Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8298855e-c095-3fe5-a1bb-6e8fbe8c6838.roa
File:                     8298855e-c095-3fe5-a1bb-6e8fbe8c6838.roa (raw, json)
Hash identifier:          qy72lLEKDL98U7Ga+8ox8cVSJUxlhmLOmpcPiC+L0fc=
Subject key identifier:   F3:0D:3F:68:B4:97:90:D1:0F:26:A4:92:BE:52:25:90:6D:E4:90:68
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584A86DC06D245F3712436BC2040
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8298855e-c095-3fe5-a1bb-6e8fbe8c6838.roa
Signing time:             Tue 15 Jul 2025 13:01:04 +0000
ROA not before:           Tue 15 Jul 2025 13:01:04 +0000
ROA not after:            Mon 13 Oct 2025 13:01:04 +0000
asID:                     30036
IP address blocks:        2604:2e8b:2c00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:86:dc:06:d2:45:f3:71:24:36:bc:20:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jul 15 13:01:04 2025 GMT
            Not After : Oct 13 13:01:04 2025 GMT
        Subject: CN=a005ebb4-2e23-4663-b9d1-f338ce461cd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:f3:6f:b4:e5:16:7b:60:41:9c:d4:0d:75:53:
                    62:dd:57:a4:c6:ad:70:fc:c9:60:d3:77:88:aa:3f:
                    a4:8d:19:a7:42:df:8e:c1:69:91:c1:ff:62:88:a0:
                    54:02:5b:3d:6d:9f:e5:49:79:c6:eb:46:5e:8b:09:
                    2c:aa:db:9b:7a:92:bd:15:1b:c6:90:f6:84:37:56:
                    75:55:03:b4:fa:83:13:fc:a3:65:a2:16:9f:63:f4:
                    13:1b:89:5a:a5:d8:e4:85:46:bb:5f:da:3d:38:c4:
                    3e:df:02:ac:6c:8b:d9:45:c3:2a:74:02:f2:6c:f1:
                    02:7f:70:89:0a:55:a1:8c:89:6f:e0:10:79:42:0a:
                    95:ca:7d:f2:95:5a:2c:c2:55:2b:6d:f9:9e:af:2d:
                    74:09:ec:87:13:e2:6f:f1:05:eb:f0:db:7d:47:b8:
                    6d:46:22:61:c3:d4:d1:67:c9:e3:57:f0:66:7d:8d:
                    dd:a9:a5:fd:53:1f:d7:00:c7:f7:ad:19:fe:94:33:
                    ec:d6:16:e6:39:36:09:ed:a5:24:0a:59:16:f4:a7:
                    68:2c:15:af:56:f3:1d:dd:ed:14:e7:51:42:4b:1f:
                    07:52:37:9c:52:24:ee:9e:bb:37:06:18:5b:88:f0:
                    33:8a:62:47:b4:a6:db:d3:68:96:1d:a1:5b:1f:87:
                    2b:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:0D:3F:68:B4:97:90:D1:0F:26:A4:92:BE:52:25:90:6D:E4:90:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8298855e-c095-3fe5-a1bb-6e8fbe8c6838.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8b:2c00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:8d:a2:6b:b2:17:ec:e3:07:fd:5b:3c:b5:c7:78:ee:83:78:
         40:a2:d5:61:35:9c:bc:51:79:36:77:73:c6:1e:5a:59:d0:a2:
         8f:8a:8e:ef:41:dd:34:ca:65:9d:cd:dc:65:a2:91:a0:f3:f3:
         c7:fc:a6:cd:5f:1d:1c:c1:1b:96:a0:ca:04:98:04:87:17:8c:
         b7:97:39:c5:55:db:88:6a:35:1d:e3:82:d2:9d:ff:ca:68:a3:
         07:bb:f2:8d:3e:9f:47:98:87:05:ec:bf:34:93:76:fb:d6:eb:
         f2:12:10:0f:71:6e:c9:b6:2c:41:68:39:af:85:be:30:8a:d7:
         ba:a5:6c:71:45:97:0f:7d:ca:36:73:41:71:76:73:66:c9:82:
         f2:69:24:71:a3:98:ab:7e:50:44:cf:91:44:b7:64:21:9f:91:
         dc:39:e2:51:e6:37:91:03:8a:70:6c:b4:f7:e2:53:c8:0e:3b:
         c7:91:89:a0:3b:80:d2:a5:bd:13:d7:b5:72:6c:b8:fc:e6:dd:
         28:a4:49:bb:30:e0:38:d7:01:60:b5:11:7f:e5:a0:4d:e1:dc:
         2d:4c:28:92:fe:bb:b8:43:a9:86:5a:c9:0c:42:5b:52:8a:a2:
         ad:27:bf:f9:b1:50:4f:26:62:ef:1a:94:49:ea:b8:9c:2a:57:
         4b:98:e6:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:20:28 2025 by rpki-client