Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4691484a-b551-3207-a7de-902605b6e48a.roa
File:                     4691484a-b551-3207-a7de-902605b6e48a.roa (raw, json)
Hash identifier:          F1X/nuL8zdUy/ftyQSRu/pA8mEppcYY8sCvoxFicjJg=
Subject key identifier:   54:8D:57:E6:D1:35:C2:9E:4E:4C:13:1C:B0:99:2A:31:12:6F:0D:AC
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584AD3A0FB5762205F13F53CB280
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4691484a-b551-3207-a7de-902605b6e48a.roa
Signing time:             Tue 12 Aug 2025 01:00:32 +0000
ROA not before:           Tue 12 Aug 2025 01:00:32 +0000
ROA not after:            Mon 10 Nov 2025 02:00:32 +0000
asID:                     30036
IP address blocks:        2604:2e8b:4c00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d3:a0:fb:57:62:20:5f:13:f5:3c:b2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Aug 12 01:00:32 2025 GMT
            Not After : Nov 10 02:00:32 2025 GMT
        Subject: CN=9bae1e4e-e443-43af-a99e-ea7892d2b7e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:85:4b:61:74:24:73:bb:ec:d5:f8:24:29:96:
                    ef:ad:f0:a5:30:b0:ea:fa:fa:00:24:d0:13:be:f4:
                    80:ba:53:a5:fd:60:fc:64:43:7b:47:18:ac:ea:12:
                    84:7d:ab:c1:77:c5:d4:c2:cc:3a:01:ab:6c:8b:7b:
                    55:00:0b:65:e7:12:39:2c:9f:bc:ae:97:cb:c8:e9:
                    41:9b:56:cb:78:03:25:2c:0f:44:f4:79:fa:f8:b4:
                    02:bc:fb:9e:eb:da:13:a5:bf:e8:8f:f2:b2:b1:cf:
                    2a:43:3a:1c:de:5d:56:b6:7c:53:2a:1d:99:4a:b0:
                    f8:dd:3a:58:8a:5d:db:8f:25:bf:8b:62:bd:b7:1d:
                    b0:07:78:51:d1:2c:1c:5b:f5:c3:96:10:79:03:36:
                    fb:57:36:ff:86:e7:f6:5a:12:8c:c2:e4:7b:f3:5d:
                    6c:22:49:98:5c:94:dd:87:ab:0e:51:df:bc:d9:55:
                    a5:1d:98:a8:14:df:a5:7e:05:23:3c:18:a7:dd:c9:
                    79:de:d1:db:8e:b4:c5:0d:e2:75:29:04:9d:5f:d9:
                    7e:b7:85:c4:8a:f8:13:64:46:9b:34:6c:37:21:3f:
                    7b:23:4b:8c:cc:7d:61:dd:72:8d:ed:ba:c5:c5:1a:
                    5e:6a:9a:54:34:8c:e0:66:25:88:a0:4e:69:51:09:
                    cd:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:8D:57:E6:D1:35:C2:9E:4E:4C:13:1C:B0:99:2A:31:12:6F:0D:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4691484a-b551-3207-a7de-902605b6e48a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8b:4c00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:65:4b:f9:b5:6d:e1:ff:a5:71:4a:ed:49:2e:b4:ad:30:56:
         02:e2:43:73:80:bc:80:e7:08:d3:d9:d7:33:98:c9:ef:73:9c:
         cc:af:1b:c1:ee:1d:e5:f9:b6:25:86:e9:43:1f:3d:02:20:1b:
         22:cf:de:b2:55:e4:2e:95:73:4a:7e:a9:a6:16:ad:d3:76:ff:
         6f:02:6d:b4:36:89:97:df:ca:e8:2e:c2:45:fa:68:d5:4c:f2:
         bd:49:2f:df:d3:b8:cb:89:6a:41:d5:e9:8c:21:c7:ee:ab:f5:
         d1:11:c5:72:2a:ab:44:fd:0c:19:52:e7:0e:49:52:b9:6b:dd:
         0a:4e:bd:a6:87:a0:cf:3f:d7:44:01:ae:44:f5:e8:78:aa:3d:
         8b:a4:0c:c9:36:5e:64:af:8d:7c:18:df:be:85:2a:c7:2a:97:
         4f:44:14:c8:12:de:62:98:96:a3:b8:b0:b5:96:61:a2:40:6f:
         87:4f:fa:57:79:75:ca:ef:a7:0b:ab:56:44:7c:b4:f7:85:49:
         de:48:5c:18:71:6e:18:f4:3b:c3:ab:ea:fa:c5:0f:d2:98:1c:
         ab:87:1e:59:64:50:d0:36:a1:22:f5:89:6f:cc:85:2b:6b:99:
         cb:99:ea:4a:01:72:5b:22:84:f5:18:c7:d6:4d:8e:9b:63:4a:
         52:96:37:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:33:08 2025 by rpki-client