Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/97517270-d78e-37f5-a3d6-80e6fd30c3e2.roa
File:                     97517270-d78e-37f5-a3d6-80e6fd30c3e2.roa (raw, json)
Hash identifier:          9xcRY8u1DJZWwq1nXJP2YAw+H/iz7Jgees7PM1STfzE=
Subject key identifier:   F0:10:76:A7:0B:AB:F0:61:40:FF:3A:09:82:34:FB:5A:03:C4:47:69
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584A81463D4AD712AD237CC22300
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/97517270-d78e-37f5-a3d6-80e6fd30c3e2.roa
Signing time:             Sun 13 Jul 2025 13:01:03 +0000
ROA not before:           Sun 13 Jul 2025 13:01:03 +0000
ROA not after:            Sat 11 Oct 2025 13:01:03 +0000
asID:                     30036
IP address blocks:        2604:2e8b:8000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:81:46:3d:4a:d7:12:ad:23:7c:c2:23:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jul 13 13:01:03 2025 GMT
            Not After : Oct 11 13:01:03 2025 GMT
        Subject: CN=8aa22200-5f6c-4749-af6c-b3f8a8048325
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:e9:0b:5b:74:3a:2f:f2:4a:0c:34:d5:d1:ce:
                    98:d6:50:b9:52:a5:09:16:5a:e7:87:88:e2:f0:e8:
                    a4:4b:90:3b:d8:5c:3f:2b:5c:23:47:3f:63:21:01:
                    ab:e3:a9:f8:ee:f6:8b:a9:fb:10:3a:51:31:6e:95:
                    4d:07:e3:66:3a:50:0d:30:17:8d:95:15:1c:25:d1:
                    4b:cb:af:f9:49:f6:0d:57:b6:4f:38:9c:c2:c9:b3:
                    3a:c1:64:0c:c0:8d:94:81:f2:da:cf:38:2f:e6:59:
                    bc:d3:6e:ed:17:e0:80:6a:8e:30:fd:d3:1b:21:4b:
                    ac:09:32:41:c2:3f:0d:a2:6b:40:7d:5d:ff:5a:39:
                    a8:f2:ca:a8:62:eb:ee:de:4f:e9:e7:67:71:4f:bf:
                    ca:6f:6a:e9:59:68:f3:42:07:b8:b4:29:6f:ae:db:
                    2e:6e:9e:6f:ac:69:6b:e4:52:a0:d8:7c:5f:d4:95:
                    a9:fc:93:da:62:96:a1:3b:30:34:6f:e2:3f:ac:61:
                    7d:d2:35:c1:3a:c5:92:60:7c:9f:2f:b1:31:4e:a5:
                    77:dd:91:c4:3e:84:54:a2:d3:a5:c2:f5:b8:4a:e7:
                    73:93:27:3a:e8:25:02:1b:a1:5f:20:91:9e:ce:99:
                    3b:6b:1b:d0:1c:08:ad:66:2f:30:66:ae:d1:54:8c:
                    94:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:10:76:A7:0B:AB:F0:61:40:FF:3A:09:82:34:FB:5A:03:C4:47:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/97517270-d78e-37f5-a3d6-80e6fd30c3e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8b:8000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:24:d9:7e:fa:ba:b1:48:ad:0a:a7:70:41:88:de:92:cb:29:
         68:2a:ed:c9:ea:b4:81:4e:7f:6c:33:2f:22:b4:41:7a:b3:a6:
         f0:2e:da:53:e1:00:30:08:9f:e8:80:9a:35:29:75:54:57:aa:
         7f:9b:b1:ce:24:b2:95:7c:01:7f:b9:4d:53:30:2b:67:e9:4c:
         df:d1:03:0e:8a:80:c2:7d:07:d9:43:1f:0c:2a:95:ab:30:0c:
         a2:4c:2b:98:5f:29:20:20:6b:2e:1b:2f:cf:d0:6d:7e:cf:36:
         ab:8d:c9:ad:07:7e:03:83:70:e4:1e:23:56:ce:4e:70:a8:b3:
         f0:dd:11:0f:89:7e:41:cb:f2:e2:57:86:41:1c:ef:87:33:6a:
         a6:2b:59:5d:d1:2e:db:ca:46:e7:4e:62:6c:fc:5c:0f:e2:af:
         b7:5e:89:de:5f:f3:03:e7:90:70:5a:17:64:74:38:b7:3e:04:
         9b:ce:b0:35:3c:1d:13:2e:eb:3f:49:8c:b4:6f:dd:66:b2:b9:
         a8:74:0f:8a:09:db:0c:a4:b4:48:c5:fa:2f:f7:30:6e:55:b1:
         ed:1f:ba:97:2e:07:4a:ce:e7:24:c7:53:0f:b7:df:19:e7:27:
         fa:d7:3c:e4:39:b6:d7:e8:5a:1d:67:d1:99:b2:7a:a3:17:02:
         8f:e5:90:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:24:32 2025 by rpki-client