Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/714558f6-7f52-3323-83bf-ffc8d3d688f0.roa
File:                     714558f6-7f52-3323-83bf-ffc8d3d688f0.roa (raw, json)
Hash identifier:          ZrE5N6GCKPuXXGcLvYKQNK5tww1sKFwSQHFNvdqUxus=
Subject key identifier:   EF:80:6F:86:EE:1C:B2:B1:B9:C1:51:46:35:57:D8:78:63:5D:3F:16
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584A8410ED65585A242B97D2F200
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/714558f6-7f52-3323-83bf-ffc8d3d688f0.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     30036
IP address blocks:        2604:2e89:f400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:10:ed:65:58:5a:24:2b:97:d2:f2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=17d4f7cf-d44c-48aa-b7ae-c32d200b1325
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:d4:00:ad:91:45:ec:a5:1b:a6:f8:43:26:7f:
                    46:2a:5d:5f:3f:c7:20:fa:61:d6:9a:3b:d5:ce:3b:
                    aa:82:aa:6a:c4:f2:7e:7c:01:5c:ae:6e:cc:e1:53:
                    c9:a8:2c:53:12:99:1f:4f:ba:30:bf:e3:df:08:cf:
                    74:06:f0:7e:8e:9c:0e:3e:fb:6e:14:e8:07:03:32:
                    14:31:bc:c5:77:af:0e:e9:d1:ff:89:26:7f:0d:ea:
                    81:02:af:65:b3:ef:80:8f:03:e3:ff:6c:9f:3f:eb:
                    f1:6d:53:04:30:79:f7:be:68:16:19:a6:5d:97:09:
                    52:de:04:03:70:7b:86:5d:13:95:2e:98:0a:4e:2f:
                    26:f0:7e:43:fc:59:98:1e:bb:a7:b0:22:d0:9e:9e:
                    7c:2f:09:f1:e0:d1:1d:71:00:a6:21:2f:23:5f:73:
                    5a:6a:9d:7a:68:db:5a:0e:61:4f:94:41:a0:2d:6c:
                    56:a5:7c:2e:76:0d:35:4d:bc:a7:d5:db:f7:ba:6f:
                    df:0f:ea:60:d0:93:b6:b2:51:b9:54:58:86:cf:94:
                    63:9a:6d:25:20:85:f3:16:c3:bc:0c:2b:fe:d7:61:
                    a3:66:a5:8d:9f:56:1e:b3:92:34:56:bb:6c:fc:90:
                    32:dc:bc:95:d2:ec:72:6f:0d:53:fd:4c:f6:81:f5:
                    6d:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:80:6F:86:EE:1C:B2:B1:B9:C1:51:46:35:57:D8:78:63:5D:3F:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/714558f6-7f52-3323-83bf-ffc8d3d688f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e89:f400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:ca:11:6e:fa:8c:f0:3f:ba:0b:b7:05:8f:0b:4d:01:dd:10:
         88:68:d5:bd:34:d5:6a:36:9d:52:f4:ac:b7:32:bd:06:8d:b7:
         ed:a7:e0:4e:fd:8e:f5:dc:4e:02:d7:ce:2c:16:86:c4:35:0b:
         65:71:6a:0f:a4:a8:99:a3:6f:55:33:29:de:f3:13:e1:11:ba:
         50:c0:7a:19:73:09:88:9b:67:d0:cd:ed:22:8b:b8:56:a2:c6:
         44:65:ca:2a:57:0c:e9:a2:e0:0c:b3:db:63:40:06:51:c9:52:
         b8:9b:c4:6c:1b:a4:cf:42:e8:b2:99:6a:f3:9e:3b:74:5a:31:
         84:14:87:48:3b:92:b7:50:2e:8a:1c:c6:5a:a9:66:1a:97:72:
         51:a7:cb:11:4f:63:0a:f1:f0:2e:14:44:93:30:20:0c:b6:83:
         d4:a8:3b:2b:0b:e5:22:9b:6f:42:a2:40:93:f4:60:0d:7e:0f:
         8f:bb:d1:6a:77:24:a3:ab:41:1c:ea:97:2b:a8:0a:f8:8a:01:
         28:40:b0:ab:15:49:f9:87:24:2a:04:95:cf:ec:5d:90:ec:6e:
         42:ce:2c:87:3b:18:33:4b:19:bd:6b:44:ec:81:10:27:f5:f8:
         9b:28:a2:f0:4b:9e:8d:3d:34:d7:65:8c:8e:22:dd:42:2e:09:
         94:0c:44:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:34:58 2025 by rpki-client