Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a806a117-6302-390a-a964-5e7d12d399e1.roa
File:                     a806a117-6302-390a-a964-5e7d12d399e1.roa (raw, json)
Hash identifier:          hD4CD4AddCPw3GC5Qqz9rMzBCTyJ2r0HF9c8awJn2xE=
Subject key identifier:   D5:0C:93:17:0A:0A:6B:F4:A1:98:57:E7:C8:E4:19:14:A2:5B:FC:8F
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584A8410E1CCC352D27BF484C020
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a806a117-6302-390a-a964-5e7d12d399e1.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     30036
IP address blocks:        2604:2e8d:9400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:10:e1:cc:c3:52:d2:7b:f4:84:c0:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=d17f058f-3d9b-4e21-9c62-0216c06b5a03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:99:f3:10:8d:b7:1a:e1:7e:5e:b9:99:f7:14:
                    f5:01:1a:9e:a5:82:cf:00:a3:e1:5e:4b:f5:0f:3b:
                    82:84:22:e6:3f:81:bd:10:6f:2c:9e:99:8a:bf:20:
                    89:df:5b:56:28:38:ff:32:37:0e:90:c6:34:f5:00:
                    ed:b6:76:18:2c:5e:91:18:94:b3:e8:29:69:b4:9c:
                    12:aa:78:17:0c:6f:23:93:e2:de:3d:89:c2:18:3c:
                    6c:1f:89:da:83:19:9a:4d:93:7c:e2:dc:66:3b:c0:
                    ec:b7:c6:bb:c4:cc:94:58:2a:5d:a1:7d:de:c9:5f:
                    62:39:aa:d1:70:f6:93:19:ba:4c:37:85:b1:c2:52:
                    9e:95:bc:ad:ca:71:60:44:90:8f:de:5c:5c:ec:a0:
                    e7:ad:36:c5:ca:5d:6b:79:29:c2:8a:b8:68:7e:cd:
                    07:55:1b:9d:36:90:c4:f6:17:d1:57:2d:47:50:79:
                    34:54:4d:ca:f0:04:21:5d:6f:1d:86:b1:f8:e3:e0:
                    11:74:71:c1:79:30:73:63:d1:e7:68:82:19:a0:b4:
                    98:bb:db:71:77:13:be:2a:fd:58:be:a0:3c:4c:db:
                    4b:82:f7:a3:5a:cf:0f:9c:33:7c:ce:50:4c:5c:1f:
                    0e:53:b4:59:d7:91:94:80:f7:eb:08:74:1d:45:dd:
                    0d:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:0C:93:17:0A:0A:6B:F4:A1:98:57:E7:C8:E4:19:14:A2:5B:FC:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a806a117-6302-390a-a964-5e7d12d399e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8d:9400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:9f:27:b7:09:53:24:7f:dc:38:10:0c:da:60:7d:48:64:84:
         09:f8:32:b2:4d:73:e1:83:93:d5:a3:ce:25:f7:25:53:65:20:
         b6:e3:38:1c:dc:14:7f:93:2f:26:92:40:35:66:d1:b5:0b:50:
         10:fd:cb:ad:a6:50:fd:38:e5:6b:7d:67:26:97:53:96:a4:91:
         ff:6c:03:8a:dd:fe:27:97:14:fe:56:7d:e0:b7:bb:f4:31:17:
         32:55:c9:16:3e:b1:9c:c5:86:72:fd:14:d5:f5:8d:4c:14:17:
         60:47:49:8d:f0:2a:59:8f:26:94:98:56:4c:17:50:2d:18:8a:
         d9:0f:f9:25:96:f6:88:10:5d:f5:54:04:6a:11:8a:ba:45:5f:
         5b:57:34:50:01:13:83:ee:7d:6d:8e:66:6f:a5:b7:eb:56:9e:
         b0:fe:39:57:69:71:dc:72:a3:9d:07:35:37:6a:58:6f:b9:bf:
         c4:cb:e0:ed:b4:50:2d:dd:f9:85:b9:77:ad:62:b1:f4:a5:07:
         ed:4f:2d:22:43:dd:42:d0:f3:77:ca:0d:ad:d1:a1:6d:5c:0d:
         66:61:b9:86:1a:fc:36:b9:e2:36:27:78:3f:3f:0f:06:7f:88:
         88:6d:a2:a7:4d:ac:8e:09:66:47:94:fc:ae:d9:21:dc:82:78:
         36:4f:81:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:22:03 2025 by rpki-client