Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/eb3fb414-d71f-3b7d-85d9-34e4dfa09e8a.roa
File:                     eb3fb414-d71f-3b7d-85d9-34e4dfa09e8a.roa (raw, json)
Hash identifier:          SEGpjcLC/idvl/Zhncq7En/LiQabLOPmtgF5C3xd988=
Subject key identifier:   7A:6D:BF:2B:2B:97:06:0C:D4:C0:FC:06:56:95:57:E3:B9:E8:DE:F3
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584A8410CC9D9E1E7407275D7E00
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/eb3fb414-d71f-3b7d-85d9-34e4dfa09e8a.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     30036
IP address blocks:        2604:2e89:1800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:10:cc:9d:9e:1e:74:07:27:5d:7e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=754f539b-9176-4842-b388-22cfadc0cf34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:c1:88:6b:ba:db:d9:0b:17:cd:ef:8e:5d:1d:
                    ea:e0:98:d4:7f:c2:84:1b:ac:44:8b:11:b5:b9:e6:
                    df:41:23:96:e5:66:11:db:e0:cc:78:2d:59:f5:9d:
                    5b:ad:db:45:fc:a8:6a:77:ce:4e:0a:8e:dc:e9:b9:
                    b7:11:4d:d5:03:38:07:5f:b1:f3:17:48:86:42:2b:
                    78:f5:c5:3b:10:dc:2d:55:62:14:d0:7f:d6:2a:e8:
                    28:20:83:ca:37:4f:4a:c9:6a:b9:ca:40:f7:3f:ff:
                    65:10:dc:8b:8c:19:3f:9a:44:15:17:74:7f:4a:e7:
                    6e:8e:fc:ba:01:d6:65:f6:cf:3f:fc:73:06:7b:72:
                    68:95:3a:65:07:da:a4:72:98:ec:2b:c9:81:b1:e9:
                    9e:34:7b:a4:8d:4c:6a:39:48:9d:0f:bd:bb:0c:8f:
                    77:9a:29:05:2a:4b:4e:ee:19:3c:c7:02:00:36:01:
                    6a:f3:22:63:19:45:64:97:e0:97:aa:fc:c4:f2:87:
                    bf:26:ed:c7:77:cf:fe:54:f6:d7:09:c9:a6:50:b3:
                    24:b6:23:98:e0:36:a5:92:2b:e4:56:ff:68:a8:20:
                    19:eb:5e:da:80:89:72:1e:e3:43:5c:d5:e9:79:02:
                    92:b4:b4:f8:53:12:76:3e:f7:7b:d0:af:c7:2f:6a:
                    ae:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:6D:BF:2B:2B:97:06:0C:D4:C0:FC:06:56:95:57:E3:B9:E8:DE:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/eb3fb414-d71f-3b7d-85d9-34e4dfa09e8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e89:1800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:6a:9b:96:20:62:0e:15:d0:1c:ad:41:bf:2a:38:3c:03:69:
         d4:52:69:96:96:d0:c7:76:4c:a8:dd:c5:df:8d:2d:f1:86:3e:
         08:c1:31:3a:6c:d7:ea:cf:e7:31:d7:ab:cc:f1:60:0a:60:7f:
         ee:f2:48:7a:3e:69:1a:e3:9b:45:6b:b3:20:0f:5c:1f:77:a4:
         bd:c2:50:ed:ea:4b:d1:df:ff:9e:49:89:43:40:f5:98:3a:22:
         89:95:54:dc:09:4e:80:8d:40:60:d5:5a:63:5a:01:e1:be:0c:
         fe:0a:73:7b:38:20:07:53:98:93:ab:a2:ef:71:70:eb:8a:f9:
         55:d5:c9:5d:02:30:31:09:d3:dc:c5:aa:13:39:9d:49:7d:66:
         2e:b1:0c:6d:17:a3:41:b5:2c:a5:2c:90:9d:ad:ef:e9:6f:28:
         78:9c:5e:3c:99:3e:5e:ce:64:fa:fb:10:98:ea:27:7d:6c:d8:
         13:c4:a0:67:bd:3b:4b:d1:eb:ab:cb:93:88:37:f7:c4:4b:4c:
         d5:59:79:bf:cb:0d:f7:5f:16:10:0d:b0:23:d7:bd:97:de:85:
         7d:ad:5d:13:67:1a:e2:68:77:af:78:ec:80:39:23:c5:a6:7c:
         09:7c:76:75:ab:28:a8:cb:8b:b8:10:66:22:6d:cd:fa:67:48:
         e5:52:79:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 00:46:04 2025 by rpki-client