Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f5228b34-dd00-363d-b1c9-f48510674a34.roa
File:                     f5228b34-dd00-363d-b1c9-f48510674a34.roa (raw, json)
Hash identifier:          HvqHB9dfr6fvpKAPwbgK7CL+sjGFqzF+Xc3Edp5lyVM=
Subject key identifier:   32:7D:C6:AA:F8:82:18:DE:C0:C2:3F:2A:89:C9:F0:55:02:41:6A:E8
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584A8410E34131756DCC9EF66500
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f5228b34-dd00-363d-b1c9-f48510674a34.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     30036
IP address blocks:        2604:2e89:cc00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:10:e3:41:31:75:6d:cc:9e:f6:65:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=0c589fce-b40a-4bab-b44f-fd03102f9efc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:2c:0d:d3:0e:5e:9c:b8:32:41:5a:ee:ae:9e:
                    b4:35:95:31:fe:2a:6a:41:7e:f9:35:5e:83:e7:e4:
                    2c:e2:9a:27:d6:03:98:71:b8:3b:23:2f:44:a8:2c:
                    a8:5c:88:4a:ae:7e:eb:a0:c7:3a:8b:d7:5e:c2:93:
                    86:d0:64:ae:19:5c:bd:03:a5:b6:3e:29:7d:5c:5b:
                    e0:e4:e8:33:80:b4:70:1a:7e:e1:92:35:13:e9:2a:
                    0f:11:eb:27:2e:83:8c:c3:bd:4b:f7:89:e9:60:42:
                    cb:ab:7f:4b:d2:5d:d2:01:ea:01:85:97:f5:18:55:
                    ed:e4:57:26:04:29:ab:36:43:76:f7:18:9b:2d:0d:
                    3a:10:df:58:5f:bf:e6:4b:2e:d3:14:78:93:52:a0:
                    00:58:f3:bd:f3:4d:0c:50:17:96:f0:7e:eb:09:d8:
                    24:8c:17:98:e1:ec:30:ee:b6:55:9a:7a:45:6a:54:
                    34:2e:60:1d:4f:ee:84:1c:2f:26:12:5b:7b:41:3f:
                    55:65:a7:89:b0:fe:ad:9d:09:c7:3d:4b:3f:47:d7:
                    37:a6:cc:12:2f:72:d7:c3:d5:9b:62:e5:b8:47:af:
                    d3:3f:39:de:10:0d:24:0d:3a:c2:a7:32:5a:c6:31:
                    89:1f:aa:2c:84:3e:c7:c0:29:80:cb:eb:42:d4:99:
                    d3:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:7D:C6:AA:F8:82:18:DE:C0:C2:3F:2A:89:C9:F0:55:02:41:6A:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f5228b34-dd00-363d-b1c9-f48510674a34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e89:cc00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:54:63:6b:cb:18:43:09:7c:cd:32:6b:bf:a2:d2:60:19:9e:
         71:8f:51:fe:4a:be:24:a4:5f:85:01:92:99:30:70:ea:a8:5f:
         bf:8d:9e:b8:a5:08:b8:78:1e:d4:f2:a9:8b:87:74:5e:c2:5f:
         73:80:e9:f0:93:93:54:2d:93:57:a0:6d:f9:a7:8e:bc:0d:c3:
         6e:94:f4:26:fb:cc:d3:ce:c9:8b:26:fa:eb:9c:c8:2a:59:59:
         13:1e:7e:15:0e:e3:35:d7:71:37:4f:64:dc:ae:35:fb:04:92:
         59:a8:5a:eb:99:68:06:2f:da:0f:3c:f0:b7:cf:4b:71:05:d7:
         98:1e:7b:48:17:1e:76:43:7e:65:12:7a:ee:82:99:cd:ac:18:
         47:0c:ba:76:89:95:92:08:f3:5a:34:70:1c:22:df:f6:05:13:
         c8:d9:6b:d0:5b:10:64:3b:33:a9:a1:02:a9:0e:86:3d:39:8e:
         ac:0e:63:36:46:9f:ef:f2:f5:00:f0:84:d5:0d:2a:cf:18:a3:
         56:61:83:71:ef:0e:4e:b8:ab:68:a2:5b:d5:62:b5:af:a9:8b:
         0f:f3:1c:1b:b0:a0:2b:e4:67:fd:ca:7c:5e:6d:1c:b9:64:70:
         c4:5a:08:77:49:ad:04:42:b3:e4:58:f2:df:99:dd:7c:ff:10:
         26:ae:3b:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 05:08:46 2025 by rpki-client