Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/7def7e64-1620-305f-bf74-5d9d2352c5d1.roa
File:                     7def7e64-1620-305f-bf74-5d9d2352c5d1.roa (raw, json)
Hash identifier:          bcpMJQs3ZLA9xpFUeB88Zx+pDBhaUkqx5vbwc8xwDbU=
Subject key identifier:   8E:26:21:BE:9B:AE:E2:D7:EA:38:BF:3F:06:9B:81:B3:DB:8E:78:F6
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584AC2E11E6EC6DC5491030349A0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/7def7e64-1620-305f-bf74-5d9d2352c5d1.roa
Signing time:             Wed 06 Aug 2025 01:00:33 +0000
ROA not before:           Wed 06 Aug 2025 01:00:33 +0000
ROA not after:            Tue 04 Nov 2025 02:00:33 +0000
asID:                     30036
IP address blocks:        2604:2e80:806::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c2:e1:1e:6e:c6:dc:54:91:03:03:49:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Aug  6 01:00:33 2025 GMT
            Not After : Nov  4 02:00:33 2025 GMT
        Subject: CN=9b2e6148-d207-4d4d-ba4f-2b1396a7d4ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ae:54:8e:e1:54:c9:9f:69:49:9f:25:da:4a:
                    e0:36:1e:0e:60:d2:1d:43:19:1f:72:16:c1:0e:ba:
                    d2:46:ea:e6:12:2a:d6:29:eb:64:68:d8:a9:9a:f3:
                    86:b9:03:c1:b2:53:95:ec:7d:e4:19:91:6a:85:1f:
                    7b:55:67:5e:7a:b6:bf:a2:0c:35:d5:29:1d:ce:91:
                    54:e0:d4:86:ad:f5:4a:d6:52:52:8a:1c:06:26:cb:
                    5a:4a:6f:91:9d:bd:7a:3c:96:99:8b:a3:e7:ff:1e:
                    a8:36:3d:dd:33:f4:a0:bb:02:4c:b5:bc:1d:88:02:
                    8e:97:e2:b9:06:93:f3:7f:1c:41:12:08:b9:d1:4a:
                    fb:83:04:3e:d1:66:5f:9c:43:1a:1e:4e:86:39:e0:
                    5f:95:a7:1e:21:4c:c7:c8:1e:14:92:ec:50:d2:6a:
                    0c:c1:44:73:d9:15:7f:1b:59:52:c7:35:11:fa:cb:
                    0f:9e:1d:3f:67:1b:80:a3:2c:a9:bd:94:aa:7d:0c:
                    29:38:44:67:d6:f0:8d:d4:88:e7:a1:63:50:92:c2:
                    06:19:52:65:5e:c5:0d:b6:58:39:29:f1:4b:b6:28:
                    5c:7e:79:7a:95:a5:43:75:5a:fa:63:6a:56:e9:1c:
                    64:e1:38:d8:69:af:0e:57:7c:71:38:97:ba:2d:f1:
                    0e:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:26:21:BE:9B:AE:E2:D7:EA:38:BF:3F:06:9B:81:B3:DB:8E:78:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/7def7e64-1620-305f-bf74-5d9d2352c5d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e80:806::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:c4:20:a3:97:26:08:58:c4:f0:0f:2c:56:df:e0:e1:57:ae:
         93:35:b5:59:7f:64:42:82:ea:7c:55:01:e6:be:97:c3:2b:ff:
         70:f9:22:79:35:23:6a:41:46:4f:4e:32:f9:3b:10:07:a5:b1:
         63:2c:3d:1a:27:ee:a7:0f:3a:6d:75:30:e5:94:06:58:80:ff:
         f9:84:7d:7d:fa:0e:db:50:16:8c:39:bb:7a:e4:ee:1a:0f:45:
         53:03:3f:7f:5c:ca:90:a3:6b:af:3b:24:58:75:c0:9f:68:55:
         89:e5:df:08:ea:71:11:7a:0e:65:95:27:c0:58:29:b1:e9:65:
         5d:8b:88:2c:0e:fc:e1:9a:36:a6:39:26:f3:43:23:ed:a4:0a:
         ad:f2:dd:ec:9b:b5:88:4e:1e:b9:05:fd:fd:cf:67:03:b6:0c:
         96:40:84:16:51:83:af:9f:02:fe:31:ac:b0:f7:56:bc:12:2b:
         0a:c1:c0:98:29:1d:92:62:df:4b:6d:02:d3:58:88:44:af:2f:
         e9:90:6a:aa:b0:ac:df:f4:d5:78:06:fe:e0:66:97:79:d6:00:
         d6:6a:3b:8b:2d:12:57:73:40:de:6a:a8:58:bd:5f:f6:28:f7:
         2d:d2:b1:d9:1e:a9:66:1b:6f:3c:44:4c:91:16:8d:61:75:f2:
         81:d4:3b:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:50:09 2025 by rpki-client