Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/71d18cee-db23-31f0-a085-148e8652110d.roa
File:                     71d18cee-db23-31f0-a085-148e8652110d.roa (raw, json)
Hash identifier:          EkbrkkDg+XuMM0k/IyBapT3+d+2et6ZNoraWmwii278=
Subject key identifier:   E2:A3:B6:57:29:05:CE:B5:70:E0:41:1C:0D:6D:17:90:D2:9F:0B:58
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584A8410EC11FDE0FC93B622DD80
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/71d18cee-db23-31f0-a085-148e8652110d.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     30036
IP address blocks:        2604:2e89:a000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:10:ec:11:fd:e0:fc:93:b6:22:dd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=0468b446-a312-4ee3-b2e1-b2b84e3f3b83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:7e:93:e7:8e:77:ab:ef:a1:09:ca:40:00:11:
                    83:d0:59:10:14:b3:52:8b:64:75:8c:96:6b:34:73:
                    67:be:06:4b:e1:f9:02:41:3f:9b:af:0a:40:1c:3b:
                    cf:89:e8:56:f5:e7:8a:38:dc:56:42:ec:c1:85:ea:
                    ae:cf:e6:f1:ae:7c:ff:d8:36:8d:31:71:ca:0b:83:
                    d5:09:a8:4f:7a:dd:2d:b0:67:c4:ed:55:87:06:92:
                    59:b4:00:cf:db:1a:de:bb:e5:cf:52:1e:c5:f8:86:
                    3e:d5:8f:52:00:4f:80:c5:69:66:91:a8:ee:8c:49:
                    7c:20:57:8f:70:83:77:9d:2a:fc:7b:d6:58:9b:f2:
                    84:58:0e:34:f8:7e:fa:20:70:f9:24:9d:53:77:c1:
                    d8:e4:e9:ac:f4:3e:da:bd:91:80:6e:2b:03:40:c2:
                    6e:42:aa:ec:55:ec:47:c1:4f:88:09:c1:26:ab:a3:
                    1c:bc:57:17:4a:23:e8:5d:0f:c7:f2:17:d4:3b:a2:
                    31:a9:3a:ec:52:e0:bc:6b:b6:40:d6:3a:47:44:04:
                    53:3f:2c:17:ef:a8:b3:34:1e:33:b8:f4:ef:e0:c6:
                    08:18:6e:0d:f9:09:83:fd:96:e2:3b:0b:30:1e:93:
                    1e:d5:3d:af:9e:f8:70:58:9b:c4:28:46:f7:7a:92:
                    c0:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:A3:B6:57:29:05:CE:B5:70:E0:41:1C:0D:6D:17:90:D2:9F:0B:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/71d18cee-db23-31f0-a085-148e8652110d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e89:a000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:d7:0a:32:ba:98:a7:49:83:2b:2f:9e:c8:90:58:1c:cf:6e:
         06:cd:40:95:05:e8:7d:d0:36:dd:51:2b:c1:de:42:0d:73:59:
         dd:c4:7e:8b:e3:e5:50:a1:83:42:07:3c:bc:f4:ee:d3:ea:69:
         d3:c3:cf:1e:a2:6e:80:3a:6f:e4:3f:83:49:30:fc:bc:1d:8b:
         e5:06:77:34:fd:0b:33:21:f8:1f:99:4e:2a:b1:30:45:2c:c6:
         d2:13:2f:70:be:9f:23:aa:aa:22:e8:e4:10:76:52:65:fb:ab:
         25:36:b1:e0:f1:44:8a:4f:2e:9e:d8:3e:a2:f0:73:3f:64:cc:
         82:21:63:6e:77:8d:b3:50:70:72:b8:87:68:64:90:9d:29:92:
         72:17:fe:3b:60:33:0f:55:f2:2d:ec:b2:e9:71:85:10:9f:79:
         9e:91:64:af:bf:38:d4:af:2b:6c:f7:83:3f:0b:e6:56:18:31:
         4d:e0:99:ff:0d:d2:c2:e8:09:cd:a0:b5:79:33:0a:ea:ab:18:
         ff:eb:c6:ee:97:35:c3:7a:e6:1f:4b:51:39:34:08:15:09:d3:
         a2:13:ae:c3:5e:4c:37:f0:df:ad:42:80:b7:dd:c2:95:79:c1:
         5f:92:8a:00:54:24:2b:36:b9:e5:54:9d:ac:b4:72:96:93:ed:
         fd:5e:62:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 00:31:43 2025 by rpki-client