Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/7ca74157-65d7-3fab-8ccd-ddf14f59051d.roa
File:                     7ca74157-65d7-3fab-8ccd-ddf14f59051d.roa (raw, json)
Hash identifier:          peiMgOBSItHwYwtNuP9UooGmddYvxmMbLoev6W+HRpc=
Subject key identifier:   B9:6C:A0:C5:32:54:56:0B:34:99:4E:E3:DF:49:C6:C6:8A:C9:6A:34
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584A8410E3328AF3DCB8FF576208
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/7ca74157-65d7-3fab-8ccd-ddf14f59051d.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     30036
IP address blocks:        2604:2e8b:a800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:10:e3:32:8a:f3:dc:b8:ff:57:62:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=fd52a0d6-5d93-4bb0-bde8-ce1cae659890
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:9d:bf:4c:44:6d:43:f2:98:e2:d1:c9:1d:63:
                    29:c1:6f:99:94:88:03:4e:89:b6:c1:43:c2:07:29:
                    1e:a5:7e:fb:37:04:ae:57:5e:fd:18:53:5d:02:50:
                    a1:d2:61:15:dd:72:32:8b:47:65:2a:39:83:ac:b6:
                    50:81:c2:7d:72:b7:93:72:b3:5a:f1:2c:44:98:69:
                    a6:8e:69:eb:1f:5a:47:18:a8:59:a3:5e:e5:64:e1:
                    5f:4a:b8:ad:3a:ca:a9:05:fb:22:e1:da:23:0c:3d:
                    51:ba:42:fe:98:79:99:35:aa:4b:87:ea:6e:d7:35:
                    d2:ac:1d:3f:26:bc:ab:96:cb:5f:e8:7e:87:e4:02:
                    2d:ad:67:6b:3c:2d:84:8c:30:2e:fe:2c:37:a7:e5:
                    15:c7:0b:67:13:b5:14:55:4a:94:5b:b5:dd:d0:15:
                    80:27:0d:84:68:16:05:ec:5b:7a:ca:89:9f:0d:5f:
                    95:5b:4b:be:84:00:74:c7:05:a2:54:48:00:8f:9b:
                    52:4c:6a:91:26:12:1b:ed:a4:07:83:5b:bd:70:38:
                    ec:0a:cc:22:7e:0c:7b:ee:57:ec:25:32:76:f3:89:
                    2d:b6:1b:0c:07:ed:fc:e8:d1:2e:ce:91:6e:d4:a6:
                    f5:e2:ab:eb:86:4f:43:fa:e3:a9:d7:ba:b0:0e:35:
                    41:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:6C:A0:C5:32:54:56:0B:34:99:4E:E3:DF:49:C6:C6:8A:C9:6A:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/7ca74157-65d7-3fab-8ccd-ddf14f59051d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8b:a800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:de:46:cb:56:b6:c0:1e:13:68:dd:e9:d0:e0:3b:c1:0e:db:
         6d:10:a3:24:cf:25:8f:9a:c5:7e:05:57:65:c0:93:1b:7b:b3:
         ac:e9:44:6b:ea:74:02:f2:40:98:0a:a5:59:da:e2:92:a5:ee:
         40:eb:49:89:5d:8b:9d:57:c4:cc:82:9f:c4:6a:48:71:87:b0:
         b3:af:1b:c4:c8:53:6f:ce:01:73:6a:ac:23:64:18:26:73:51:
         37:de:23:c5:01:91:6b:36:d4:38:96:2b:72:9c:26:ff:39:7a:
         3f:3e:7e:b4:19:a8:c2:b0:66:58:3a:87:d8:58:4a:db:e4:0f:
         53:70:a9:4f:a4:71:79:a0:af:27:e9:2b:f9:51:9f:98:5e:69:
         6c:1c:94:5a:ca:d9:b6:bd:87:f8:87:8e:ed:2b:4a:4c:58:8d:
         b3:c4:0e:af:6d:5a:a8:f1:6e:b3:8d:51:18:da:25:6e:dc:ab:
         5c:b1:ef:d9:d0:b8:e0:3f:06:31:dc:71:e7:82:df:d0:94:7a:
         c2:33:8e:c3:0b:f3:83:93:2a:35:a8:b3:f6:7b:9f:37:58:8c:
         e5:3b:b7:3f:88:41:28:15:9f:ce:7d:c0:9a:e9:e6:1f:2c:73:
         c1:2c:3b:5d:31:0b:de:5d:22:97:b2:cf:96:34:93:67:05:5f:
         23:00:87:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:21:13 2025 by rpki-client