Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/6c013d6a-35e9-3621-b8e4-8904771b126f.roa
File:                     6c013d6a-35e9-3621-b8e4-8904771b126f.roa (raw, json)
Hash identifier:          umsrA2yWVhqnYodX/GDc7mVhem+c0ZHAJoJTKtzKh2w=
Subject key identifier:   C1:F6:AD:99:46:AB:B5:FF:FA:83:A6:DE:BC:E4:87:34:46:17:E9:FF
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584A841253FB1A3C18EA1CA93E00
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/6c013d6a-35e9-3621-b8e4-8904771b126f.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     30036
IP address blocks:        2604:2e89:b800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:53:fb:1a:3c:18:ea:1c:a9:3e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=ff72dd8b-0fbb-4a4d-9372-9a9bd384c649
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:51:a4:41:3f:38:53:9a:86:ca:66:da:0a:e9:
                    5b:2e:33:3d:30:87:78:f6:ac:24:eb:73:48:ab:3f:
                    79:38:a0:d3:03:68:6a:0a:e9:e6:81:cc:d1:96:ff:
                    a3:40:dc:59:e8:00:c9:bf:8c:c4:13:71:84:78:bd:
                    6e:f8:49:ac:a1:9a:41:da:71:db:13:41:9b:b5:94:
                    45:f7:d5:7c:9d:8e:ed:aa:fa:f5:48:68:d7:53:bc:
                    15:d7:7d:1a:a2:05:51:fe:2b:29:d1:f4:4e:d5:46:
                    82:2a:f6:eb:8e:48:eb:b0:f3:0f:63:07:73:41:ac:
                    af:8f:f4:93:a3:2c:a5:41:35:51:49:6b:31:4d:e1:
                    7f:4c:dc:7f:75:f3:a7:fd:56:73:00:5f:0c:9f:46:
                    ac:15:77:91:07:d8:20:42:64:c2:c1:e7:7c:90:f6:
                    b1:46:e3:22:47:f1:10:06:1e:f1:50:5a:21:b7:66:
                    5e:e6:1e:04:c7:11:66:87:56:2a:f9:25:4b:90:96:
                    46:68:fe:90:91:f8:93:ff:40:ac:d4:90:19:53:89:
                    35:ea:f1:0d:a4:7e:0b:10:42:fe:dd:18:64:7c:2f:
                    29:7d:fd:51:03:1e:97:d7:20:6c:7b:48:70:49:33:
                    eb:c8:c8:9d:c0:da:7f:c3:32:e0:01:5c:bb:de:34:
                    26:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:F6:AD:99:46:AB:B5:FF:FA:83:A6:DE:BC:E4:87:34:46:17:E9:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/6c013d6a-35e9-3621-b8e4-8904771b126f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e89:b800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:7d:bb:0a:f4:2d:f9:43:3c:ab:06:dd:3c:aa:d5:72:b6:71:
         52:5d:95:a5:cd:29:d4:d1:27:1a:62:e8:59:7d:c8:27:fa:ab:
         05:6d:15:2e:8e:5c:e3:8b:c7:e9:16:ee:a5:bd:12:84:bc:7d:
         6c:64:f9:00:87:19:47:23:77:b8:4a:db:ca:01:a6:86:3c:05:
         76:03:4f:87:f4:dc:3f:69:76:af:87:bb:12:34:9e:86:08:3c:
         f9:f0:6f:19:b9:7a:9f:4b:d0:74:10:a6:72:77:12:c4:2b:80:
         26:e7:ff:b5:23:ff:37:24:8d:a0:09:af:ab:85:b0:1d:dc:1f:
         08:f1:aa:41:92:f8:27:ce:8f:79:82:ee:26:b4:d6:a9:7c:74:
         79:4d:26:0a:f8:53:39:28:2f:e3:cc:ea:00:16:d1:c6:60:75:
         2d:74:17:76:14:cd:26:48:bc:70:7f:82:e3:b5:c0:ad:54:1f:
         e2:50:4d:02:70:8d:7e:22:47:62:a9:52:18:08:72:88:f7:68:
         9e:ea:2a:26:af:e6:f0:b7:9f:f1:e9:2d:24:ec:f6:69:55:33:
         2f:fb:69:02:38:e1:db:78:f8:98:3c:46:8e:cb:61:18:d1:f2:
         3f:72:e5:cf:b9:1f:ed:46:c7:76:87:78:bd:c9:49:ff:fa:75:
         2d:34:bc:b5
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEqEElP7GjwY6hypPgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk
ZmY3MmRkOGItMGZiYi00YTRkLTkzNzItOWE5YmQzODRjNjQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1GkQT84U5qGymbaCulbLjM9MId49qwk63NI
qz95OKDTA2hqCunmgczRlv+jQNxZ6ADJv4zEE3GEeL1u+EmsoZpB2nHbE0GbtZRF
99V8nY7tqvr1SGjXU7wV130aogVR/isp0fRO1UaCKvbrjkjrsPMPYwdzQayvj/ST
oyylQTVRSWsxTeF/TNx/dfOn/VZzAF8Mn0asFXeRB9ggQmTCwed8kPaxRuMiR/EQ
Bh7xUFoht2Ze5h4ExxFmh1Yq+SVLkJZGaP6QkfiT/0Cs1JAZU4k16vENpH4LEEL+
3RhkfC8pff1RAx6X1yBse0hwSTPryMidwNp/wzLgAVy73jQmtQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFMH2rZlGq7X/+oOm3rzkhzRGF+n/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNmMwMTNkNmEtMzVlOS0z
NjIxLWI4ZTQtODkwNDc3MWIxMjZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuibgw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAOH27CvQt+UM8qwbdPKrVcrZxUl2Vpc0p1NEnGmLoWX3IJ/qrBW0V
Lo5c44vH6Rbupb0ShLx9bGT5AIcZRyN3uErbygGmhjwFdgNPh/TcP2l2r4e7EjSe
hgg8+fBvGbl6n0vQdBCmcncSxCuAJuf/tSP/NySNoAmvq4WwHdwfCPGqQZL4J86P
eYLuJrTWqXx0eU0mCvhTOSgv48zqABbRxmB1LXQXdhTNJki8cH+C47XArVQf4lBN
AnCNfiJHYqlSGAhyiPdonuoqJq/m8Lef8ektJOz2aVUzL/tpAjjh23j4mDxGjsth
GNHyP3Llz7kf7UbHdod4vclJ//p1LTS8tQ==
-----END CERTIFICATE-----
Generated at Fri Aug 8 12:52:21 2025 by rpki-client