Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/de16373b-6f46-34bf-b413-049a13897d65.roa
File:                     de16373b-6f46-34bf-b413-049a13897d65.roa (raw, json)
Hash identifier:          sAXDjso67YAQMu/dXQVsbwvQwe1BkFnnG4Npiq6uDoE=
Subject key identifier:   41:B2:8B:28:DF:BE:0B:7B:69:3F:E5:12:FC:62:B9:55:3C:83:CC:2B
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584AD3A124D5559F44317A16C080
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/de16373b-6f46-34bf-b413-049a13897d65.roa
Signing time:             Tue 12 Aug 2025 01:00:32 +0000
ROA not before:           Tue 12 Aug 2025 01:00:32 +0000
ROA not after:            Mon 10 Nov 2025 02:00:32 +0000
asID:                     30036
IP address blocks:        2604:2e8d:3800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d3:a1:24:d5:55:9f:44:31:7a:16:c0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Aug 12 01:00:32 2025 GMT
            Not After : Nov 10 02:00:32 2025 GMT
        Subject: CN=ef01e121-b6b1-4c23-9fbc-3b82098b40a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b9:97:b9:46:68:95:c2:b5:1b:9b:9f:80:f7:
                    6a:5d:94:fc:35:ac:60:fe:17:20:2b:b5:6d:7d:8c:
                    ee:00:a6:f5:b1:ef:2f:55:47:1b:4f:8c:58:81:e4:
                    f0:c8:0b:87:7b:37:44:ef:43:fe:1e:7f:35:33:c9:
                    32:20:06:0a:61:b4:90:43:28:cc:52:88:9f:fb:ba:
                    80:87:ca:23:0a:0f:47:44:3b:3e:94:07:1c:a6:76:
                    e2:28:12:4d:cd:31:77:72:a5:18:0b:db:75:14:ec:
                    8f:8d:ef:8d:04:12:c9:3d:c3:49:ae:7f:13:32:e8:
                    b3:88:27:ee:c4:13:43:f2:61:9e:89:c0:4b:18:fb:
                    88:a6:71:e0:08:21:e7:b3:14:3b:9d:99:5a:d0:f1:
                    b5:f1:ce:72:2a:6b:8b:cb:ee:c3:80:65:7d:3b:da:
                    5f:54:09:42:a2:ce:82:e7:a0:a5:57:ed:58:f3:af:
                    a9:80:50:45:6e:d3:2e:43:a5:f8:5b:97:0a:85:64:
                    10:f8:91:5d:3a:6e:99:a1:20:12:6d:0b:3e:ac:e5:
                    db:f6:8c:57:dd:5d:72:8a:ac:66:2f:99:dc:1a:2a:
                    ce:bc:1b:ce:b4:b4:4f:5a:c3:ce:9a:6a:1d:1c:fa:
                    6b:4b:09:61:2d:e8:4f:12:4d:b8:2f:a2:5f:ff:b6:
                    92:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:B2:8B:28:DF:BE:0B:7B:69:3F:E5:12:FC:62:B9:55:3C:83:CC:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/de16373b-6f46-34bf-b413-049a13897d65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8d:3800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:96:e4:83:b5:5e:24:f7:80:a0:0a:a2:c5:2e:cf:18:ff:b1:
         e7:5a:0b:27:62:a2:24:2c:c2:61:02:94:88:51:a8:45:2f:02:
         be:7c:03:da:c8:bb:ec:7d:12:a7:e0:fa:c8:5f:3c:29:0c:b4:
         3e:cd:ab:fe:81:78:47:fd:bd:c1:9b:2b:91:12:37:2e:aa:dd:
         fd:62:52:24:92:5d:db:3f:a2:11:a4:41:bd:22:32:e7:95:5c:
         dc:ef:f0:b3:51:73:82:fa:50:50:d6:ae:81:eb:e0:53:6c:0c:
         58:a6:da:ed:5f:06:28:fa:3c:4e:51:3f:a9:69:c1:e2:93:d2:
         2c:98:bd:39:e9:0a:d6:78:44:c9:0c:e9:b6:5b:cc:86:e0:74:
         88:50:7b:df:26:4c:34:fa:12:cd:96:c4:20:f6:f2:fd:66:c4:
         38:aa:55:ad:13:56:58:e1:4d:62:22:da:af:31:c8:b4:67:3d:
         e0:dc:6d:30:28:a7:cc:1f:88:1f:1a:15:d7:db:b0:3b:62:f1:
         ab:35:a6:16:81:64:ac:e6:85:79:2e:7a:ed:30:cb:8a:9d:3b:
         4b:fd:42:0b:3d:62:ce:43:9f:76:7e:00:c5:47:db:26:03:53:
         1c:82:df:e5:51:24:a8:84:5c:96:bd:f4:ef:b2:d0:b9:1c:fd:
         53:5f:c2:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:07:49 2025 by rpki-client