Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/239849b7-f817-3a68-aefe-cc03f9cfbf15.roa
File:                     239849b7-f817-3a68-aefe-cc03f9cfbf15.roa (raw, json)
Hash identifier:          1vhvzEq5WilJ4pYRReAGmyJV4EpjmbYVdNVhSsybXyY=
Subject key identifier:   54:65:56:95:45:FC:A9:83:AA:AF:E3:EA:BD:C6:44:A9:93:48:C2:50
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584AD3A0EBFB01B34B267B4BD700
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/239849b7-f817-3a68-aefe-cc03f9cfbf15.roa
Signing time:             Tue 12 Aug 2025 01:00:32 +0000
ROA not before:           Tue 12 Aug 2025 01:00:32 +0000
ROA not after:            Mon 10 Nov 2025 02:00:32 +0000
asID:                     30036
IP address blocks:        2604:2e80:1c00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d3:a0:eb:fb:01:b3:4b:26:7b:4b:d7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Aug 12 01:00:32 2025 GMT
            Not After : Nov 10 02:00:32 2025 GMT
        Subject: CN=a7d9ba6c-e670-497e-8bd2-eb9efdc601fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:98:6f:40:6e:97:68:1c:ae:88:13:c9:ca:11:
                    d1:f5:75:09:5a:bd:7a:d9:e6:7a:04:87:b1:14:11:
                    57:94:6e:e1:d2:e4:32:33:6a:a3:6c:19:04:d5:8f:
                    e4:00:d2:40:8a:6d:91:39:a4:36:41:75:70:bc:71:
                    64:83:42:e7:30:2d:ef:68:8d:ad:63:c2:9c:46:76:
                    91:32:ba:86:47:b0:41:29:27:35:7d:d8:3c:b4:7e:
                    85:39:5c:15:12:ed:86:16:87:7f:45:ab:52:9e:9c:
                    84:a7:63:40:25:b0:11:b2:c4:2d:82:46:bb:ba:63:
                    d8:27:16:de:ec:06:0b:db:df:4a:a4:c2:4a:75:e4:
                    63:d2:1f:10:4c:12:a4:45:2d:96:c1:90:ef:c2:aa:
                    7a:57:05:6d:cc:57:16:de:c9:81:bb:6c:91:8a:bf:
                    41:81:e7:4f:9e:e9:f9:4a:f2:1c:c4:c3:5a:1e:45:
                    ec:c8:8a:54:43:53:ed:99:d6:8d:43:d6:2d:4c:aa:
                    7e:88:6d:d8:94:4e:0e:f2:ac:09:a6:a2:f2:24:f3:
                    7c:13:13:e4:18:36:0b:e5:75:85:4d:5f:28:4f:25:
                    eb:9f:43:81:89:39:79:4d:66:fe:c7:fa:e9:12:3d:
                    f3:ec:09:32:6c:92:6c:37:75:92:92:55:06:fb:57:
                    1c:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:65:56:95:45:FC:A9:83:AA:AF:E3:EA:BD:C6:44:A9:93:48:C2:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/239849b7-f817-3a68-aefe-cc03f9cfbf15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e80:1c00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:8e:ca:84:89:a9:11:4f:ca:ec:87:a8:29:6b:e9:dd:a7:a6:
         fb:f8:25:f8:1b:46:92:42:fe:66:78:a9:d8:4a:76:36:bc:0a:
         11:a6:94:25:ba:7d:8d:85:f9:ed:0c:d1:a1:1a:16:69:bf:9a:
         9a:f6:a5:7d:95:2b:79:ba:70:15:b8:a4:7a:b3:96:10:f0:5b:
         10:c3:ac:d1:f7:b4:89:b8:57:82:22:c2:7e:c6:00:77:f2:10:
         38:09:b5:bf:70:7e:b3:85:1b:4a:8d:8f:8f:37:75:e4:61:6c:
         06:da:bc:d2:44:ce:ce:a7:b6:b8:b6:17:36:1e:f7:ab:3e:89:
         77:30:d8:6a:3e:1d:de:95:a9:77:44:c5:3b:d3:44:d0:c7:de:
         68:a1:a2:ec:32:20:77:d9:77:03:48:71:ae:13:b9:00:0a:89:
         84:e6:e4:85:b6:d2:3e:03:4c:24:33:f9:8e:64:3a:b3:6d:78:
         ac:b5:7f:59:b9:8b:0b:86:9a:eb:ba:ee:61:63:cd:1d:ee:c2:
         45:e2:c9:33:11:db:a1:01:95:43:32:3c:8d:a0:41:23:c8:11:
         dc:75:44:ed:84:48:b1:22:d0:07:ea:98:5c:28:14:8d:ac:12:
         83:2a:ce:44:ac:11:87:0f:d5:a5:63:27:b8:39:44:61:9a:f6:
         99:98:01:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:08:32 2025 by rpki-client