Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0e5c07a6-6ae9-35c0-a4e4-d37f059b590e.roa
File:                     0e5c07a6-6ae9-35c0-a4e4-d37f059b590e.roa (raw, json)
Hash identifier:          KdohmYAFRGyLxtd220R6RA5U/VwEv0Lwseuu1pE9jD8=
Subject key identifier:   50:37:DA:7F:47:DB:B8:09:4E:2F:8A:E6:70:F9:D0:8E:9D:3C:04:29
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584B41E71101BD0CE9B5BA743AA0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0e5c07a6-6ae9-35c0-a4e4-d37f059b590e.roa
Signing time:             Sat 20 Sep 2025 13:00:41 +0000
ROA not before:           Sat 20 Sep 2025 13:00:41 +0000
ROA not after:            Fri 19 Dec 2025 14:00:41 +0000
asID:                     19905
IP address blocks:        2604:2e8d:f800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:41:e7:11:01:bd:0c:e9:b5:ba:74:3a:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Sep 20 13:00:41 2025 GMT
            Not After : Dec 19 14:00:41 2025 GMT
        Subject: CN=207477cf-c6b0-47dd-9986-ce2ca3a27036
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:2d:57:c4:00:80:f0:72:de:cd:04:65:12:28:
                    6a:70:51:dd:9b:bc:cc:89:a1:ed:21:4d:fc:d5:2e:
                    cc:e6:4e:e0:24:69:66:36:de:1b:ce:45:cb:8c:6d:
                    f4:12:e1:17:86:37:b4:47:39:27:e9:c2:be:5b:45:
                    29:fa:c8:e1:54:88:4a:09:a0:82:75:a8:36:53:8e:
                    38:9e:71:34:a3:e7:02:81:f6:74:a2:36:c3:75:7f:
                    ac:e5:24:f4:55:9a:77:42:bb:7a:a6:24:50:a7:58:
                    70:63:d8:cd:a1:b4:4d:8e:5e:c7:c9:39:2a:90:78:
                    15:0f:43:55:76:12:fd:40:1c:29:2a:86:2c:7f:51:
                    d5:55:3d:de:2a:ac:ca:49:e0:ea:94:e1:7d:ac:6d:
                    3e:d9:6d:62:7a:c3:31:89:94:c6:74:7b:c6:14:21:
                    2c:ac:e0:99:18:6a:76:bd:2f:ff:5e:1d:10:24:7d:
                    d8:26:7d:c3:53:c7:ae:3e:af:71:4c:94:a3:2d:1e:
                    28:91:82:33:f8:33:9b:3d:21:76:18:a3:7d:fa:e7:
                    8f:0b:99:9e:03:2c:cf:30:12:18:93:c0:b8:f1:a5:
                    15:22:72:44:d2:c1:b1:bb:e3:ab:94:86:f6:ef:f1:
                    59:2b:63:9b:ed:22:1f:78:9c:43:92:58:06:53:dc:
                    a6:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:37:DA:7F:47:DB:B8:09:4E:2F:8A:E6:70:F9:D0:8E:9D:3C:04:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0e5c07a6-6ae9-35c0-a4e4-d37f059b590e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8d:f800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:05:91:be:4e:aa:91:17:7a:5b:a1:1e:dc:72:7d:ff:41:16:
         9a:52:18:89:c7:a2:2f:51:2b:fc:16:d1:a3:0e:f8:4b:29:33:
         42:87:ee:cf:7b:c4:e5:ef:5c:a7:59:fc:dd:e9:cf:8a:c5:4f:
         f6:cd:94:4f:e7:e3:0f:fd:92:98:eb:80:71:78:0a:e9:ef:dc:
         ac:a2:54:8f:a2:fb:50:da:c7:2a:ae:ef:71:75:d9:27:ad:72:
         9c:55:a8:0c:54:19:3b:d4:65:c6:d1:f8:33:6a:bd:8d:82:10:
         96:c5:af:62:fc:f1:88:61:51:f3:8d:48:84:ec:e5:56:5a:b0:
         16:3c:19:19:de:5e:39:3b:58:6e:a2:06:f8:7a:cb:bb:79:c6:
         18:d8:6d:06:68:ca:57:0a:19:d5:88:76:5f:6c:8e:8a:29:45:
         50:00:06:70:95:42:b9:45:d5:51:f2:6f:8d:c9:26:f2:02:cb:
         e8:16:5c:35:5e:d0:44:5b:ef:89:62:09:45:f3:c4:62:cb:14:
         2e:9b:c4:15:37:c4:e6:f2:91:d4:13:76:31:a6:7b:c7:b1:64:
         71:04:50:6f:b8:69:3b:e3:ff:fa:0d:0a:b9:a6:df:07:73:3a:
         42:ad:d8:bb:78:0c:60:05:78:27:a8:f5:34:b3:93:f8:19:3c:
         1a:aa:38:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:26:19 2025 by rpki-client