c:05:59:
                    b9:e2:37:ea:58:e3:57:8e:1c:d2:48:0f:62:50:a4:
                    50:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:A2:0F:E1:D7:22:5F:FE:9C:BE:E8:C0:60:73:76:91:53:15:49:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/56c3146e-072f-3ca2-a668-a6547817abe6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8d:7800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:37:5e:99:44:6d:ca:01:d5:bc:43:d2:da:58:53:4e:ca:76:
         58:4a:dc:74:00:9c:49:43:cf:6a:cd:53:4b:3f:2f:84:6e:c9:
         ef:aa:4d:5f:06:9e:f5:2f:7e:77:b7:2a:1c:ca:d1:c7:cf:53:
         7a:6b:d3:f2:03:09:2a:29:5e:d3:0c:52:05:c9:3a:3b:5e:0d:
         5c:32:1b:68:11:35:65:9a:1d:fb:92:bd:87:5c:4a:e0:11:6c:
         7e:8e:47:ce:f3:54:84:fe:8f:21:c1:f4:83:82:73:67:22:a4:
         cc:b9:20:73:5b:cd:e0:22:21:2a:96:b7:4d:22:28:df:24:f1:
         a1:de:d6:f2:a4:cd:12:0b:eb:3c:b9:b1:5d:90:be:32:19:f0:
         9d:a0:e0:ab:6c:9a:05:24:ba:8e:20:2f:25:24:a3:3f:0c:1c:
         cd:4c:8f:cd:29:60:3c:6c:e3:52:c0:43:28:28:8a:86:18:b9:
         63:b5:25:53:c6:08:79:cf:4d:99:96:75:22:bf:51:86:9e:d8:
         51:6a:dc:9a:a4:cc:80:00:61:81:a3:f5:a7:54:ca:1d:ff:c1:
         dc:f0:51:9e:a3:57:01:c6:38:e4:c4:0f:0b:e8:22:75:22:8f:
         35:05:c0:23:36:7d:4a:d1:f4:d7:ad:17:4b:ea:47:04:15:89:
         33:67:86:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:18:30 2025 by rpki-client