Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c7752afa-cd81-3270-816d-e1eafff57209.roa
File:                     c7752afa-cd81-3270-816d-e1eafff57209.roa (raw, json)
Hash identifier:          lBbcxKcrIRS776nM7TYPh95vVUHKFFvzhi2dLJgqJl0=
Subject key identifier:   E3:2C:BF:00:95:89:5A:71:42:9F:23:A7:7B:38:C5:6F:EB:22:22:92
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584A8410CFEF9C7CCBA0F4B8C580
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c7752afa-cd81-3270-816d-e1eafff57209.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     30036
IP address blocks:        2604:2e89:9c00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:10:cf:ef:9c:7c:cb:a0:f4:b8:c5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=97e94944-e270-4909-a321-8e965fff60f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:14:30:22:d7:b6:d2:85:f1:e9:ca:37:6e:fa:
                    79:8d:2f:92:9d:17:de:76:5b:fd:71:9c:1a:ce:2a:
                    85:50:d2:64:6e:a2:1a:35:18:da:08:12:91:ff:1c:
                    96:e9:7c:6e:41:13:f5:9c:59:e0:3e:9e:8f:d6:ea:
                    c8:79:2f:fa:07:12:2b:0d:28:56:67:09:80:b6:4d:
                    ec:ff:22:a9:68:d0:a2:7a:cb:cf:bd:62:22:83:3b:
                    1a:7e:8e:47:f9:e6:e4:e2:b7:6b:61:6c:8c:06:53:
                    08:33:95:9e:16:17:18:cd:59:fa:2b:b7:4c:d2:3b:
                    7f:01:a6:3c:2c:e1:9d:7e:7b:46:a5:63:38:c0:06:
                    3f:a6:6e:2c:20:b6:ed:65:c2:22:32:2e:cb:61:c9:
                    6d:68:74:16:65:92:a0:41:0b:77:9a:de:44:e3:3b:
                    9b:52:d5:e9:c3:41:14:dc:32:d1:03:eb:b9:83:70:
                    bc:f6:0b:00:6e:01:7c:78:14:00:e1:1b:2f:64:a7:
                    1d:b7:5e:5b:ea:08:09:30:8e:14:64:38:a3:6c:74:
                    4b:16:ca:c2:31:7a:1d:7e:df:b8:f7:31:54:59:ef:
                    f6:b0:4c:82:d4:d7:71:20:7e:e7:e6:0a:08:bc:f3:
                    4f:68:34:97:a8:3c:b9:af:fc:b4:1b:e3:51:b4:d2:
                    5e:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:2C:BF:00:95:89:5A:71:42:9F:23:A7:7B:38:C5:6F:EB:22:22:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c7752afa-cd81-3270-816d-e1eafff57209.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e89:9c00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:94:4a:9d:1c:86:84:aa:55:b9:12:e4:3e:d3:9e:a2:25:5c:
         21:dd:7a:c9:2a:de:35:8c:74:a6:71:ae:02:a4:26:72:89:21:
         aa:a6:cb:2f:bc:cc:b4:7c:47:64:ea:64:ad:90:46:9b:02:9e:
         fa:a4:d9:7b:0d:5d:b5:e8:de:3f:ac:eb:a8:db:7a:38:8e:29:
         e5:ee:5a:75:b7:12:81:1f:32:58:91:c6:a9:7c:a6:e5:26:ed:
         26:a9:5e:25:01:39:1e:ff:83:b2:b7:93:7b:63:f1:c8:40:19:
         d7:80:a3:91:2c:f9:c7:1c:df:b4:f3:43:ed:10:8b:62:2d:b7:
         79:af:e1:09:e0:5c:e0:c0:3e:86:6a:ea:9d:1f:ce:65:65:4c:
         72:71:b0:5e:14:c4:eb:8b:ef:5b:1e:8f:74:5e:e6:94:fb:c8:
         37:a3:5e:f6:a7:d1:b3:6f:db:38:55:d1:cf:66:32:99:a4:47:
         fb:8b:37:c4:43:c9:99:70:df:ce:5e:40:04:87:e8:11:cb:78:
         c7:9e:ee:38:75:8e:94:68:f4:a8:cf:b8:b9:1e:75:95:58:ce:
         84:5f:db:16:92:50:c8:1e:80:9f:e8:ad:49:65:cf:e8:f9:11:
         ca:67:9b:43:88:7c:74:f0:3e:ca:e6:1c:e3:56:1c:12:29:46:
         83:9c:56:cc
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEqEEM/vnHzLoPS4xYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk
OTdlOTQ5NDQtZTI3MC00OTA5LWEzMjEtOGU5NjVmZmY2MGYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAihQwIte20oXx6co3bvp5jS+SnRfedlv9cZwa
ziqFUNJkbqIaNRjaCBKR/xyW6XxuQRP1nFngPp6P1urIeS/6BxIrDShWZwmAtk3s
/yKpaNCiesvPvWIigzsafo5H+ebk4rdrYWyMBlMIM5WeFhcYzVn6K7dM0jt/AaY8
LOGdfntGpWM4wAY/pm4sILbtZcIiMi7LYcltaHQWZZKgQQt3mt5E4zubUtXpw0EU
3DLRA+u5g3C89gsAbgF8eBQA4RsvZKcdt15b6ggJMI4UZDijbHRLFsrCMXodft+4
9zFUWe/2sEyC1NdxIH7n5goIvPNPaDSXqDy5r/y0G+NRtNJehwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFOMsvwCViVpxQp8jp3s4xW/rIiKSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYzc3NTJhZmEtY2Q4MS0z
MjcwLTgxNmQtZTFlYWZmZjU3MjA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiZww
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAkpRKnRyGhKpVuRLkPtOeoiVcId16ySreNYx0pnGuAqQmcokhqqbL
L7zMtHxHZOpkrZBGmwKe+qTZew1dtejeP6zrqNt6OI4p5e5adbcSgR8yWJHGqXym
5SbtJqleJQE5Hv+DsreTe2PxyEAZ14CjkSz5xxzftPND7RCLYi23ea/hCeBc4MA+
hmrqnR/OZWVMcnGwXhTE64vvWx6PdF7mlPvIN6Ne9qfRs2/bOFXRz2YymaRH+4s3
xEPJmXDfzl5ABIfoEct4x57uOHWOlGj0qM+4uR51lVjOhF/bFpJQyB6An+itSWXP
6PkRymebQ4h8dPA+yuYc41YcEilGg5xWzA==
-----END CERTIFICATE-----
Generated at Thu Aug 7 04:30:45 2025 by rpki-client