Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c7b344c3-0df3-390e-a069-f4cf25092f37.roa
File:                     c7b344c3-0df3-390e-a069-f4cf25092f37.roa (raw, json)
Hash identifier:          83iFYbF2H3X1bRIruEp41QSX52/UCigq93YjlFLzc1U=
Subject key identifier:   10:36:A9:B6:66:42:74:C6:FF:02:4F:F3:BE:99:9A:CF:5F:F1:AB:3C
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584AFC1C1E3FFA438022CAE60D48
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c7b344c3-0df3-390e-a069-f4cf25092f37.roa
Signing time:             Tue 26 Aug 2025 13:00:41 +0000
ROA not before:           Tue 26 Aug 2025 13:00:41 +0000
ROA not after:            Mon 24 Nov 2025 14:00:41 +0000
asID:                     30036
IP address blocks:        2604:2e8f:8000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fc:1c:1e:3f:fa:43:80:22:ca:e6:0d:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Aug 26 13:00:41 2025 GMT
            Not After : Nov 24 14:00:41 2025 GMT
        Subject: CN=2cbd7697-cd39-4e52-923c-fd3cb6a01510
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:e7:1a:33:67:5d:b9:99:de:a7:b0:66:93:a3:
                    71:07:0a:0d:48:65:80:00:19:e8:37:b7:5e:32:c4:
                    42:67:37:b8:4c:13:38:32:51:b5:dd:52:75:29:ef:
                    94:c3:d7:a0:02:2d:ac:90:92:8e:b9:0f:47:93:8b:
                    5c:03:aa:a8:56:7b:e2:f3:84:b7:24:91:fc:2c:97:
                    f3:99:d0:76:0d:a6:b0:5d:31:dc:bb:70:69:c7:a8:
                    6a:4a:5f:db:00:9f:ce:26:e9:ab:7a:35:fb:29:f5:
                    ac:5f:ed:c2:5a:bd:4f:de:45:48:f0:b7:54:21:93:
                    db:3b:98:61:ac:94:88:c2:7b:30:1e:6c:ea:95:75:
                    ac:93:4f:da:65:5c:66:fa:f3:54:56:53:30:9c:a3:
                    ac:81:59:e7:09:51:88:0f:f8:80:02:49:23:30:8f:
                    47:9a:ff:95:fc:f4:58:3d:d7:88:2e:77:45:b6:0b:
                    a7:66:11:03:98:54:99:da:b9:01:a4:87:35:e3:05:
                    26:45:4e:c8:38:ee:75:fd:33:e7:b0:00:5f:34:12:
                    25:46:60:30:2f:5d:f6:e8:32:b7:c9:7f:5a:38:82:
                    ec:44:71:88:5d:5c:e0:1c:b9:4a:a2:c4:56:e8:91:
                    c1:ed:e0:5f:16:9c:89:8f:3f:34:45:3f:1e:33:a4:
                    92:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:36:A9:B6:66:42:74:C6:FF:02:4F:F3:BE:99:9A:CF:5F:F1:AB:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c7b344c3-0df3-390e-a069-f4cf25092f37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8f:8000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:45:25:eb:86:36:66:98:9f:3b:13:27:b8:6c:dc:13:12:f2:
         18:4d:36:22:72:b6:01:01:45:8b:04:1b:fa:a0:54:10:0c:a9:
         f8:3f:56:65:de:7b:73:2d:13:35:60:8c:b3:3d:72:b3:0c:79:
         e6:6d:46:11:54:78:de:05:15:62:b4:50:bb:40:1d:09:f4:45:
         0e:c4:01:aa:aa:a2:ac:49:8e:44:f9:30:6e:9d:83:15:62:ac:
         31:5d:e9:29:b3:be:15:bf:0e:87:34:8b:dd:1d:36:4b:66:bb:
         88:c1:c9:fc:4b:a1:3f:a9:81:d1:4e:d6:4b:e3:9c:e0:c2:31:
         ef:d7:45:cd:5d:d2:45:e5:5b:b8:09:2d:65:c8:fd:e1:51:59:
         f9:11:a8:b3:00:91:96:7c:12:e2:f6:ff:8a:4f:99:f7:b0:0a:
         c5:50:2c:d5:b8:f2:e9:b8:be:15:7c:13:ef:94:54:ba:41:47:
         07:cd:a6:ba:b0:58:65:6b:74:f3:81:ae:71:a0:47:bd:b9:d1:
         d1:c9:46:42:50:43:83:8f:3f:5b:09:f1:a5:c7:e9:38:24:00:
         12:d9:dc:b8:e3:15:3f:d1:8b:68:90:c7:05:fc:4b:f9:79:ce:
         5f:b4:c6:05:d3:bb:90:b5:be:2d:64:75:97:e3:37:c1:bb:e8:
         84:82:64:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 07:20:24 2025 by rpki-client