Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c35e098e-b550-340e-8fcb-693dcd6370c6.roa
File:                     c35e098e-b550-340e-8fcb-693dcd6370c6.roa (raw, json)
Hash identifier:          5sW0w65FVzCc6DD82MsypIRqJnxyCch7gcbJDl/MYUg=
Subject key identifier:   D5:75:B8:0C:4B:52:B3:B8:64:A4:67:ED:0C:44:3B:A9:34:E0:B6:5D
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584A9BCB7679C5377FDE94D356C0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c35e098e-b550-340e-8fcb-693dcd6370c6.roa
Signing time:             Wed 23 Jul 2025 01:00:52 +0000
ROA not before:           Wed 23 Jul 2025 01:00:52 +0000
ROA not after:            Tue 21 Oct 2025 01:00:52 +0000
asID:                     30036
IP address blocks:        2604:2e8d:c400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9b:cb:76:79:c5:37:7f:de:94:d3:56:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jul 23 01:00:52 2025 GMT
            Not After : Oct 21 01:00:52 2025 GMT
        Subject: CN=84d82f0a-1ae0-4cd7-aa63-87c58c4efe76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:ed:b8:9b:24:31:47:ca:b6:cd:72:69:a2:57:
                    8b:cd:f7:2b:d8:7a:ba:4c:21:c6:db:ac:43:a8:31:
                    0a:b8:da:ac:3b:2c:bd:a3:89:53:fc:33:60:0b:df:
                    2f:4e:c3:ca:16:b5:cf:1b:bd:7d:96:86:86:a7:ab:
                    d2:67:59:6e:1a:67:f4:19:c6:b0:a3:42:f0:2e:5f:
                    05:0e:4e:93:c0:04:c3:f3:35:fb:29:51:55:19:50:
                    cc:ab:d4:bf:a7:75:c8:b7:84:96:cf:18:72:c5:21:
                    7f:34:e3:ef:15:8f:9e:f2:33:90:d8:b7:e5:ff:2d:
                    4b:17:d9:56:d9:54:ea:1f:86:49:11:93:02:9a:62:
                    f9:23:61:23:7a:ce:f8:76:03:4c:64:21:5b:dd:76:
                    8e:9f:78:2b:55:49:7e:ed:9f:46:58:3a:1f:c5:39:
                    29:cb:cb:0d:1d:1a:bf:03:64:7c:fe:af:e4:e9:7f:
                    cb:21:40:de:f1:9a:d2:04:7a:10:2e:b2:20:09:e5:
                    95:56:b9:3e:46:5a:d9:6f:09:e5:4b:b0:fe:cf:4d:
                    0f:7d:0c:62:c9:ef:b7:11:fb:70:f1:7b:ed:72:aa:
                    67:82:01:26:51:37:10:72:8c:b6:e7:da:d8:c0:a5:
                    67:75:27:d2:47:2a:7a:8f:28:72:3a:b7:58:ae:57:
                    38:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:75:B8:0C:4B:52:B3:B8:64:A4:67:ED:0C:44:3B:A9:34:E0:B6:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c35e098e-b550-340e-8fcb-693dcd6370c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8d:c400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:2f:1b:da:f1:c7:39:59:6e:30:51:63:b8:a5:4b:e6:8c:23:
         71:7a:44:70:09:70:bf:5a:1e:0f:2c:7c:fa:31:85:a9:cf:98:
         91:5a:2e:87:03:68:cd:53:45:27:8f:5b:b6:de:3e:ec:22:ac:
         d1:eb:95:f1:b4:47:a9:47:2c:b6:1e:25:56:61:46:96:12:93:
         75:fe:b1:22:c4:f8:e7:42:87:ac:32:cd:d0:aa:f3:84:4d:0f:
         35:a1:b5:01:a2:bd:30:1b:23:13:8e:d9:6f:80:39:26:d2:12:
         c1:a7:5f:e9:75:97:fa:63:e2:50:39:75:e8:8e:bb:a5:a3:ef:
         d0:07:e9:e7:e9:80:6d:58:fb:79:92:37:40:9d:c8:0f:a2:43:
         ef:0e:95:8b:a2:40:70:e4:9c:17:2f:a2:2c:1f:cb:89:bd:d7:
         25:ff:db:59:4d:d0:cf:bb:10:62:38:fc:89:23:f5:6e:a0:82:
         02:19:38:27:78:c1:84:28:88:6b:4d:af:43:b5:c2:58:fc:08:
         d5:66:45:ff:2f:0e:4e:fe:0a:49:b1:47:f3:33:19:35:1e:9f:
         9d:bf:18:db:75:5c:1d:04:8e:fb:0c:c4:55:3d:5b:b6:7d:bd:
         fb:3b:25:c7:2b:9a:13:ab:61:92:a0:86:ea:1b:b1:bd:fd:b1:
         bb:ca:05:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 02:00:49 2025 by rpki-client