Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/80e46fb1-bf03-33a0-ad0b-19d87675e242.roa
File:                     80e46fb1-bf03-33a0-ad0b-19d87675e242.roa (raw, json)
Hash identifier:          w1EK56BebIrZMW9Bvyc/vZjOGznj+wz1kNBoJTMBH9E=
Subject key identifier:   4C:52:03:04:25:B3:F1:D1:4B:DF:41:E7:53:DD:83:E7:47:54:EE:D1
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584A81464AA9AE5F52B463AFECC0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/80e46fb1-bf03-33a0-ad0b-19d87675e242.roa
Signing time:             Sun 13 Jul 2025 13:01:03 +0000
ROA not before:           Sun 13 Jul 2025 13:01:03 +0000
ROA not after:            Sat 11 Oct 2025 13:01:03 +0000
asID:                     30036
IP address blocks:        2604:2e89:4c00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:81:46:4a:a9:ae:5f:52:b4:63:af:ec:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jul 13 13:01:03 2025 GMT
            Not After : Oct 11 13:01:03 2025 GMT
        Subject: CN=0419cdfe-f3fb-4898-b678-d78795073193
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a1:7c:2f:6d:5d:03:84:0a:e7:46:c6:fb:2c:
                    ed:c1:6e:1f:a3:ab:ab:98:dd:7e:0e:86:b3:b6:93:
                    2c:7d:63:c5:5d:a7:04:d1:71:01:60:64:7f:50:40:
                    fb:9d:d0:17:63:ec:ca:74:32:47:a8:96:d1:4b:75:
                    e3:89:c2:f9:2d:f8:f5:e1:e4:44:0c:65:8d:4b:4e:
                    96:f8:96:15:bd:e7:d0:62:30:0c:70:93:ff:2a:76:
                    c2:cc:dc:8b:ee:94:c5:63:6a:cc:65:c0:73:c1:af:
                    3d:37:ac:e7:1f:a3:ab:6a:e6:c5:ec:1b:55:2a:b5:
                    97:fe:41:a9:f4:ca:bb:90:35:fd:25:b3:27:6d:fe:
                    cb:7f:c2:fc:a0:e2:83:95:2f:37:b7:01:9b:b7:80:
                    b3:df:ad:91:fe:cb:52:b4:71:98:20:55:98:29:d9:
                    67:8f:14:10:1c:95:57:5f:15:08:f0:9f:b0:64:36:
                    a0:02:68:16:d1:21:c3:35:9a:7d:bb:fd:e4:a9:08:
                    3f:36:67:b3:d8:01:ef:c7:f5:a1:81:5f:ed:75:f3:
                    86:18:37:3a:fa:08:c6:42:14:a2:57:60:e7:a6:7f:
                    5f:a8:51:99:49:3a:b5:51:c5:3c:b0:53:62:8d:d3:
                    34:af:32:35:bf:34:3d:c1:12:ba:15:6a:1c:0a:c5:
                    b9:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:52:03:04:25:B3:F1:D1:4B:DF:41:E7:53:DD:83:E7:47:54:EE:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/80e46fb1-bf03-33a0-ad0b-19d87675e242.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e89:4c00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:04:34:8d:75:cd:2f:3f:40:8b:10:1a:06:0a:6a:c1:f3:bc:
         a0:51:ac:b3:a9:19:aa:57:e6:3b:4b:67:db:69:e2:33:47:2b:
         ed:2f:77:ac:f8:f8:c2:c8:52:0d:4e:5c:7d:f0:c3:dd:f4:13:
         9b:03:3f:58:b7:b6:0c:fa:68:06:dd:de:f8:a1:8c:0f:40:6e:
         be:ac:20:46:38:99:93:78:d9:c7:5f:b0:05:e2:ae:16:12:ad:
         6a:94:cd:88:a7:90:1b:cb:07:03:99:73:3a:fa:36:07:c9:ff:
         98:14:3b:1a:44:c4:a3:c8:e1:8a:bc:83:55:a9:b9:59:13:31:
         6a:e0:5f:50:00:f8:7a:a4:f6:48:40:b2:27:20:5e:d1:75:fa:
         e3:a1:dd:78:75:51:df:04:a1:c0:7d:cd:63:3c:fe:7c:1b:5a:
         78:cf:9d:6d:a2:dd:b4:20:fc:e3:93:dd:76:3c:1b:88:0a:70:
         60:0a:c5:b1:8f:e2:6b:c6:e9:f2:27:1b:10:bb:45:44:90:12:
         86:0c:dd:4b:53:6f:4a:7d:a2:58:e1:c7:6c:f1:04:27:e5:57:
         ec:51:1a:40:44:fe:86:67:bd:21:1a:4c:b1:c7:4b:14:fd:d8:
         09:aa:40:72:87:66:81:a0:d0:1d:74:3a:16:74:63:5a:1d:21:
         10:c6:f0:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 12:59:09 2025 by rpki-client