Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ce2c6172-fcf0-3cb0-b63c-32da4a18dff8.roa
File:                     ce2c6172-fcf0-3cb0-b63c-32da4a18dff8.roa (raw, json)
Hash identifier:          xb+v6VsVrEr7cRQ+tMYbw+p94TS8y88oi3LZHHCJfCY=
Subject key identifier:   11:68:F8:A6:A7:7D:BC:90:09:CE:B1:72:78:EB:5C:84:8A:94:D0:0B
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584A90A0A9FAA7A6E8C92CE78988
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ce2c6172-fcf0-3cb0-b63c-32da4a18dff8.roa
Signing time:             Sat 19 Jul 2025 01:00:49 +0000
ROA not before:           Sat 19 Jul 2025 01:00:49 +0000
ROA not after:            Fri 17 Oct 2025 01:00:49 +0000
asID:                     30036
IP address blocks:        2604:2e87:c00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:90:a0:a9:fa:a7:a6:e8:c9:2c:e7:89:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jul 19 01:00:49 2025 GMT
            Not After : Oct 17 01:00:49 2025 GMT
        Subject: CN=9b1404fe-9d67-4a0f-a7e2-6d0e75a0ca1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:a3:70:73:ab:e1:26:be:14:da:f0:22:60:e7:
                    48:89:9b:09:62:bc:82:19:df:eb:e7:83:5e:e1:7a:
                    04:4d:dd:8f:77:b5:9c:70:30:88:07:c0:06:e4:a7:
                    f0:a6:d4:e3:c5:6c:1a:76:46:af:99:4b:8d:1d:0b:
                    a9:59:ac:37:c8:2b:42:cd:7b:56:f3:7c:50:b6:9b:
                    f5:e4:6f:6c:41:48:39:b0:08:dd:85:87:b6:c2:5f:
                    07:0d:89:ff:4d:19:4c:df:5c:2e:17:83:fa:b3:6a:
                    75:73:fb:7a:11:9b:87:2a:ab:f5:65:26:05:07:d8:
                    c6:a5:59:cc:e3:25:5d:77:f8:69:1f:c8:1f:4e:3c:
                    f3:b3:42:ef:29:51:58:cf:5e:30:8b:4a:7e:ac:96:
                    19:7e:02:46:bd:e3:88:fa:60:f7:5d:b0:12:c1:46:
                    9b:85:56:4a:37:98:83:75:b0:fa:c3:f7:bf:1f:b3:
                    09:ea:bf:73:59:1f:74:59:4a:44:89:e5:24:13:c1:
                    0b:5f:9e:27:71:85:dd:e2:e9:f2:1b:a6:f5:70:67:
                    e8:58:5d:53:c6:36:4e:b9:06:09:a8:2e:d7:cd:99:
                    78:2b:01:0b:84:db:28:77:98:6d:8e:5b:66:d4:6a:
                    59:52:41:5f:aa:5d:8a:8a:f6:44:7b:dc:43:c1:45:
                    03:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:68:F8:A6:A7:7D:BC:90:09:CE:B1:72:78:EB:5C:84:8A:94:D0:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ce2c6172-fcf0-3cb0-b63c-32da4a18dff8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e87:c00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:31:17:91:79:1a:c9:d5:d7:8c:da:dc:ae:36:85:86:c7:d7:
         72:36:ae:5e:f9:94:1d:27:02:ed:6a:c7:71:07:3a:80:12:49:
         24:7c:76:53:78:3f:04:f8:ab:09:07:94:d2:af:2f:2f:6b:91:
         58:1e:81:50:a7:47:21:8f:7b:57:9e:98:d5:fd:bf:96:ab:d3:
         4f:28:c3:9d:50:8b:e0:f0:28:44:46:ea:af:16:2f:cb:d8:04:
         8e:24:76:87:ae:98:fe:e2:ae:94:0e:e2:98:1f:4e:eb:08:a3:
         11:b8:41:66:90:ac:fd:6d:7b:df:e7:61:27:b1:31:63:b4:1b:
         3b:91:f7:c8:78:5b:4c:9e:aa:43:df:5d:dc:2e:9f:fd:d0:6c:
         d2:6d:25:bd:89:c3:df:fc:8c:f9:e9:63:1a:c3:89:cf:66:de:
         11:94:93:ee:d1:d0:3a:ea:e7:86:86:d9:43:6f:5b:0e:7f:85:
         75:bd:8d:23:03:8d:7c:c3:a9:76:01:7e:69:f6:fe:a6:b8:52:
         ea:f3:0f:81:cc:e6:01:22:5e:25:29:83:0e:59:f2:b4:9d:89:
         ff:bd:98:d4:47:af:db:b8:a9:28:1c:e0:90:eb:d0:52:58:47:
         ee:ef:fc:86:d7:18:d8:75:25:f0:8a:85:88:47:c9:ed:ff:c5:
         61:3f:b0:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:13:32 2025 by rpki-client