Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d1997938-a8c1-33cd-b96f-a63ae6335ddf.roa
File:                     d1997938-a8c1-33cd-b96f-a63ae6335ddf.roa (raw, json)
Hash identifier:          Q0LOqfjZLJS1pxnnTJ72H1RvrqUJNFr5SN7O8AkKRYE=
Subject key identifier:   4E:89:1C:6E:5A:9C:9D:FB:6B:8F:AE:80:9A:B9:63:85:D1:29:80:1B
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584A841258CF9E1E3DE51F579D60
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d1997938-a8c1-33cd-b96f-a63ae6335ddf.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     30036
IP address blocks:        2604:2e8e:1800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:58:cf:9e:1e:3d:e5:1f:57:9d:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=c602cd8f-1bc5-4d8e-971f-f866a5a2d49e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:50:ea:54:d8:80:20:57:f8:e2:b0:49:77:1b:
                    8a:c7:1a:b3:b4:03:4e:f4:71:c1:c6:d9:ff:3a:da:
                    b8:5a:d3:ad:29:8d:9a:53:39:8e:79:2e:43:ce:38:
                    65:d4:70:ca:2f:ec:42:16:a2:5f:e1:cc:78:b1:0a:
                    c0:00:6c:75:f7:e9:17:0a:65:e2:bc:e9:e0:17:08:
                    9c:62:31:04:6b:18:c6:68:20:ef:b9:8d:14:d2:ca:
                    da:38:5d:06:a8:36:cd:da:fd:71:c4:ea:cd:99:ae:
                    13:39:99:41:20:89:aa:38:ee:d6:95:4a:69:82:38:
                    bd:27:7d:54:4b:9e:9e:e1:e3:e6:c8:f8:25:b6:bd:
                    ec:15:a2:4a:8f:53:78:88:94:88:0a:a8:5e:f3:dd:
                    ac:fe:d6:bc:41:11:f2:44:23:4b:57:2d:59:b3:67:
                    c7:d2:be:1c:43:05:64:c8:9d:8d:ac:55:09:6f:47:
                    db:cc:47:40:88:1e:2a:70:3b:20:70:17:69:fc:db:
                    0f:26:f1:f9:47:01:96:f4:12:5a:4a:8d:8c:a7:7c:
                    4c:35:fe:76:31:6d:e3:7c:ee:f5:27:59:45:89:8a:
                    12:c3:05:5f:ff:8c:b4:44:f0:70:46:7d:31:1e:3e:
                    26:7e:de:a6:fe:55:54:b3:d8:73:f8:fa:7c:74:9e:
                    69:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:89:1C:6E:5A:9C:9D:FB:6B:8F:AE:80:9A:B9:63:85:D1:29:80:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d1997938-a8c1-33cd-b96f-a63ae6335ddf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8e:1800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:b3:a1:ee:cd:28:39:b6:06:92:46:eb:44:f7:e3:03:8e:8f:
         85:84:bb:3a:a9:3d:6d:b0:5f:ba:f1:1b:2a:17:22:48:5f:2a:
         c7:d7:dc:3c:c1:39:65:6f:9f:81:f0:e3:b9:4e:f1:1b:dc:ad:
         fe:8b:69:f6:6a:d2:f0:58:17:a0:09:8c:1f:1a:df:e5:34:7a:
         54:69:a7:42:38:c1:4c:3f:51:3a:3d:c6:a6:0b:0d:22:62:da:
         c8:5a:74:15:b9:d6:56:b2:7c:98:4d:bb:c1:85:b7:40:49:73:
         21:93:1c:9f:a6:da:8d:1e:b2:18:50:19:59:78:db:08:86:6e:
         e6:21:3f:70:e3:2b:fa:8c:1f:a7:0d:6d:c4:9f:b5:4d:e2:f8:
         a1:87:10:27:bf:7e:20:d1:b7:d4:d6:6e:bc:9c:35:5c:b5:3f:
         fd:8c:b2:7d:7d:36:bb:b3:7b:25:ec:c3:d5:be:06:d4:29:38:
         97:41:bc:b8:9a:b2:a2:28:fc:37:7e:87:94:86:15:9e:ee:34:
         0c:16:61:aa:f1:11:a3:da:c4:94:f9:ec:00:d9:49:17:ce:0e:
         88:3f:66:a7:41:e2:d9:25:05:76:11:56:26:d8:fc:a3:93:a2:
         b0:e7:cf:df:06:b9:6f:00:cb:af:f5:22:3c:63:0d:86:42:9a:
         41:7a:90:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:20:28 2025 by rpki-client