Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8b82699c-e50e-3db6-8f92-30a8c9f5ac2f.roa
File:                     8b82699c-e50e-3db6-8f92-30a8c9f5ac2f.roa (raw, json)
Hash identifier:          rf2aNtjU38L7x3qjED5xo0npMranB2H3Dtj5nxwDtUI=
Subject key identifier:   E4:72:BC:52:1D:EC:D2:71:B7:BA:AD:BD:55:04:7A:A8:B4:5D:7F:92
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584A81465FAB57849CAFF786A480
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8b82699c-e50e-3db6-8f92-30a8c9f5ac2f.roa
Signing time:             Sun 13 Jul 2025 13:01:03 +0000
ROA not before:           Sun 13 Jul 2025 13:01:03 +0000
ROA not after:            Sat 11 Oct 2025 13:01:03 +0000
asID:                     30036
IP address blocks:        2604:2e8f:8380::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:81:46:5f:ab:57:84:9c:af:f7:86:a4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jul 13 13:01:03 2025 GMT
            Not After : Oct 11 13:01:03 2025 GMT
        Subject: CN=6c06f9eb-3b65-415a-8607-69a3cadea7e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:4e:39:bc:4f:bc:01:3e:3d:20:05:f6:e3:a7:
                    7f:f2:ae:e9:76:fb:74:3b:42:6d:fc:ed:84:45:70:
                    57:7b:e1:fa:aa:a3:73:ba:61:5c:c2:a7:9e:e3:aa:
                    dc:61:d1:6f:a8:66:fe:13:55:b5:51:98:ad:3e:e6:
                    03:41:36:86:79:df:ac:48:8a:98:3c:f8:b0:ef:6b:
                    8d:73:db:a1:13:92:7d:26:08:c4:85:54:d9:55:53:
                    fd:4c:34:41:20:a7:3a:f6:98:f5:c0:36:37:3e:7e:
                    72:98:f1:f5:e5:8b:e6:bd:3d:c2:40:b3:93:f0:6e:
                    2c:c8:37:a3:52:f8:a7:66:d2:40:d0:b6:e4:a9:9d:
                    26:c7:2a:12:23:ba:4a:a0:eb:dd:5c:fd:d4:d7:05:
                    37:75:56:18:0c:54:27:55:d1:6a:13:f7:10:32:f6:
                    97:1b:75:53:e8:2a:c5:bb:12:1a:bd:71:10:76:1f:
                    de:2b:07:aa:f3:d3:56:c4:a2:23:0c:e5:00:cd:db:
                    b5:00:20:d5:38:a8:ca:42:6d:b6:b7:c6:cb:85:d3:
                    86:c5:f0:4c:35:ce:73:e3:5a:c3:bb:98:2b:92:8d:
                    31:43:cd:7a:de:e8:b4:6f:a5:38:47:ce:4c:09:1b:
                    f4:14:68:33:33:7c:79:12:c7:a3:d7:e3:65:65:17:
                    9c:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:72:BC:52:1D:EC:D2:71:B7:BA:AD:BD:55:04:7A:A8:B4:5D:7F:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8b82699c-e50e-3db6-8f92-30a8c9f5ac2f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8f:8380::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:32:b6:82:9e:cc:01:df:47:2c:95:eb:bf:10:ff:10:8e:2d:
         1b:67:3e:4b:bc:7f:73:41:28:f5:6d:01:83:b8:25:5c:c0:0b:
         8c:bf:c2:ca:55:9f:48:1e:60:90:a9:48:39:32:dd:d8:b6:71:
         d0:17:f7:ff:b0:4a:bd:d5:8d:fe:ee:c6:12:30:55:78:a5:ac:
         2f:dc:39:ef:f5:bf:a6:ca:03:61:8b:b6:a4:85:0b:91:33:0e:
         2f:38:de:e6:07:b5:5b:d8:41:95:6f:e8:76:2f:83:5d:92:53:
         c2:b7:c0:7b:5b:fd:b4:7d:cb:1e:51:ed:d9:ae:66:25:97:ea:
         cc:f9:22:86:a4:3b:08:78:9d:60:98:a8:b9:d8:fb:1c:55:da:
         e9:5c:ef:12:0f:4a:25:23:d8:7a:e3:a5:d9:6a:8e:52:04:50:
         fa:50:18:6f:08:74:b9:bd:ed:42:65:9f:72:16:9d:d4:2d:ec:
         2a:78:b0:a3:04:3e:d1:0a:80:90:6c:17:49:4e:39:cf:94:34:
         a4:54:8d:3b:0d:96:cb:52:da:85:54:82:f3:94:32:52:5b:ce:
         1b:f4:33:f4:1f:ad:0f:ad:13:63:83:1a:66:e2:af:b9:d0:ea:
         ec:13:1e:12:02:59:12:2b:04:4a:79:f4:fd:9d:07:9d:95:2c:
         f2:d2:5d:41
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqBRl+rV4Scr/eGpIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk
NmMwNmY5ZWItM2I2NS00MTVhLTg2MDctNjlhM2NhZGVhN2U2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj045vE+8AT49IAX246d/8q7pdvt0O0Jt/O2E
RXBXe+H6qqNzumFcwqee46rcYdFvqGb+E1W1UZitPuYDQTaGed+sSIqYPPiw72uN
c9uhE5J9JgjEhVTZVVP9TDRBIKc69pj1wDY3Pn5ymPH15YvmvT3CQLOT8G4syDej
UvinZtJA0LbkqZ0mxyoSI7pKoOvdXP3U1wU3dVYYDFQnVdFqE/cQMvaXG3VT6CrF
uxIavXEQdh/eKweq89NWxKIjDOUAzdu1ACDVOKjKQm22t8bLhdOGxfBMNc5z41rD
u5grko0xQ8163ui0b6U4R85MCRv0FGgzM3x5Esej1+NlZRecHQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFORyvFId7NJxt7qtvVUEeqi0XX+SMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvOGI4MjY5OWMtZTUwZS0z
ZGI2LThmOTItMzBhOGM5ZjVhYzJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQuj4OA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAI0ytoKezAHfRyyV678Q/xCOLRtnPku8f3NBKPVtAYO4JVzAC4y/
wspVn0geYJCpSDky3di2cdAX9/+wSr3Vjf7uxhIwVXilrC/cOe/1v6bKA2GLtqSF
C5EzDi843uYHtVvYQZVv6HYvg12SU8K3wHtb/bR9yx5R7dmuZiWX6sz5IoakOwh4
nWCYqLnY+xxV2ulc7xIPSiUj2HrjpdlqjlIEUPpQGG8IdLm97UJln3IWndQt7Cp4
sKMEPtEKgJBsF0lOOc+UNKRUjTsNlstS2oVUgvOUMlJbzhv0M/QfrQ+tE2ODGmbi
r7nQ6uwTHhICWRIrBEp59P2dB52VLPLSXUE=
-----END CERTIFICATE-----
Generated at Thu Aug 7 00:38:58 2025 by rpki-client