Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/630a483b-2ad1-3535-9e6e-bcbac743a122.roa
File:                     630a483b-2ad1-3535-9e6e-bcbac743a122.roa (raw, json)
Hash identifier:          Vov4k15e1GtbhN849oPFnga61yj/U6/JY9Is2NOIqco=
Subject key identifier:   7F:A7:98:B2:AA:CB:A8:74:A9:19:24:FB:5C:2A:35:5E:A8:5D:59:6A
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584A5B95ABA507EB796CCAD4B300
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/630a483b-2ad1-3535-9e6e-bcbac743a122.roa
Signing time:             Mon 30 Jun 2025 01:00:50 +0000
ROA not before:           Mon 30 Jun 2025 01:00:50 +0000
ROA not after:            Sun 28 Sep 2025 01:00:50 +0000
asID:                     30036
IP address blocks:        2604:2e8d:f400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5b:95:ab:a5:07:eb:79:6c:ca:d4:b3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jun 30 01:00:50 2025 GMT
            Not After : Sep 28 01:00:50 2025 GMT
        Subject: CN=fe3f576c-27b3-4a9c-ad2d-97e0e8f1b867
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:fb:8d:2c:4f:79:12:af:a4:31:66:06:71:55:
                    de:55:fc:6e:9a:7b:78:67:2e:64:be:19:f4:d6:15:
                    ac:c7:b0:eb:cf:60:c7:e4:96:8d:dd:64:9a:e8:28:
                    7c:34:76:49:0e:88:c4:46:97:71:e7:40:17:f8:d0:
                    54:72:ee:5b:b9:2c:26:fb:31:85:a1:5a:fe:62:05:
                    2c:69:e0:0b:d1:92:37:0d:0e:74:2c:d2:fe:29:13:
                    3a:8e:fe:bf:9f:7b:ab:65:45:49:3b:f2:14:b2:50:
                    bb:de:d3:a0:03:cb:e6:43:b7:3c:e7:b3:05:59:56:
                    6e:3d:e3:c9:a7:4a:6e:02:a9:30:98:46:29:42:72:
                    7f:f6:74:7c:42:7e:01:f7:f1:40:ec:0a:01:d8:f1:
                    38:90:d9:8d:04:12:d8:3d:f5:48:b5:0e:78:3c:92:
                    45:1b:ca:90:b5:56:9f:0a:af:65:51:9b:07:1f:a8:
                    93:96:2f:64:ae:6a:14:70:34:6a:5e:c0:56:84:01:
                    d6:8e:4c:92:b0:ef:83:0a:27:f1:c6:c9:a5:d1:38:
                    72:ef:6d:3c:24:59:47:8e:8c:c6:14:d1:77:11:04:
                    bc:b6:18:43:02:20:c1:76:44:bf:20:e4:66:e8:ee:
                    31:ed:9b:26:9c:e4:06:63:51:17:9d:13:dc:fd:9c:
                    6b:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:A7:98:B2:AA:CB:A8:74:A9:19:24:FB:5C:2A:35:5E:A8:5D:59:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/630a483b-2ad1-3535-9e6e-bcbac743a122.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8d:f400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:36:ef:78:c5:a6:92:38:ee:ae:29:30:7d:89:9c:62:47:19:
         a1:f7:b3:68:86:17:11:0b:5b:63:fe:9e:05:34:df:d7:a7:68:
         af:6d:26:fe:14:bb:e5:34:b5:b5:80:0a:91:1c:ce:02:a5:d9:
         ac:ee:b0:cf:52:10:35:af:16:c0:a8:2a:ec:bc:56:4d:9e:5f:
         90:ea:51:b0:1d:09:0a:aa:7a:c4:32:62:32:c7:62:eb:9f:32:
         f0:0e:20:07:89:b5:09:16:68:1e:ca:a2:5b:27:41:df:2d:df:
         2d:5d:b8:00:bb:8b:b8:76:44:28:1b:ac:d5:06:03:b1:71:24:
         75:1d:f3:81:42:2b:b1:12:19:c9:7b:aa:03:5b:d8:19:b0:6e:
         8f:3f:0d:28:c0:ed:fb:6e:13:cf:d5:22:01:95:72:f5:74:12:
         de:49:6b:1b:9e:fb:f7:d7:5a:b8:57:96:18:a2:53:bb:84:06:
         e8:d4:de:1f:d8:a6:85:ec:ea:48:9c:7a:c6:90:ea:48:de:5e:
         c9:0d:cd:85:e7:bf:69:69:e0:fc:ae:c4:7e:c8:cc:b7:99:ec:
         f4:48:d0:13:6e:ea:31:24:5d:b9:67:10:0e:62:48:71:04:eb:
         98:2c:30:d5:d2:4a:62:93:9b:e1:e8:10:39:f9:00:a6:85:a9:
         01:8a:d5:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 10:31:14 2025 by rpki-client