Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/713ef04f-1fce-36b8-8f82-aa1f1dc5657d.roa
File:                     713ef04f-1fce-36b8-8f82-aa1f1dc5657d.roa (raw, json)
Hash identifier:          vlivYJfYbQYG9229SrnCNIkUJe7x+qzESegfchxmGWs=
Subject key identifier:   7C:E8:9B:57:B1:8E:E0:AB:74:47:F9:CE:A1:5E:54:66:BC:54:DA:3B
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584A86DC04DF01614A103E826BC0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/713ef04f-1fce-36b8-8f82-aa1f1dc5657d.roa
Signing time:             Tue 15 Jul 2025 13:01:04 +0000
ROA not before:           Tue 15 Jul 2025 13:01:04 +0000
ROA not after:            Mon 13 Oct 2025 13:01:04 +0000
asID:                     30036
IP address blocks:        2604:2e88:9c00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:86:dc:04:df:01:61:4a:10:3e:82:6b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jul 15 13:01:04 2025 GMT
            Not After : Oct 13 13:01:04 2025 GMT
        Subject: CN=27670ce6-ee59-4cb9-8571-15a61b592ee8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:a7:0f:86:35:5c:aa:3c:df:51:12:dc:a1:aa:
                    e1:4d:04:20:0f:aa:09:99:cd:06:d1:fc:0a:45:64:
                    19:14:d0:67:27:cb:b7:82:0e:82:b8:07:00:28:63:
                    22:e8:06:1c:80:7d:5f:47:ca:50:80:a8:3d:af:d3:
                    86:8d:b3:a5:ba:e0:15:d7:4f:dd:ed:e4:fa:b1:71:
                    63:ed:a9:01:5c:ea:9a:7c:95:88:62:4a:6a:23:51:
                    a0:4c:13:62:8c:79:62:c2:43:dc:16:3c:7b:74:18:
                    48:5a:a1:f9:07:7b:8c:66:a3:fd:f3:99:8d:82:57:
                    13:7f:c8:7e:59:5d:03:ab:fe:04:d0:a0:45:b4:3f:
                    5b:72:1a:f5:0b:4d:e8:f3:78:e4:f0:7f:20:58:7f:
                    30:dc:db:7f:6e:b4:98:02:56:d1:cb:fd:3d:24:6f:
                    28:95:4f:29:2b:b4:da:7d:e8:61:1a:a9:54:28:96:
                    a2:b2:7b:f9:1f:48:29:2f:f5:23:03:ad:68:0d:0d:
                    23:fb:c9:f5:71:b3:af:27:45:63:a0:2d:0d:88:d6:
                    d0:bc:d0:ef:4b:ba:5e:77:49:b9:45:53:bb:15:5d:
                    6e:0a:7e:af:14:88:e3:bc:85:d0:87:7a:20:91:e9:
                    53:e4:db:b3:28:bc:58:10:cf:ec:af:8c:aa:0c:bb:
                    e9:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:E8:9B:57:B1:8E:E0:AB:74:47:F9:CE:A1:5E:54:66:BC:54:DA:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/713ef04f-1fce-36b8-8f82-aa1f1dc5657d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e88:9c00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:00:a0:14:8a:46:99:48:9c:28:3c:54:74:19:20:f5:b4:c5:
         9c:ad:b5:fe:77:ca:10:f0:a4:d0:ff:03:fe:af:28:c5:12:e0:
         62:f1:eb:e0:0b:af:f2:c7:3e:47:d2:a4:c2:b7:a0:d6:72:1a:
         1b:a9:04:d7:5d:b5:ac:cc:07:72:75:de:62:03:5c:4b:0e:08:
         fb:b7:31:06:3a:81:ff:28:c4:05:c9:e6:96:d2:72:72:6d:a4:
         86:78:0c:4f:b9:e8:4b:05:95:26:a7:8b:cb:c4:20:78:42:aa:
         70:bf:5c:86:77:c7:78:13:a3:61:da:62:38:83:22:09:fd:4c:
         1c:66:8b:9b:c7:cd:82:22:34:d0:f4:c1:5e:6c:93:03:f2:c5:
         61:6f:9d:a9:b8:63:81:f3:ab:ec:48:81:ce:cc:58:1d:47:7f:
         ce:19:20:66:1f:42:18:d4:87:7c:db:fa:71:30:d7:8f:83:04:
         a4:6c:df:93:d8:e4:18:b5:a5:5d:f8:5c:3a:be:a7:68:c5:fe:
         cc:27:e9:01:03:35:b7:d6:a8:8b:d2:2c:68:29:f9:9e:0c:76:
         42:6b:d3:2b:f8:6d:2b:87:70:e7:9c:9b:1e:4d:2c:72:a1:0e:
         87:bb:4f:e4:7c:90:93:8c:83:a5:29:59:e0:6c:59:95:f1:2f:
         b1:47:fe:17
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEqG3ATfAWFKED6Ca8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk
Mjc2NzBjZTYtZWU1OS00Y2I5LTg1NzEtMTVhNjFiNTkyZWU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiacPhjVcqjzfURLcoarhTQQgD6oJmc0G0fwK
RWQZFNBnJ8u3gg6CuAcAKGMi6AYcgH1fR8pQgKg9r9OGjbOluuAV10/d7eT6sXFj
7akBXOqafJWIYkpqI1GgTBNijHliwkPcFjx7dBhIWqH5B3uMZqP985mNglcTf8h+
WV0Dq/4E0KBFtD9bchr1C03o83jk8H8gWH8w3Nt/brSYAlbRy/09JG8olU8pK7Ta
fehhGqlUKJaisnv5H0gpL/UjA61oDQ0j+8n1cbOvJ0VjoC0NiNbQvNDvS7ped0m5
RVO7FV1uCn6vFIjjvIXQh3ogkelT5NuzKLxYEM/sr4yqDLvpPwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFHzom1exjuCrdEf5zqFeVGa8VNo7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNzEzZWYwNGYtMWZjZS0z
NmI4LThmODItYWExZjFkYzU2NTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiJww
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEARgCgFIpGmUicKDxUdBkg9bTFnK21/nfKEPCk0P8D/q8oxRLgYvHr
4Auv8sc+R9Kkwreg1nIaG6kE1121rMwHcnXeYgNcSw4I+7cxBjqB/yjEBcnmltJy
cm2khngMT7noSwWVJqeLy8QgeEKqcL9chnfHeBOjYdpiOIMiCf1MHGaLm8fNgiI0
0PTBXmyTA/LFYW+dqbhjgfOr7EiBzsxYHUd/zhkgZh9CGNSHfNv6cTDXj4MEpGzf
k9jkGLWlXfhcOr6naMX+zCfpAQM1t9aoi9IsaCn5ngx2QmvTK/htK4dw55ybHk0s
cqEOh7tP5HyQk4yDpSlZ4GxZlfEvsUf+Fw==
-----END CERTIFICATE-----
Generated at Thu Aug 7 00:32:33 2025 by rpki-client