Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/e811a19d-bb03-3d77-8027-49d6713a912a.roa
File:                     e811a19d-bb03-3d77-8027-49d6713a912a.roa (raw, json)
Hash identifier:          gsa0T7kchGFJaLyqHFaGLbltKb5t1Ue5OkiDQNpycYQ=
Subject key identifier:   CD:77:B7:D3:D6:34:D8:E6:DE:20:E3:30:4D:DF:93:0C:8A:80:6E:7E
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584A8412522634437DB426499200
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/e811a19d-bb03-3d77-8027-49d6713a912a.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     30036
IP address blocks:        2604:2e8e:2800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:52:26:34:43:7d:b4:26:49:92:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=6cb3d657-d0c5-44b4-8093-27ff7cd74acd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:4c:f6:13:67:2d:e7:e8:bc:af:41:2f:67:88:
                    a8:f0:a4:c2:ae:96:b7:c4:eb:c0:54:20:93:90:38:
                    f7:fc:df:1e:84:4e:78:bc:92:0f:77:8e:d9:18:dd:
                    2f:76:d4:10:7e:9f:d5:49:bc:85:7b:42:b3:58:e3:
                    0c:b3:ab:66:0b:f9:8d:fb:7f:a3:9a:06:f9:de:1d:
                    20:88:27:6c:03:34:81:49:6e:c5:d5:69:2c:cb:9d:
                    70:3f:51:47:dd:1d:26:f5:de:32:11:80:68:48:ff:
                    3e:11:33:42:d8:c6:85:64:b4:20:be:b8:de:e3:fe:
                    ed:ef:ae:9d:b0:bc:9b:11:bd:0b:05:ea:83:3f:6a:
                    77:b1:3a:cd:a6:71:c9:0c:8e:90:25:90:5d:9c:fd:
                    89:cf:63:f4:95:22:69:96:67:91:1a:68:42:41:ab:
                    07:15:40:57:cd:06:ee:30:95:d6:f7:ee:c6:d1:25:
                    39:90:ab:cd:fc:3c:6f:48:9f:54:bc:5b:3a:ba:2f:
                    a1:05:54:fb:ee:ce:bf:6d:0c:4a:94:93:fd:25:04:
                    d2:3d:ca:41:43:31:46:bd:ec:e8:12:70:45:1e:c4:
                    05:a3:13:cd:65:23:be:a0:6c:58:7a:be:68:49:54:
                    8c:bc:f1:69:46:12:cb:b8:f6:93:bd:6c:2a:dc:63:
                    07:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:77:B7:D3:D6:34:D8:E6:DE:20:E3:30:4D:DF:93:0C:8A:80:6E:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/e811a19d-bb03-3d77-8027-49d6713a912a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8e:2800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:90:0d:21:0b:d1:1f:82:75:ba:80:19:a1:8d:bd:ba:73:7c:
         e7:d1:15:e5:f8:d0:a5:6d:04:7c:63:47:d3:6c:83:71:60:37:
         1b:b5:0e:3f:e6:ab:7f:77:c2:86:4e:5e:d5:85:ae:bc:d3:3e:
         08:dd:34:d0:97:74:71:af:1c:78:9a:1a:13:5b:91:87:8c:e2:
         5e:1c:05:fb:f8:95:3e:f1:70:52:73:b4:25:37:eb:f8:cb:e6:
         3d:d3:ac:3f:20:a4:aa:3c:d1:c7:98:97:fc:79:30:54:1b:5c:
         8a:db:d8:9c:49:49:1f:0e:3c:cb:46:a4:2e:18:ba:9c:62:cb:
         9f:2d:89:99:e8:40:06:89:f0:e5:af:72:1c:fc:c6:91:b9:8f:
         93:e5:fc:f4:fe:87:56:8f:74:54:a2:01:be:ea:06:ea:92:bf:
         4a:bd:0d:6a:dc:53:a9:c6:30:3e:8b:af:be:02:97:ea:18:1a:
         cf:9e:b7:d9:68:6a:b1:7b:8f:81:c4:3d:56:bd:8f:1f:e7:56:
         c0:8a:c0:1e:f3:92:af:a3:85:78:81:e6:82:6d:26:27:5f:ea:
         6c:b1:37:be:48:6e:fb:38:38:9c:1b:7b:56:fd:71:ca:9c:62:
         e4:bb:91:cd:f3:74:54:26:ff:3c:a4:84:6b:da:fe:47:6d:50:
         03:cc:0a:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 07:22:13 2025 by rpki-client