Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0d2ddff9-a632-3754-99bc-c9d77d4703ab.roa
File:                     0d2ddff9-a632-3754-99bc-c9d77d4703ab.roa (raw, json)
Hash identifier:          ZpQYOz8JWpb9ijgBgh93vQGVvIPh3CYULqP5xTq03f0=
Subject key identifier:   53:26:B4:30:81:5D:DC:DD:5F:BF:F7:84:0B:64:DA:D3:DE:F2:27:CB
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584B6201F4F476C946643DC1D180
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0d2ddff9-a632-3754-99bc-c9d77d4703ab.roa
Signing time:             Thu 02 Oct 2025 01:00:31 +0000
ROA not before:           Thu 02 Oct 2025 01:00:31 +0000
ROA not after:            Wed 31 Dec 2025 02:00:31 +0000
asID:                     19905
IP address blocks:        2604:2e8e:8400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:62:01:f4:f4:76:c9:46:64:3d:c1:d1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Oct  2 01:00:31 2025 GMT
            Not After : Dec 31 02:00:31 2025 GMT
        Subject: CN=e8850445-e3a9-438b-b2c7-673b3e78d281
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:02:7c:fa:a4:4f:7c:2b:f6:5c:6b:e9:d4:d3:
                    5f:b3:bd:40:43:e1:16:89:b6:f0:06:25:8d:22:40:
                    19:bd:14:05:29:39:18:7a:79:08:cf:7a:b9:be:2d:
                    41:8e:e2:4b:06:56:15:91:dd:ec:10:8c:ef:2a:cd:
                    5d:b6:d4:5a:4e:39:ec:81:cb:07:08:6b:89:a3:ba:
                    99:ea:6e:98:07:21:50:54:30:3d:e1:70:b0:9c:23:
                    fa:ab:57:91:89:c7:91:04:a0:a6:a6:3c:78:1b:30:
                    4d:ab:63:e8:9f:36:68:64:27:17:24:bc:75:e3:f3:
                    55:be:1e:82:9e:98:8c:25:da:77:f5:cb:33:16:7a:
                    9b:57:16:30:ba:e9:2f:50:f4:37:16:0c:97:3f:68:
                    e7:e9:77:9f:d1:a7:ec:3c:1f:8f:2d:44:73:6e:a0:
                    c1:96:89:7e:95:c6:38:ed:a7:90:37:9e:c7:5b:22:
                    71:6b:0d:4a:cd:e2:11:fc:14:40:8f:ba:af:50:6a:
                    57:6c:d8:0c:25:fb:35:76:cd:cc:e7:09:70:7e:53:
                    77:1e:1d:54:7b:bd:18:e8:06:87:4d:4b:9f:36:d2:
                    b6:cd:dd:84:71:00:75:ab:b6:8e:6a:50:f7:37:2a:
                    79:61:96:59:f0:eb:07:91:fb:96:1d:09:cd:a9:2c:
                    e3:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:26:B4:30:81:5D:DC:DD:5F:BF:F7:84:0B:64:DA:D3:DE:F2:27:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0d2ddff9-a632-3754-99bc-c9d77d4703ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8e:8400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:3f:5e:66:0b:16:0b:e8:1d:30:c4:d2:48:c8:ca:cc:21:62:
         4e:95:03:a6:19:12:bc:d8:89:6c:0e:20:90:6c:a2:e0:49:9f:
         e2:d1:41:41:77:8e:b4:5f:0b:6a:26:99:b6:86:23:d2:5c:ff:
         2c:08:ec:5c:b2:04:99:38:2a:5d:06:2e:0b:cb:df:ef:e9:a9:
         d4:0e:98:e6:5b:bf:28:19:28:e7:2a:31:8f:c7:36:62:72:82:
         a1:64:8b:1a:30:d4:32:5f:10:7d:6f:85:90:c2:95:02:54:4a:
         12:0f:c2:8e:fc:84:39:83:29:e9:31:bb:ed:64:ee:13:53:50:
         0d:04:f2:19:f5:dc:b8:c8:20:e2:54:5a:c2:14:7e:6b:77:72:
         a3:f0:d2:73:51:82:e6:f1:71:c3:8f:bc:28:15:fa:a7:98:50:
         1f:a3:86:3c:74:41:23:ec:f7:98:f4:44:14:f7:d4:90:74:b5:
         75:ea:9b:0d:8f:b8:88:29:7d:89:bb:b6:21:75:cc:f6:12:1c:
         e1:21:fa:66:69:5a:87:4b:80:7b:97:49:d8:49:25:f9:f6:2c:
         0c:c4:d5:01:9c:ad:51:e4:29:6c:49:65:b2:2e:5c:57:ac:90:
         92:a8:ed:29:b4:84:c9:14:e5:fc:79:24:20:bd:79:89:32:99:
         6c:16:2c:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:24:35 2025 by rpki-client