Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/e3bd0139-c029-3ecf-b377-baa730ff6245.roa
File:                     e3bd0139-c029-3ecf-b377-baa730ff6245.roa (raw, json)
Hash identifier:          dkyon5IYEyGOud23tKq5/DikMu2NUSq86h1f/iFpa7U=
Subject key identifier:   63:DB:3D:1C:E8:B5:55:ED:B7:62:FC:4F:28:A2:08:52:D8:01:29:E7
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584A86DB71F409A8380CB7250480
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/e3bd0139-c029-3ecf-b377-baa730ff6245.roa
Signing time:             Tue 15 Jul 2025 13:01:04 +0000
ROA not before:           Tue 15 Jul 2025 13:01:04 +0000
ROA not after:            Mon 13 Oct 2025 13:01:04 +0000
asID:                     30036
IP address blocks:        2604:2e88:c400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:86:db:71:f4:09:a8:38:0c:b7:25:04:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jul 15 13:01:04 2025 GMT
            Not After : Oct 13 13:01:04 2025 GMT
        Subject: CN=6cced168-7a34-4dd7-9f39-73118915e066
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:5b:4d:66:33:92:88:a0:d2:1d:42:b6:ce:17:
                    91:b8:65:44:69:9d:d0:0c:71:aa:3a:48:c8:ca:64:
                    42:29:65:85:91:25:b0:ef:a6:eb:99:a2:b3:6a:d5:
                    e9:b0:b9:dc:0d:32:f9:b3:2f:c7:86:2b:42:fd:54:
                    42:8a:8c:ca:f8:a0:39:b3:b5:e0:60:f8:6b:98:3b:
                    b5:3f:d8:40:52:f6:b4:0c:95:e3:88:03:3c:02:f8:
                    56:c3:38:63:88:f8:ee:b3:25:e2:7e:50:79:91:09:
                    f2:e3:77:75:85:b8:37:1d:ea:1e:df:41:a4:cf:84:
                    b5:a7:56:34:0f:69:a5:a3:e4:aa:01:1a:7a:f1:68:
                    09:11:94:f4:0b:b1:fe:8c:b0:40:25:5f:ad:a8:36:
                    d1:97:d2:d4:99:d5:c7:5f:80:b4:b4:fc:4e:7a:60:
                    5b:05:6e:37:90:e3:a8:b0:ec:04:a0:0f:ba:fa:f2:
                    a5:54:d1:02:a8:fe:7c:a2:79:2e:33:32:21:b2:48:
                    c3:2d:f8:92:72:4b:a1:8a:6b:10:91:5d:cc:0a:d5:
                    2e:79:61:6b:1b:a5:37:df:24:95:73:00:7d:d4:85:
                    cf:ce:34:c8:d4:37:0d:c8:de:d7:4c:65:fe:f8:16:
                    3e:71:7b:5a:70:4d:5d:77:db:8a:6a:9f:fe:38:93:
                    af:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:DB:3D:1C:E8:B5:55:ED:B7:62:FC:4F:28:A2:08:52:D8:01:29:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/e3bd0139-c029-3ecf-b377-baa730ff6245.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e88:c400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:61:94:2c:26:6a:a5:f5:21:bb:ef:53:fc:3d:f7:88:3c:47:
         f2:da:af:4a:f5:30:88:f2:27:47:c1:c5:2f:e7:89:6a:ef:0e:
         ad:f2:0a:cd:b6:92:b2:74:1a:54:1e:07:a4:f4:c9:dc:71:bc:
         2e:c5:00:75:3a:e8:da:b2:4c:0c:e3:44:ec:92:64:5b:53:59:
         cb:b7:fd:13:21:21:0c:4c:7b:5d:e3:1a:6a:ce:68:39:5f:e0:
         f5:52:4a:fc:3f:b5:46:ed:48:ce:04:25:08:9d:d4:af:d5:ee:
         40:2b:74:bf:d5:a4:1c:e9:03:93:5c:21:f2:dd:18:72:7c:51:
         ff:39:e6:46:1c:c8:68:9e:19:9d:81:45:10:5a:37:83:7b:45:
         ad:c5:e7:63:eb:a8:71:f7:17:96:17:23:18:43:3d:6c:c4:58:
         47:f3:14:76:93:02:a2:33:14:7a:27:04:11:e0:2d:ea:76:98:
         c6:2a:e9:39:3e:37:ed:ed:85:1b:88:d0:c1:86:d1:35:85:46:
         3c:fd:37:65:69:7b:02:89:84:31:d6:cc:f6:57:03:bc:15:8e:
         b8:d1:1d:1c:c9:56:93:3b:31:bf:f8:31:b4:af:54:d2:47:ee:
         6f:42:88:68:44:c0:1b:03:fc:91:91:18:38:8a:a8:7f:e7:8d:
         60:0a:0a:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:58:28 2025 by rpki-client