Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5f05aecf-a967-39de-85bc-f2d4695e7d03.roa
File:                     5f05aecf-a967-39de-85bc-f2d4695e7d03.roa (raw, json)
Hash identifier:          iVUdOPGJdhYktb2EXW5LNazevpy526mr5klZ5ciTNPQ=
Subject key identifier:   7D:6B:F8:B2:3F:B1:E3:1B:3E:F9:78:EA:6D:DD:4F:1C:7D:14:5C:CD
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584A84124011BFA20A5885BB5700
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5f05aecf-a967-39de-85bc-f2d4695e7d03.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     30036
IP address blocks:        2604:2e8e:4000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:40:11:bf:a2:0a:58:85:bb:57:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=74d979ab-944e-4fd2-bfeb-46289a3fd1c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:52:ec:d2:8b:14:53:b2:7a:b8:5f:ca:c6:91:
                    ee:37:78:cb:6c:d5:d1:66:84:f0:e5:0d:6d:1c:e6:
                    7e:ee:35:c8:bb:ac:ec:e4:ad:66:89:32:c0:b9:d0:
                    8f:d1:dd:40:fd:42:22:bf:72:b0:46:30:52:73:56:
                    36:0e:5c:65:40:78:bd:f5:13:fa:25:c8:64:fb:15:
                    fb:b8:57:ce:fd:bd:15:92:9f:f3:ad:e7:bb:5a:72:
                    6a:b8:7e:f5:8b:ac:49:91:c7:4c:3e:c7:e0:f6:ad:
                    6c:07:e5:cd:cd:c5:8f:58:aa:f4:ef:39:41:4a:54:
                    93:f9:22:04:f8:d6:6c:d5:d3:e2:25:f9:9f:59:9f:
                    60:38:f5:84:b3:a5:37:f8:19:78:16:cb:a0:b7:d6:
                    36:74:0b:8d:98:1c:21:7c:cd:b8:58:7a:6d:77:6f:
                    b2:cc:f1:48:d1:c0:db:63:56:a9:8d:58:67:9c:11:
                    a8:f0:fa:29:89:a1:6a:c6:47:98:26:07:5f:d0:87:
                    4b:bb:3c:a1:5f:37:f4:68:f6:10:8b:8f:6c:89:4a:
                    e4:0b:07:3c:a9:60:4c:7e:9b:49:7a:6c:2a:41:e2:
                    f7:e8:09:d6:55:35:ed:61:fd:a4:9d:3f:40:14:6b:
                    12:80:55:67:2b:ae:1e:ae:07:a8:2f:f2:f5:08:d9:
                    37:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:6B:F8:B2:3F:B1:E3:1B:3E:F9:78:EA:6D:DD:4F:1C:7D:14:5C:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5f05aecf-a967-39de-85bc-f2d4695e7d03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8e:4000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:e4:1e:24:bb:eb:48:26:a3:84:97:24:53:97:ff:53:df:84:
         bb:9d:2e:b6:8e:af:db:42:cb:3a:47:d9:65:6f:23:7a:fa:73:
         c7:27:c8:45:8f:62:93:86:b8:b1:cb:2f:d5:59:6f:f0:f6:d6:
         d2:1b:33:84:9e:73:7e:42:6c:a1:ce:25:65:cc:a5:27:0d:3e:
         a1:bb:b0:12:8e:77:dc:b6:e2:03:0a:62:96:71:52:77:df:9f:
         2f:16:fa:d9:ec:64:a8:7c:52:9b:57:02:48:1b:d2:1a:84:6b:
         b4:7e:e4:3e:41:c9:46:1c:9e:36:6a:26:6a:6d:c7:00:99:cd:
         35:28:d0:8a:ed:b1:44:8a:3a:19:2d:47:a0:7e:85:5d:f7:43:
         35:0d:d4:25:8a:19:25:86:e1:44:8d:66:ae:74:94:75:13:3a:
         93:b3:40:03:e4:91:d7:13:88:94:7a:cc:3f:db:e4:66:2c:eb:
         e6:49:0b:00:84:34:0f:22:7c:8d:00:c0:3f:e5:fe:63:a2:6a:
         60:48:34:dd:ca:63:64:4a:f3:f1:ed:e0:2d:83:33:89:85:89:
         db:e4:15:9d:47:dd:05:f6:00:66:d8:38:13:ee:5f:f7:89:a5:
         8d:92:14:0c:21:fb:d9:d4:24:f0:02:43:78:11:50:4a:9f:0b:
         e2:e5:cc:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:24:06 2025 by rpki-client