Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cd4bfe42-e547-395e-a177-c3a90f9b7116.roa
File:                     cd4bfe42-e547-395e-a177-c3a90f9b7116.roa (raw, json)
Hash identifier:          59amonVGELvp+W9v/WwG+H58NQ2DnTTFuJm5eg5oHHM=
Subject key identifier:   63:FB:A5:36:2C:07:1F:75:7D:25:D8:12:9A:1D:BF:57:C2:7C:87:E6
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584A81464C5E18B1E1A5C39B1F80
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cd4bfe42-e547-395e-a177-c3a90f9b7116.roa
Signing time:             Sun 13 Jul 2025 13:01:03 +0000
ROA not before:           Sun 13 Jul 2025 13:01:03 +0000
ROA not after:            Sat 11 Oct 2025 13:01:03 +0000
asID:                     30036
IP address blocks:        2604:2e8b:f000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:81:46:4c:5e:18:b1:e1:a5:c3:9b:1f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jul 13 13:01:03 2025 GMT
            Not After : Oct 11 13:01:03 2025 GMT
        Subject: CN=413f3073-c6a1-494f-b12d-b6630fdf7415
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:bf:7c:22:eb:bc:45:ef:ac:c9:5c:48:84:88:
                    2b:f0:2b:fd:43:d2:1a:ed:c4:ac:79:c6:2b:13:3b:
                    7b:23:89:bc:fb:4d:d2:d3:3c:a7:bf:ff:fd:bf:16:
                    46:ad:0a:ea:45:4e:ea:98:99:1d:7d:ae:1b:73:03:
                    9b:a8:a7:52:7c:20:18:5a:fd:a6:25:55:d6:80:21:
                    94:6c:6e:5a:8f:d7:fa:2d:2b:bb:08:74:8d:33:62:
                    b4:2b:7c:6d:ab:e3:22:29:7c:03:ca:2b:f4:d6:18:
                    88:52:59:58:a4:c1:c0:48:e4:3c:7f:5a:b7:1c:86:
                    99:23:56:8a:75:5f:4f:15:dd:c1:63:c6:5f:96:41:
                    a7:0c:4b:27:c6:b5:f2:40:f6:e5:b1:a1:34:d3:07:
                    23:7b:66:17:bc:0f:e3:32:22:23:9b:03:5d:21:ce:
                    4c:43:a1:29:8a:39:2d:56:96:f2:cb:a0:de:09:69:
                    3f:34:f5:27:c8:7e:0e:f5:d6:2d:94:22:4f:e9:f1:
                    d4:6a:d9:bd:c8:75:a5:07:b3:c0:a1:bf:83:da:0e:
                    01:d1:93:df:f6:63:4c:b7:e4:9a:41:da:a0:a9:fc:
                    61:3d:48:97:27:49:de:69:ca:b5:2e:ce:07:4d:6e:
                    ac:09:3b:7e:29:0e:ff:a4:dc:82:18:ab:d7:03:8d:
                    d2:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:FB:A5:36:2C:07:1F:75:7D:25:D8:12:9A:1D:BF:57:C2:7C:87:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cd4bfe42-e547-395e-a177-c3a90f9b7116.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8b:f000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:45:f4:92:6e:88:20:d0:00:7c:d8:1f:c8:1b:ed:01:59:78:
         d2:f1:30:d6:fc:b4:00:97:1c:20:48:06:a2:f5:ea:61:4a:ec:
         75:d8:49:f4:ab:42:34:a2:3e:d3:c7:70:11:6e:d8:93:e5:9f:
         13:0b:3f:57:ed:f0:56:39:86:03:57:f0:fd:0d:89:dd:a5:c5:
         5e:6f:8e:f9:95:8c:49:c6:f1:43:c5:fe:ad:64:09:ac:e1:77:
         67:98:c2:ba:e6:5d:ff:e6:01:f1:72:75:cf:ef:ba:df:0d:67:
         e3:7e:59:98:a3:ba:22:de:97:6c:2f:5d:3e:6d:95:39:5d:c9:
         7b:52:53:47:f4:67:93:fb:a9:c9:86:32:df:ea:3d:c4:f1:6f:
         95:15:f2:7b:f0:25:66:33:c6:29:1f:f2:4a:0e:74:a7:3c:08:
         e0:79:b8:a2:d3:f9:cb:88:c8:b5:48:a2:27:c6:02:2b:b9:18:
         2c:4c:41:71:72:5c:12:4f:12:86:05:3d:d1:95:fa:6e:ae:e2:
         24:8b:1c:7d:e2:a7:d4:13:ea:26:a7:14:57:b0:20:ff:7e:52:
         39:f1:4d:3e:53:d3:d7:94:ab:fa:3c:a8:ee:0b:39:1b:b0:1a:
         67:a1:0a:ea:ed:83:09:a4:e8:71:80:8c:8f:61:83:df:a5:0e:
         be:6e:0f:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:16:47 2025 by rpki-client