Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/428b33ba-641e-3526-a67a-212e310bee09.roa
File:                     428b33ba-641e-3526-a67a-212e310bee09.roa (raw, json)
Hash identifier:          3omNm9S9eMpJ8SAxLSdhATENlZb8Ec/XlEnX+Z0kvbA=
Subject key identifier:   7A:D2:5C:64:78:87:04:1D:BF:22:9C:8D:24:9C:04:06:7B:AA:05:FD
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584AD3A0FAD771E999AFD638DDA0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/428b33ba-641e-3526-a67a-212e310bee09.roa
Signing time:             Tue 12 Aug 2025 01:00:32 +0000
ROA not before:           Tue 12 Aug 2025 01:00:32 +0000
ROA not after:            Mon 10 Nov 2025 02:00:32 +0000
asID:                     30036
IP address blocks:        2604:2e8e:9400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d3:a0:fa:d7:71:e9:99:af:d6:38:dd:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Aug 12 01:00:32 2025 GMT
            Not After : Nov 10 02:00:32 2025 GMT
        Subject: CN=7738cc0f-e5b9-4745-ae56-e32917209312
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:6f:dd:23:0a:e8:30:72:3a:6f:11:f2:16:0a:
                    f3:7e:44:03:2e:d1:b5:7f:3e:09:77:fb:db:b9:5d:
                    c2:37:e2:12:78:28:5a:51:21:1f:86:db:3d:5f:ca:
                    cb:5c:07:d2:fd:6b:85:1e:65:2e:1f:27:7b:c1:9a:
                    38:11:82:0b:29:86:79:64:52:48:2e:43:c6:f9:29:
                    24:c1:3d:1b:9a:3c:cd:e8:22:5e:1c:f2:a0:0b:59:
                    62:9f:f6:6a:2b:1a:4c:25:9c:42:30:56:a8:4f:71:
                    06:06:58:6c:73:10:32:94:ed:a5:a1:82:bb:05:d0:
                    16:b1:4c:6b:3d:cf:e1:2b:ba:d2:2b:7e:8a:cd:b4:
                    66:bd:3c:d4:91:af:ad:e6:9f:b7:6a:e4:1d:14:d5:
                    e3:06:07:cb:f5:69:6c:54:51:a4:1f:6a:02:ca:4b:
                    b4:ee:9d:59:7d:d2:c6:ab:6a:c4:5c:db:3f:57:d2:
                    45:37:b3:73:32:09:2f:6e:29:a2:5a:c6:89:2a:7f:
                    6f:88:9c:c5:ab:1b:6d:4a:fb:3d:df:28:ce:4b:53:
                    ad:0d:0e:c8:57:e5:e8:56:02:d8:64:1d:87:47:2f:
                    b3:1e:84:17:0c:d2:e9:db:5c:81:4d:91:0d:09:64:
                    0a:9e:c1:d4:3b:f9:d8:74:ca:7f:83:4f:6f:03:a9:
                    9a:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:D2:5C:64:78:87:04:1D:BF:22:9C:8D:24:9C:04:06:7B:AA:05:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/428b33ba-641e-3526-a67a-212e310bee09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8e:9400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:bd:d1:b5:73:ba:f3:18:b8:ad:ce:2b:a1:18:5a:85:4b:35:
         6f:e2:00:76:21:09:4c:bf:d4:3a:36:1d:ae:5e:40:22:20:ea:
         ce:8b:c5:00:b3:ca:13:22:86:23:e2:af:97:a5:4a:49:22:12:
         2e:bb:37:d5:a4:9b:45:37:58:b2:89:90:51:26:ba:b8:c7:a4:
         f0:52:61:bd:fb:e4:c1:e8:45:cd:de:3c:a2:a0:00:e7:c0:05:
         b3:d5:1d:aa:db:c1:8b:b5:41:e6:8f:25:92:29:43:ec:ef:d6:
         fa:14:d6:a0:2c:3b:0b:27:60:03:2c:22:c5:ca:cf:11:4d:8a:
         0f:67:7b:ad:f9:49:39:71:fd:6e:24:aa:4c:0b:4c:14:2f:ef:
         51:4d:a5:77:5e:aa:8c:5c:71:9d:4e:8b:1e:cb:63:a1:1f:53:
         68:80:65:f6:36:c2:0f:6e:97:6f:ce:8f:20:6e:35:14:27:df:
         b4:a7:ab:1d:64:df:2c:01:b1:11:9b:97:7e:27:0d:48:dc:28:
         8c:11:43:a0:89:7f:8c:23:34:c6:a4:b0:bf:ef:9c:66:62:ca:
         a7:62:30:ee:4b:fb:8f:ee:34:8c:89:ea:62:60:90:cd:10:0c:
         93:c2:17:f0:31:e1:53:74:6e:f9:f1:bf:81:75:1b:47:73:f5:
         96:9a:ed:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:08:32 2025 by rpki-client