Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/64e7f6e0-74b4-308c-b3fd-fc147234d24e.roa
File:                     64e7f6e0-74b4-308c-b3fd-fc147234d24e.roa (raw, json)
Hash identifier:          D8pokXwiTWPggSr2l4+XLOcu1eYeLKaHxquqFbPRggI=
Subject key identifier:   F5:43:E3:6A:3D:A5:BA:4D:84:C6:0A:6D:02:E6:FF:2C:87:82:D9:3A
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584A9E9615463A1186046F1BBA80
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/64e7f6e0-74b4-308c-b3fd-fc147234d24e.roa
Signing time:             Thu 24 Jul 2025 01:00:50 +0000
ROA not before:           Thu 24 Jul 2025 01:00:50 +0000
ROA not after:            Wed 22 Oct 2025 01:00:50 +0000
asID:                     30036
IP address blocks:        2604:2e8d:c800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9e:96:15:46:3a:11:86:04:6f:1b:ba:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jul 24 01:00:50 2025 GMT
            Not After : Oct 22 01:00:50 2025 GMT
        Subject: CN=98724335-c0ab-4a81-b306-09c5317c64f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:cf:d8:b0:ab:e5:13:60:55:32:b5:bf:47:c4:
                    4e:9d:9e:1a:19:cc:69:c1:49:85:f7:f0:af:e3:50:
                    99:09:5f:e2:b9:37:98:0b:72:bf:69:e7:1c:a8:ed:
                    60:6d:18:fa:63:bd:14:50:ce:4e:be:4e:b7:b3:8d:
                    e3:5a:c2:b4:05:f8:12:3b:d3:63:d5:04:a6:c9:eb:
                    02:3a:95:65:35:47:d5:83:70:94:46:dc:90:ad:1d:
                    19:af:9c:79:73:6c:bf:0a:34:62:18:ec:83:07:8c:
                    f8:36:80:f4:7e:24:45:7d:25:6d:fe:24:5d:d2:62:
                    bc:40:9a:5d:7b:7f:e2:5d:f0:4f:f0:01:f1:49:62:
                    f0:af:08:e9:0f:bb:f0:78:1d:f3:72:f1:e2:09:ba:
                    bd:ce:a7:9c:a3:3d:7b:2d:da:79:ed:24:13:7b:e9:
                    ea:a7:52:bb:ce:c7:85:7a:4d:3c:02:67:90:24:ed:
                    c5:d4:77:79:63:e3:96:b2:41:a3:7a:92:b5:c1:cc:
                    2b:5c:1f:8f:3b:cd:9e:b3:7b:71:2e:1f:fa:e5:cb:
                    8b:19:3a:09:19:96:12:5a:bc:91:56:29:99:54:f1:
                    a6:f2:9b:99:86:72:3f:ae:83:48:91:54:13:85:cf:
                    99:0c:42:8f:ae:76:e4:14:31:6e:4c:71:3e:a0:1f:
                    11:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:43:E3:6A:3D:A5:BA:4D:84:C6:0A:6D:02:E6:FF:2C:87:82:D9:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/64e7f6e0-74b4-308c-b3fd-fc147234d24e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8d:c800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:91:ed:60:aa:80:89:06:af:07:e8:cf:28:7c:9c:30:37:86:
         b9:c9:f3:3c:dd:c3:bb:5d:d2:4c:fa:71:38:44:4d:ed:3b:c7:
         48:91:12:9d:1a:a3:0e:6b:f4:31:3c:9b:df:06:ce:d6:9b:2c:
         42:52:3e:da:2c:2b:4d:3f:86:1c:ec:09:50:31:26:29:f1:46:
         fd:24:da:5a:1b:fc:c0:65:84:b3:ba:1e:49:84:3e:d1:cc:17:
         44:d7:7b:ed:b5:0c:f0:43:cc:09:a5:bd:f5:9c:8a:c5:3a:52:
         88:51:92:b1:44:62:b7:22:7c:97:e2:2a:77:f8:22:8e:63:78:
         49:d0:48:d7:f8:81:12:fa:f6:fe:76:74:6b:41:ff:da:4b:8e:
         02:f6:a0:5f:18:90:44:b9:cc:a8:9d:86:50:09:9c:d1:3c:56:
         f6:dc:49:61:d4:41:3e:2c:c6:ae:52:7c:f7:da:4c:48:79:5c:
         59:6e:38:99:0f:b7:1c:d6:ac:60:19:50:d6:e6:66:e2:a2:60:
         c4:a3:50:b3:6b:bd:64:0b:ca:db:69:8e:77:2b:b6:e2:da:f4:
         0f:46:a1:b5:f1:4b:55:bc:77:1c:f7:c5:6d:da:d1:56:c8:a7:
         60:c6:11:b3:71:16:1d:61:ef:36:96:b4:df:fe:41:e0:17:26:
         8d:c5:4b:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 00:46:46 2025 by rpki-client