Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/7dc6a19a-23ec-3346-84ac-69ed24443f55.roa
File:                     7dc6a19a-23ec-3346-84ac-69ed24443f55.roa (raw, json)
Hash identifier:          hgImp1I3/XEVWxbfy/jmQFZuSRofOu6dUH5/oqhzCoA=
Subject key identifier:   CD:ED:5A:4B:A0:FC:EA:37:62:6D:D7:6A:93:A8:1E:C1:3F:DA:7B:7B
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584A81463C9060C4BB4CB3146C80
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/7dc6a19a-23ec-3346-84ac-69ed24443f55.roa
Signing time:             Sun 13 Jul 2025 13:01:03 +0000
ROA not before:           Sun 13 Jul 2025 13:01:03 +0000
ROA not after:            Sat 11 Oct 2025 13:01:03 +0000
asID:                     30036
IP address blocks:        2604:2e88:e000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:81:46:3c:90:60:c4:bb:4c:b3:14:6c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jul 13 13:01:03 2025 GMT
            Not After : Oct 11 13:01:03 2025 GMT
        Subject: CN=95958d9e-6e95-46a9-9d3e-e93ab7e06887
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:a6:5b:f0:a7:90:5d:12:bb:85:4c:a8:f1:0e:
                    6d:8b:f9:f3:22:51:40:4d:cd:a7:2d:34:d5:2c:e3:
                    83:94:9a:b1:58:e1:ea:8a:ee:b6:91:85:ad:74:2b:
                    86:d0:7e:ab:5d:b2:35:76:bd:b1:30:52:2e:d8:f9:
                    d9:e0:26:d6:d8:f7:16:0d:23:07:82:31:50:dc:ea:
                    ef:85:0d:dc:cd:eb:af:d9:40:75:07:3f:92:28:7d:
                    50:dd:6d:21:1d:ce:42:f5:67:89:ed:5d:e9:fa:86:
                    fb:c5:8b:84:f9:65:0a:99:bc:c2:a3:2a:09:58:f6:
                    9c:57:c2:98:dd:4b:59:f1:2a:1e:59:42:a6:3c:c1:
                    d4:df:bf:08:67:ea:72:76:b1:12:5c:71:fc:03:d6:
                    31:04:4b:56:7c:8e:c1:d2:4d:50:a7:fb:4b:1a:c0:
                    60:01:c1:19:d7:bd:04:5e:ed:3b:ae:41:b9:34:f5:
                    e3:57:e3:3e:3b:d3:bd:df:ec:de:1d:64:58:eb:cb:
                    0f:9d:48:f4:fd:8b:32:fc:79:a1:0f:14:78:fd:43:
                    12:74:96:4b:fb:98:1a:e4:76:da:3d:6f:1a:02:9e:
                    77:24:2f:71:5a:f4:bd:6d:c8:17:a0:ee:17:ca:87:
                    97:cd:40:4b:c7:25:81:88:65:77:06:e2:34:ca:42:
                    e0:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:ED:5A:4B:A0:FC:EA:37:62:6D:D7:6A:93:A8:1E:C1:3F:DA:7B:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/7dc6a19a-23ec-3346-84ac-69ed24443f55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e88:e000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:19:0a:af:de:51:2e:3d:ea:e6:7b:29:2d:1e:14:db:a1:25:
         6f:1b:a7:8a:d4:ca:99:c0:94:85:2c:f5:3e:31:32:a5:75:83:
         1e:66:a3:bd:8d:38:64:b2:d6:41:d3:02:30:c2:21:cc:32:a0:
         49:aa:fc:6f:89:52:c2:0e:8b:ee:4e:56:22:ab:52:f8:14:e1:
         a9:9d:71:47:96:95:52:3d:70:c6:73:0b:46:71:0e:02:56:97:
         fb:2d:7b:39:f8:47:16:3d:1f:f6:1e:34:47:87:e7:41:b0:3f:
         9c:a6:9d:b9:82:e0:5f:e5:72:93:65:cf:00:5a:e6:03:38:ac:
         fb:07:5a:1f:39:cf:0e:c4:8f:b2:18:1b:1a:08:21:d9:96:56:
         cb:e7:6f:0d:b4:a5:64:2a:25:72:c8:93:83:55:e0:06:ed:9d:
         f0:fe:c3:63:95:97:65:30:4b:9c:b4:a8:15:c3:ef:e9:61:61:
         a0:49:4b:87:1c:11:49:38:f8:a8:bd:7b:12:e0:3f:8f:78:50:
         0e:4a:8f:07:be:23:58:ad:42:3b:e3:d7:7e:e9:29:33:27:7e:
         ed:29:09:a3:5d:3c:c6:2b:6b:2e:85:e9:06:90:7d:ab:7e:c0:
         1a:7f:90:5b:e9:37:a9:a5:3a:df:65:12:c0:ba:ec:d1:51:5e:
         d1:84:e6:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:41:01 2025 by rpki-client