Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9f58e746-fc08-3bea-ac49-140fc48166a6.roa
File:                     9f58e746-fc08-3bea-ac49-140fc48166a6.roa (raw, json)
Hash identifier:          PLxf72/hyqdQ995BquFHZw32qXgVEbs0dWh6g9dyidE=
Subject key identifier:   B3:0F:13:E3:CC:E1:36:06:1D:B2:3C:3A:02:C7:86:48:EB:2B:ED:A0
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584A81465B818BB6C49941187500
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9f58e746-fc08-3bea-ac49-140fc48166a6.roa
Signing time:             Sun 13 Jul 2025 13:01:03 +0000
ROA not before:           Sun 13 Jul 2025 13:01:03 +0000
ROA not after:            Sat 11 Oct 2025 13:01:03 +0000
asID:                     30036
IP address blocks:        2604:2e8c:ac00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:81:46:5b:81:8b:b6:c4:99:41:18:75:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jul 13 13:01:03 2025 GMT
            Not After : Oct 11 13:01:03 2025 GMT
        Subject: CN=0059d913-eae2-44c6-b3cc-3c779228a93f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ad:d1:eb:c6:db:f2:f7:70:8d:68:0e:9a:f9:
                    b2:13:0b:13:35:b2:12:88:2a:f1:f0:93:2e:9f:00:
                    b8:a0:fa:55:e5:59:c1:95:8d:de:fd:77:b2:2b:bc:
                    99:b8:fa:32:cf:e8:93:cd:ad:b6:6d:9e:2a:b4:95:
                    01:18:7c:53:59:84:95:f4:dd:fd:3b:7c:a7:51:fe:
                    7f:9a:25:4c:c2:1c:18:74:d7:da:df:bd:4b:81:ea:
                    0f:63:1c:fe:ab:18:74:f0:59:ec:e5:e1:76:3d:3b:
                    cb:64:d7:3a:00:95:6b:90:46:a6:1b:48:2e:5a:e9:
                    68:99:a9:b3:07:5a:fc:96:6f:55:28:c9:bd:c9:86:
                    5d:18:c7:1c:c7:f8:44:5c:68:c9:6a:19:9d:a6:98:
                    f1:10:0f:5f:36:65:93:19:61:c9:1e:ef:3b:f0:9c:
                    52:43:5e:31:e4:c8:b2:e0:2f:69:ae:b1:44:05:dc:
                    ef:af:03:50:a1:c4:c7:47:ff:a6:95:0e:f9:38:4e:
                    bb:40:32:27:c6:1c:45:17:dc:fa:46:6e:26:d5:10:
                    cc:e5:85:e3:e1:be:09:bc:23:c9:f0:6a:4b:39:be:
                    01:2d:c0:85:ee:49:10:bb:50:03:42:10:c7:0b:f7:
                    af:af:52:55:89:d5:64:ea:21:62:3c:d1:e5:e3:fa:
                    ce:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:0F:13:E3:CC:E1:36:06:1D:B2:3C:3A:02:C7:86:48:EB:2B:ED:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9f58e746-fc08-3bea-ac49-140fc48166a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8c:ac00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:39:2a:1e:cc:e0:c9:7a:b9:d6:e8:80:cc:b8:2e:ec:43:d4:
         97:20:5e:b5:fb:12:bf:43:76:ef:80:10:99:05:18:02:89:4d:
         b7:24:c8:e6:97:9f:67:d6:6a:1e:57:40:cb:77:08:36:24:31:
         24:51:d4:5d:e3:d1:08:ba:0d:a9:fd:ec:65:b9:90:82:b3:7f:
         a4:56:f6:ce:87:51:6d:01:9a:a6:e5:58:db:27:4f:7c:3a:43:
         ee:07:72:79:f9:b6:d3:b6:4e:72:cb:f6:cc:9d:5e:ec:27:a2:
         5a:7e:a0:bc:14:c8:55:ee:cd:02:d6:9a:80:09:a8:f9:74:68:
         eb:a2:6f:f0:64:f3:39:15:e7:66:27:0c:cd:06:a0:f6:d3:d9:
         b3:53:56:30:2c:0a:c2:d1:30:54:b9:05:84:9f:52:fb:9f:1c:
         c9:9b:cc:5e:a5:5f:82:c1:86:77:54:1a:ec:68:16:02:4c:e3:
         82:78:b2:c3:31:57:50:e9:2f:8e:fd:e7:0d:82:0d:10:71:9f:
         a5:b9:81:73:9f:b9:11:29:6b:52:56:6c:d0:76:67:91:fd:bb:
         38:5a:61:cb:a0:43:8e:02:db:d5:60:84:a1:1d:d4:5b:de:6c:
         4a:9a:c8:2d:8c:07:fa:d3:8e:d7:02:33:b5:e5:3b:b4:08:b4:
         f9:e9:94:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:19:22 2025 by rpki-client