Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3c0d34a5-ce00-31b8-b08d-5668f27f6278.roa
File:                     3c0d34a5-ce00-31b8-b08d-5668f27f6278.roa (raw, json)
Hash identifier:          2Ra+Uhssu+2yZFfVnNKyR82b2dgIFy9DKfQkfV46hTw=
Subject key identifier:   25:7A:77:87:68:78:38:AE:72:18:D8:0F:91:9B:6E:73:8E:72:2C:CA
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584A7C8B885DD8D8ED96FCDB3280
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3c0d34a5-ce00-31b8-b08d-5668f27f6278.roa
Signing time:             Fri 11 Jul 2025 20:22:08 +0000
ROA not before:           Fri 11 Jul 2025 20:22:08 +0000
ROA not after:            Thu 09 Oct 2025 20:22:08 +0000
asID:                     19905
IP address blocks:        2604:2e87:6000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7c:8b:88:5d:d8:d8:ed:96:fc:db:32:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jul 11 20:22:08 2025 GMT
            Not After : Oct  9 20:22:08 2025 GMT
        Subject: CN=9dc03416-147f-49c7-9a36-b77866a31cf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:54:e1:9d:0b:e1:d8:08:d7:c7:1e:dc:9e:20:
                    35:75:26:79:09:1d:c8:08:96:e4:30:26:cc:66:68:
                    37:83:dc:05:61:6a:d5:d8:d1:bd:6a:15:e1:35:ca:
                    5a:24:82:ef:8b:20:bd:a4:bf:b4:08:90:d1:1e:33:
                    10:65:f0:e9:e0:94:c2:f6:9f:f9:08:d7:5c:6f:b3:
                    0c:c3:4c:f1:7e:95:e7:46:57:61:03:5f:bf:6a:5e:
                    9d:8e:e2:b2:21:8c:cf:86:0f:b3:cf:48:c9:52:af:
                    e5:ba:68:c9:2f:b7:27:0c:16:93:4f:04:01:de:0e:
                    37:c7:42:9c:69:37:2d:4a:01:d1:68:50:5a:d4:68:
                    fc:0b:d4:b0:6d:d6:3c:ce:c1:03:55:34:41:7a:92:
                    2a:3d:e5:81:ad:2a:97:a6:26:2e:d9:b4:d7:eb:18:
                    77:99:68:1a:a9:c1:77:2a:ae:4e:18:8d:a3:66:85:
                    f5:1a:c9:76:f4:1b:bc:cd:92:d8:d4:8a:27:fd:4b:
                    43:e7:32:5d:7c:58:9e:fe:7c:f0:7a:31:e2:e9:d9:
                    90:f6:4b:63:ce:fb:51:43:b6:18:e0:60:f0:21:c6:
                    89:9a:f5:b4:a4:3e:14:85:51:9a:a5:be:a3:2f:fa:
                    d3:a1:09:94:31:1e:4b:e1:0e:e8:3b:f8:c8:db:c5:
                    8f:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:7A:77:87:68:78:38:AE:72:18:D8:0F:91:9B:6E:73:8E:72:2C:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3c0d34a5-ce00-31b8-b08d-5668f27f6278.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e87:6000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:63:66:ef:80:81:90:1b:df:44:7e:db:92:28:ae:31:5a:05:
         cc:3a:a1:65:09:09:65:d7:5c:ac:6d:78:a2:76:65:1a:be:cc:
         d4:77:73:16:47:91:1f:97:be:16:e4:86:b7:8b:80:d9:30:c4:
         16:47:a9:32:c2:c2:ef:f6:1e:4b:36:e3:b8:9b:6b:4a:e5:72:
         18:d8:e9:bb:c8:02:fc:89:43:9a:0c:10:4d:c5:dc:2c:f2:08:
         af:7f:27:c7:9b:11:e6:3d:32:38:3f:a9:4e:53:b6:74:a3:b0:
         cf:80:68:b6:bf:b7:4e:41:4b:a1:d5:48:72:9b:19:59:84:2a:
         83:c5:2d:fd:d4:02:68:c5:0d:84:b2:8a:5d:1a:59:24:84:a6:
         c0:ab:01:f2:e4:c8:dc:59:9c:dd:5e:b4:8a:cd:3c:3a:f6:0e:
         df:9e:5f:4b:8f:1d:ff:4f:90:2d:8b:0f:ca:a0:0c:c5:51:a9:
         fd:52:92:70:44:d9:c5:39:b8:36:ef:85:a2:0b:42:5c:fa:de:
         1e:38:4c:3a:9d:83:ef:ea:cf:58:32:8f:90:57:20:27:52:11:
         51:8b:c5:e6:28:46:3a:8c:2c:32:b5:78:e7:ae:d5:cb:04:b8:
         b3:44:2a:cc:15:4a:a8:52:22:a8:b5:5a:ed:99:fe:51:78:c4:
         c7:85:a5:c0
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEp8i4hd2NjtlvzbMoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI1MDcxMTIwMjIwOFoXDTI1MTAwOTIwMjIwOFowLzEtMCsGA1UEAxMk
OWRjMDM0MTYtMTQ3Zi00OWM3LTlhMzYtYjc3ODY2YTMxY2Y1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAilThnQvh2AjXxx7cniA1dSZ5CR3ICJbkMCbM
Zmg3g9wFYWrV2NG9ahXhNcpaJILviyC9pL+0CJDRHjMQZfDp4JTC9p/5CNdcb7MM
w0zxfpXnRldhA1+/al6djuKyIYzPhg+zz0jJUq/lumjJL7cnDBaTTwQB3g43x0Kc
aTctSgHRaFBa1Gj8C9SwbdY8zsEDVTRBepIqPeWBrSqXpiYu2bTX6xh3mWgaqcF3
Kq5OGI2jZoX1Gsl29Bu8zZLY1Ion/UtD5zJdfFie/nzwejHi6dmQ9ktjzvtRQ7YY
4GDwIcaJmvW0pD4UhVGapb6jL/rToQmUMR5L4Q7oO/jI28WPFQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFCV6d4doeDiuchjYD5GbbnOOcizKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvM2MwZDM0YTUtY2UwMC0z
MWI4LWIwOGQtNTY2OGYyN2Y2Mjc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuh2Aw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAJmNm74CBkBvfRH7bkiiuMVoFzDqhZQkJZddcrG14onZlGr7M1Hdz
FkeRH5e+FuSGt4uA2TDEFkepMsLC7/YeSzbjuJtrSuVyGNjpu8gC/IlDmgwQTcXc
LPIIr38nx5sR5j0yOD+pTlO2dKOwz4Botr+3TkFLodVIcpsZWYQqg8Ut/dQCaMUN
hLKKXRpZJISmwKsB8uTI3Fmc3V60is08OvYO355fS48d/0+QLYsPyqAMxVGp/VKS
cETZxTm4Nu+FogtCXPreHjhMOp2D7+rPWDKPkFcgJ1IRUYvF5ihGOowsMrV4567V
ywS4s0QqzBVKqFIiqLVa7Zn+UXjEx4WlwA==
-----END CERTIFICATE-----
Generated at Sun Jul 20 09:36:30 2025 by rpki-client