Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d592ca73-e485-326b-84c1-48183902eac2.roa
File:                     d592ca73-e485-326b-84c1-48183902eac2.roa (raw, json)
Hash identifier:          Ge64/2fo8xNtFCIgPozvWqsGxd+yD1dbLX+o+JiNQ80=
Subject key identifier:   D1:F8:07:B0:58:2E:9E:B5:2E:AF:C8:5D:58:9F:BF:70:49:9C:80:98
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584A86DB666F8F8C1837F5EF6C00
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d592ca73-e485-326b-84c1-48183902eac2.roa
Signing time:             Tue 15 Jul 2025 13:01:04 +0000
ROA not before:           Tue 15 Jul 2025 13:01:04 +0000
ROA not after:            Mon 13 Oct 2025 13:01:04 +0000
asID:                     30036
IP address blocks:        2604:2e8d:1000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:86:db:66:6f:8f:8c:18:37:f5:ef:6c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jul 15 13:01:04 2025 GMT
            Not After : Oct 13 13:01:04 2025 GMT
        Subject: CN=15677a2d-457b-4499-9e9f-55f193354684
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:47:6c:28:58:1d:fc:46:ab:39:6a:27:f9:c6:
                    69:74:97:27:90:9c:70:20:31:9a:9c:db:ce:25:65:
                    79:67:54:b7:45:a5:5d:ed:29:4d:bb:f4:e2:ef:69:
                    ba:99:1b:48:39:7e:84:30:8e:4a:b2:e3:7d:e2:35:
                    c7:3f:5b:66:f9:69:89:28:21:c2:b3:12:8f:ac:99:
                    c7:54:78:58:3a:a4:a3:b3:da:9b:91:2b:43:81:d8:
                    0c:05:10:3c:6f:d5:b2:8f:72:40:05:d3:70:91:46:
                    c1:6b:87:76:aa:e0:2b:d4:6d:56:1e:c3:60:d2:02:
                    9b:bf:78:00:69:63:d0:a9:97:6c:b0:16:d9:cb:74:
                    37:c8:b5:0e:94:29:0e:8b:f9:a2:65:28:66:fa:eb:
                    de:c7:bd:a3:a3:d6:e7:c0:a8:5e:53:d3:5f:1d:bf:
                    54:a0:0b:0c:82:b3:00:3c:0a:0d:4e:9e:fd:a5:d9:
                    c8:3b:a0:7a:09:61:d2:49:06:77:59:76:3a:5d:b5:
                    7e:4f:25:3d:5a:9e:86:6b:1b:4f:bf:a0:ff:32:ec:
                    3e:b7:30:7f:fe:e6:c3:fa:ed:7e:cd:8d:27:dc:17:
                    80:f8:e3:78:48:1f:be:60:be:3d:6c:cb:83:9b:3e:
                    0a:44:2e:04:b8:aa:c6:52:ba:9c:7f:0e:41:c8:57:
                    4e:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:F8:07:B0:58:2E:9E:B5:2E:AF:C8:5D:58:9F:BF:70:49:9C:80:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d592ca73-e485-326b-84c1-48183902eac2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8d:1000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:4d:63:81:c8:8a:93:a3:47:a9:14:39:d0:79:ee:e6:2b:55:
         8d:aa:e8:b5:3c:ac:83:b4:18:73:73:c6:b7:ab:30:3c:46:dd:
         3c:c7:25:74:37:56:1d:e7:77:77:e1:ca:b7:05:93:e4:e5:06:
         ab:c7:73:80:ff:ac:4e:cc:b3:e8:98:d1:ef:c1:ff:f2:46:9c:
         7c:b3:d8:35:ce:58:dc:4b:77:b4:0d:f3:02:bd:86:df:9e:27:
         2f:65:09:ed:79:27:dc:b9:a9:e2:ab:f3:cd:8a:58:76:bb:75:
         cf:6c:08:0c:75:89:f8:5b:d5:b7:47:7f:65:90:22:41:75:ba:
         d2:af:9a:f9:1b:dc:d7:03:e0:01:6b:14:4f:3d:78:95:b6:5e:
         3d:9e:5d:3a:a5:d5:f5:f4:35:68:c2:43:b9:2e:19:a6:0f:b8:
         81:1e:20:a4:a1:90:d0:85:4e:40:5f:f9:2c:64:23:bd:84:7d:
         5a:70:05:1b:8a:9e:d6:15:70:81:41:cb:71:fe:d0:df:f9:15:
         42:1a:c8:41:c6:11:9d:bd:f3:fe:6d:c8:98:6f:fb:8f:da:e2:
         0a:79:11:de:64:26:7e:25:5b:9f:7e:bc:2e:d8:ee:e7:4f:18:
         ce:a7:84:e0:5a:c3:78:0b:5b:17:4d:dd:32:74:ec:2a:93:33:
         87:71:e7:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 03:01:12 2025 by rpki-client