Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8315b56a-6d64-3caa-aa56-cda8c2ec2e9a.roa
File:                     8315b56a-6d64-3caa-aa56-cda8c2ec2e9a.roa (raw, json)
Hash identifier:          t+YH1eZnwLreqfP0Pdh+uKCo6Rz1XFnoLVzCPvAHVQc=
Subject key identifier:   E6:50:C8:BA:E5:E6:D6:8E:4A:A1:5B:70:2B:4A:D2:1F:11:22:65:AB
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584A8412481C14FD838220BD7E40
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8315b56a-6d64-3caa-aa56-cda8c2ec2e9a.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     30036
IP address blocks:        2604:2e8a:1000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:48:1c:14:fd:83:82:20:bd:7e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=a4ccfaeb-bfd6-47d9-91e5-4c3ddac4fd63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:56:8a:a3:50:23:92:ac:a6:d6:9a:ad:c2:aa:
                    40:1b:ac:64:f5:52:0f:45:f3:e8:6e:68:e9:da:02:
                    64:d0:d9:8d:c5:d7:89:5e:37:b1:37:29:69:5e:5a:
                    d5:87:c7:a2:49:81:3e:d6:ca:57:48:9c:86:b1:4b:
                    14:8d:09:20:5a:cc:1d:ac:78:64:1a:77:f6:9e:c8:
                    b2:86:34:71:a8:f5:8b:1d:23:ad:b0:5a:93:3d:43:
                    44:16:2a:2c:00:bf:6a:30:5c:76:07:a0:81:3f:30:
                    c0:8b:1e:4c:11:66:e9:37:f7:59:df:91:de:73:d2:
                    69:33:94:cd:08:12:21:40:c7:91:d8:3b:24:cc:2e:
                    44:c9:0c:33:bf:58:20:7a:65:5c:f6:ea:3e:73:1c:
                    21:05:99:d5:1f:ca:46:5b:e1:65:46:e1:ce:41:2d:
                    98:c9:43:0a:77:c6:bc:e5:8e:7e:5b:f4:1e:8e:a0:
                    67:c9:a2:11:ce:93:82:78:63:d5:f9:3e:b0:b1:aa:
                    a9:71:98:ff:c0:e9:a3:a2:07:ec:5c:77:d7:1c:b1:
                    5a:fa:87:5d:60:d1:bb:32:ba:d8:44:a3:dc:2d:e4:
                    3f:15:8a:f1:2e:9e:fb:6d:6a:e7:a7:98:fa:f6:2b:
                    58:4c:5c:56:19:ab:60:e5:72:46:3a:a4:da:53:4d:
                    78:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:50:C8:BA:E5:E6:D6:8E:4A:A1:5B:70:2B:4A:D2:1F:11:22:65:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8315b56a-6d64-3caa-aa56-cda8c2ec2e9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8a:1000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:87:68:e8:98:ce:31:42:a5:ea:11:9e:05:9d:67:c3:99:dd:
         e7:aa:66:0d:80:b9:3c:68:cf:12:b1:6a:c5:49:dd:77:cc:0c:
         9c:fc:40:17:63:81:59:4b:33:8d:3e:f9:56:ad:b2:2b:52:1b:
         ca:ac:e7:bd:05:90:b6:e3:08:ad:44:72:20:f8:46:4c:75:59:
         71:cb:53:9a:96:6d:fa:4f:fa:0f:4f:29:3b:5c:ad:50:7e:c8:
         2c:07:68:62:dc:83:ae:20:0e:ce:38:cd:7a:e4:05:6a:e1:9d:
         85:2c:2d:ca:07:d7:77:c7:f3:1a:96:61:4a:95:05:78:2c:5a:
         cf:f0:68:65:e3:3f:fc:39:77:41:6f:11:cc:be:cb:ce:95:70:
         3e:af:45:03:06:86:a0:d0:57:c0:80:e4:5e:16:c0:fa:b9:1e:
         79:6c:cb:47:57:77:e1:e6:50:f7:ed:25:9f:55:d7:7b:cf:b9:
         51:bf:b1:5f:ab:e8:9c:b2:d9:e1:f1:a5:94:6e:31:8a:2b:66:
         23:e3:ba:64:db:ee:0d:73:4b:29:ac:f3:e1:12:98:79:78:ef:
         ea:c0:40:6a:ae:05:bc:90:a9:5b:08:53:52:e9:24:75:9d:d0:
         2e:6d:a8:63:60:dd:23:f4:a0:84:f8:90:03:7e:9c:a6:08:81:
         86:78:5b:7b
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEqEEkgcFP2DgiC9fkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk
YTRjY2ZhZWItYmZkNi00N2Q5LTkxZTUtNGMzZGRhYzRmZDYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmlaKo1Ajkqym1pqtwqpAG6xk9VIPRfPobmjp
2gJk0NmNxdeJXjexNylpXlrVh8eiSYE+1spXSJyGsUsUjQkgWswdrHhkGnf2nsiy
hjRxqPWLHSOtsFqTPUNEFiosAL9qMFx2B6CBPzDAix5MEWbpN/dZ35Hec9JpM5TN
CBIhQMeR2DskzC5EyQwzv1ggemVc9uo+cxwhBZnVH8pGW+FlRuHOQS2YyUMKd8a8
5Y5+W/QejqBnyaIRzpOCeGPV+T6wsaqpcZj/wOmjogfsXHfXHLFa+oddYNG7MrrY
RKPcLeQ/FYrxLp77bWrnp5j69itYTFxWGatg5XJGOqTaU014xwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFOZQyLrl5taOSqFbcCtK0h8RImWrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvODMxNWI1NmEtNmQ2NC0z
Y2FhLWFhNTYtY2RhOGMyZWMyZTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuihAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAdodo6JjOMUKl6hGeBZ1nw5nd56pmDYC5PGjPErFqxUndd8wMnPxA
F2OBWUszjT75Vq2yK1IbyqznvQWQtuMIrURyIPhGTHVZcctTmpZt+k/6D08pO1yt
UH7ILAdoYtyDriAOzjjNeuQFauGdhSwtygfXd8fzGpZhSpUFeCxaz/BoZeM//Dl3
QW8RzL7LzpVwPq9FAwaGoNBXwIDkXhbA+rkeeWzLR1d34eZQ9+0ln1XXe8+5Ub+x
X6vonLLZ4fGllG4xiitmI+O6ZNvuDXNLKazz4RKYeXjv6sBAaq4FvJCpWwhTUukk
dZ3QLm2oY2DdI/SghPiQA36cpgiBhnhbew==
-----END CERTIFICATE-----
Generated at Thu Aug 7 00:38:05 2025 by rpki-client