Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f4032d8f-20d3-3911-bb92-6f66c7e7faeb.roa
File:                     f4032d8f-20d3-3911-bb92-6f66c7e7faeb.roa (raw, json)
Hash identifier:          F9j+IrsXOdy3ZjUfM1QwehQdScUtoWByIESmWeE/xZ8=
Subject key identifier:   55:E1:CE:AD:DC:BB:9E:C9:99:58:3C:77:58:FF:A9:3F:38:D1:15:13
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584A86DB63DD6D9B517BF6D7F980
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f4032d8f-20d3-3911-bb92-6f66c7e7faeb.roa
Signing time:             Tue 15 Jul 2025 13:01:04 +0000
ROA not before:           Tue 15 Jul 2025 13:01:04 +0000
ROA not after:            Mon 13 Oct 2025 13:01:04 +0000
asID:                     30036
IP address blocks:        2604:2e8b:3c00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:86:db:63:dd:6d:9b:51:7b:f6:d7:f9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jul 15 13:01:04 2025 GMT
            Not After : Oct 13 13:01:04 2025 GMT
        Subject: CN=be3ca30d-7007-4179-962b-5769d73ec48d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:6a:e4:4b:56:43:6a:5a:e8:3f:57:5f:9e:44:
                    74:83:33:5c:56:47:61:1b:4e:47:6b:da:b5:2c:d9:
                    b6:f0:96:c2:83:f1:f9:45:15:0a:3a:c1:42:01:2a:
                    b0:14:21:e8:d5:8e:b3:f6:70:f2:ec:47:38:74:07:
                    2d:31:df:fc:e5:df:6d:d9:8a:bc:bd:5f:e5:65:87:
                    b2:83:39:59:a1:b0:b1:77:1a:59:b6:49:e8:bf:e5:
                    3b:cf:cd:a0:a2:34:f3:ae:6e:e0:46:ff:59:86:c2:
                    c7:6f:cf:40:f3:8d:e3:59:89:b1:62:9b:e4:03:2b:
                    58:68:81:57:dc:18:7f:09:4e:e1:1a:93:78:12:9f:
                    fa:05:3d:2f:42:3b:7d:f2:c9:dd:16:e3:bc:e7:63:
                    a0:d3:57:e6:1e:2b:0b:99:78:c9:1c:7f:78:d6:61:
                    3c:3f:8c:ea:b9:6a:eb:6d:1a:34:9d:32:03:8a:47:
                    dd:c4:58:05:6c:8c:60:1b:03:61:8c:44:40:0d:76:
                    ca:c6:f6:ea:82:74:49:cc:e3:4c:42:46:1d:4a:73:
                    f4:43:c9:2f:2b:2b:34:87:42:c4:b4:4d:bd:94:25:
                    e5:90:4f:17:db:9e:46:20:dc:31:87:73:aa:e1:b8:
                    b5:dc:49:82:cf:f0:66:86:a3:04:a5:49:1e:d0:cd:
                    b5:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:E1:CE:AD:DC:BB:9E:C9:99:58:3C:77:58:FF:A9:3F:38:D1:15:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f4032d8f-20d3-3911-bb92-6f66c7e7faeb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8b:3c00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:95:72:98:2f:f9:08:5b:c9:40:e8:e4:a0:f6:06:1c:b6:52:
         17:34:fe:ad:b0:f3:b2:6c:2e:2a:de:90:d9:e9:01:fc:24:ed:
         52:96:71:a0:e4:31:19:b6:5f:1b:55:c0:d8:e5:fb:75:e9:56:
         f5:46:17:c1:c8:c5:64:50:60:9f:24:70:fd:c6:0d:89:6c:71:
         ba:38:dd:c3:ee:cc:fb:61:22:03:44:51:28:7e:9f:4c:27:3a:
         7c:65:98:54:eb:3b:d3:87:49:0c:05:7c:83:a5:7f:23:15:e2:
         7f:b8:e4:1d:8e:81:7a:f3:34:1e:06:c1:f7:fc:87:55:c9:68:
         56:4c:31:a7:c2:1d:4f:11:22:ce:03:44:02:af:59:e5:98:5d:
         95:ee:0f:b5:b7:50:64:d3:a5:ec:5f:c6:d2:d9:33:fa:4c:73:
         fb:cf:cd:64:f0:56:a6:5e:4f:68:05:1d:e4:93:3b:35:1c:00:
         f0:6f:3a:55:39:d6:8b:29:f3:8a:02:e9:cd:64:a0:35:fa:25:
         cb:32:a1:71:d2:12:4f:f2:37:5a:b6:e6:b6:0c:78:63:8a:71:
         3e:52:09:e5:83:ec:19:b0:1a:19:c1:99:8e:27:86:be:5d:6b:
         84:e8:e7:bd:32:d2:dc:f2:b6:f6:61:fa:36:c7:63:21:19:f6:
         2f:b6:81:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 00:43:22 2025 by rpki-client