Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ea175f3d-d831-3006-a475-807915f47dca.roa
File:                     ea175f3d-d831-3006-a475-807915f47dca.roa (raw, json)
Hash identifier:          4aHbEUovCwV+TkdyAGFpIaA4RsqzV/W6IpkRPmDJBUU=
Subject key identifier:   02:2F:FC:F1:80:99:51:97:B0:3B:F2:AA:80:23:69:20:BF:9E:89:EE
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584A81463BFC61FFF96A53A518C0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ea175f3d-d831-3006-a475-807915f47dca.roa
Signing time:             Sun 13 Jul 2025 13:01:03 +0000
ROA not before:           Sun 13 Jul 2025 13:01:03 +0000
ROA not after:            Sat 11 Oct 2025 13:01:03 +0000
asID:                     30036
IP address blocks:        2604:2e8e:e000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:81:46:3b:fc:61:ff:f9:6a:53:a5:18:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jul 13 13:01:03 2025 GMT
            Not After : Oct 11 13:01:03 2025 GMT
        Subject: CN=ea304a31-b73b-48f3-9c69-50418a9f8189
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:71:f0:42:5c:90:80:f6:45:19:46:f7:64:fd:
                    5b:47:9b:24:94:f3:03:bb:af:a0:dc:9c:f9:2c:10:
                    09:e7:4f:04:3d:a4:ff:42:04:32:d5:55:9b:0d:9e:
                    57:f9:16:dd:2b:cb:1c:4f:2b:73:88:77:97:ea:0a:
                    e6:00:98:de:15:26:f1:0c:a8:7b:2d:b7:21:c1:ad:
                    14:ce:6c:c1:2a:2e:67:66:ef:c6:6e:30:e3:7e:2e:
                    37:b3:3e:22:cc:73:17:bc:f1:7b:34:7a:c0:f0:00:
                    70:e4:fa:1e:15:4e:bd:af:d4:58:aa:13:1d:02:c6:
                    d2:5e:76:d0:99:7a:2d:fc:6c:cf:e1:1e:9a:97:b2:
                    ba:a1:e8:f2:74:18:b6:96:ac:e5:d7:60:d5:1a:86:
                    36:68:ad:b7:91:a8:0d:ac:85:10:5a:c6:c5:8e:aa:
                    5d:e9:f3:b8:f7:87:1f:93:27:0e:f1:05:4f:c5:95:
                    6d:3b:d5:33:5d:11:5e:39:72:5b:59:22:20:85:36:
                    f3:53:27:c7:b4:c6:28:cb:df:10:ca:17:43:6d:f0:
                    b9:99:c2:24:1c:49:2c:1a:c9:f0:9f:e7:2d:87:09:
                    c4:78:a6:68:1b:87:d4:b9:9f:e2:73:ea:40:29:46:
                    2f:14:fd:b8:aa:12:77:db:93:f7:50:b7:18:ce:c4:
                    ee:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:2F:FC:F1:80:99:51:97:B0:3B:F2:AA:80:23:69:20:BF:9E:89:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ea175f3d-d831-3006-a475-807915f47dca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8e:e000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:5d:d6:41:51:4b:52:f4:5c:92:04:d9:d7:84:6b:15:ed:92:
         fc:8a:0c:e7:54:31:dd:15:37:c7:6a:3b:ac:48:a7:37:fc:c9:
         95:d9:bf:e1:2a:ee:19:76:e6:0c:9a:83:ea:e2:5d:aa:8d:0d:
         a2:78:9b:f4:56:b6:e3:58:d3:fb:76:78:eb:ea:ea:bd:b6:8d:
         0b:54:47:5e:fd:b5:2f:83:1c:b7:94:ff:b5:84:98:65:6e:8a:
         3e:1f:78:d0:81:15:11:c3:36:a6:66:21:b1:38:21:0c:38:f3:
         76:d2:48:c0:8f:05:88:ec:90:2e:d4:42:04:8f:61:37:d3:79:
         0c:fe:00:7f:88:a4:73:a3:14:04:95:51:a5:4d:f6:19:54:f8:
         91:b1:fd:67:53:8b:31:84:d1:9a:28:7f:6d:8b:54:49:ae:37:
         24:7c:fa:4f:11:22:ef:6d:57:f9:06:d6:58:00:26:b7:53:b1:
         92:a5:40:e0:84:66:12:e2:b4:29:71:20:73:96:c6:fa:8e:9e:
         c3:5f:9e:37:61:a6:29:5e:e7:c1:1f:79:3b:ad:24:bb:59:d3:
         3f:e3:34:56:b8:03:92:72:0c:2b:3b:42:31:6a:05:73:97:67:
         f0:e0:80:b5:43:96:3f:b7:6b:b9:6b:00:f7:5b:d0:6c:37:fd:
         ab:06:f6:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:43:33 2025 by rpki-client