Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9d23743a-b916-3509-ac6e-63615d63d932.roa
File:                     9d23743a-b916-3509-ac6e-63615d63d932.roa (raw, json)
Hash identifier:          vwlmcwmbKnyivLJVL3ltyIh6d9oyM+2YF8Z65goeYcw=
Subject key identifier:   85:88:5C:09:72:E2:B7:A1:6D:AB:1B:CA:3F:71:B5:26:EE:36:01:7C
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584A8410D236EC687AF754F0B200
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9d23743a-b916-3509-ac6e-63615d63d932.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     30036
IP address blocks:        2604:2e8d:7c00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:10:d2:36:ec:68:7a:f7:54:f0:b2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=fc3db888-8081-4e47-a48a-7c9247952ad7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f8:ad:3c:91:c0:1b:4e:a4:78:c6:9d:49:51:
                    36:7a:1d:37:78:16:13:ac:61:16:6e:c5:a8:92:42:
                    71:8f:6c:48:40:4b:df:92:70:6a:db:e8:96:1b:32:
                    81:2e:4a:d0:d3:bb:05:b0:10:bc:a6:9e:cc:f5:c1:
                    08:20:5f:9f:68:71:db:26:76:b8:49:6f:c2:33:66:
                    05:30:ef:c1:a1:ab:c2:9f:57:2c:a4:35:b4:53:ba:
                    26:90:48:f3:83:e9:44:f5:23:15:23:82:50:e9:06:
                    3d:23:13:b1:08:47:00:79:6b:ed:ec:fc:ca:3d:34:
                    a9:64:b4:a4:fb:81:79:92:a6:a0:fc:f8:63:4f:82:
                    89:47:76:1c:aa:d5:53:85:4f:5f:7f:ca:c2:9e:df:
                    97:e2:d4:67:2e:9b:3b:53:be:d7:cc:05:43:34:ed:
                    b9:65:b5:9b:80:c7:86:57:44:9a:cd:23:31:df:d1:
                    c9:31:a2:12:13:71:4d:dd:0b:e3:f7:ba:02:57:da:
                    7f:c8:19:85:c4:23:d5:c1:61:f7:b6:74:e3:58:61:
                    a6:40:c9:5b:e1:a8:d5:47:2b:de:ce:ad:7e:5b:58:
                    c0:85:d3:7d:2f:2a:01:55:f9:7a:57:f4:b2:4b:2f:
                    f1:74:90:9a:76:2d:b3:f1:1c:cf:78:d1:20:a5:83:
                    67:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:88:5C:09:72:E2:B7:A1:6D:AB:1B:CA:3F:71:B5:26:EE:36:01:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9d23743a-b916-3509-ac6e-63615d63d932.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8d:7c00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:e3:6c:3a:9a:38:22:f6:80:4d:1c:b5:b8:6b:69:38:e1:74:
         35:e0:4c:95:31:14:e9:22:28:70:b0:20:8a:8c:91:08:f2:67:
         8d:f8:93:95:aa:a2:64:a2:5d:e6:31:8c:91:c7:35:a6:56:fc:
         4f:8d:8d:dd:0f:e8:41:dc:b0:74:f0:03:5b:8c:92:d7:cb:9f:
         d3:74:32:89:cd:c9:e2:4d:58:a3:57:04:36:14:63:19:39:ac:
         f6:75:da:66:ac:24:b4:7f:fe:1d:20:77:f6:50:a0:fc:1b:22:
         1e:17:65:9c:e0:28:0d:49:0b:a4:47:89:ca:15:61:02:c7:e0:
         4f:4c:0f:43:00:b8:90:57:ce:98:dc:84:ed:de:df:f6:32:47:
         1a:28:4e:b3:a5:b5:e9:0f:48:61:f9:80:77:d4:19:a4:d9:d5:
         94:2e:f1:fc:c6:c0:0c:e8:0a:75:69:c0:03:2e:92:c3:87:3b:
         9c:1e:9f:45:d7:a5:65:09:3b:4d:7a:b0:8e:6a:f6:87:54:bd:
         e2:e4:28:8e:79:28:0a:09:b4:7f:e7:31:b2:3d:36:3a:9b:20:
         c6:d4:42:a7:df:17:9d:a3:fa:b3:ba:45:a5:e8:35:80:63:72:
         af:ca:5e:54:37:0a:7c:08:9c:43:c5:c7:48:6d:90:39:8d:e5:
         21:ac:a2:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:57:28 2025 by rpki-client