Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4a05e5d8-d018-36d4-a06d-3cacfb1d8e8a.roa
File:                     4a05e5d8-d018-36d4-a06d-3cacfb1d8e8a.roa (raw, json)
Hash identifier:          l/g8Usnx3Iwb/I7ZXgKRldx7G1dyq2vHLy6FjdtiV34=
Subject key identifier:   12:4D:84:7C:AE:EF:1A:57:97:17:F2:C2:DC:46:B5:18:07:82:3E:02
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584B7C875ACB3391575D392A87D0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4a05e5d8-d018-36d4-a06d-3cacfb1d8e8a.roa
Signing time:             Sat 11 Oct 2025 13:00:38 +0000
ROA not before:           Sat 11 Oct 2025 13:00:38 +0000
ROA not after:            Fri 09 Jan 2026 14:00:38 +0000
asID:                     19905
IP address blocks:        2604:2e87:1400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7c:87:5a:cb:33:91:57:5d:39:2a:87:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Oct 11 13:00:38 2025 GMT
            Not After : Jan  9 14:00:38 2026 GMT
        Subject: CN=73c5ef44-8875-4d52-a2de-d0c958a79cf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:4e:a3:b0:bb:71:2a:9c:f7:51:84:87:e6:98:
                    aa:0e:f5:f3:37:17:6b:e3:5f:7b:69:de:ec:32:5e:
                    68:db:16:ff:c2:16:70:9b:c8:d4:4b:22:d5:f7:d0:
                    bf:58:b7:d7:f9:38:f1:43:7d:c6:95:0f:18:26:5f:
                    f6:63:b1:28:75:29:e7:dd:2f:91:87:70:48:08:d6:
                    9d:58:30:91:d2:4f:45:0b:8c:83:bf:10:e0:f6:0e:
                    8c:0a:1e:ad:c7:51:ef:cc:e3:9d:fa:61:c2:38:eb:
                    83:f5:bf:cd:ea:0d:99:06:2b:cf:a9:ed:78:e9:3b:
                    80:fa:c0:e8:ba:59:83:cb:e0:f8:7a:47:fe:89:73:
                    1d:37:ee:57:b1:cb:75:54:92:56:6b:2a:27:28:ed:
                    f7:2e:41:51:b0:7f:9a:3d:e2:77:4e:9a:91:9c:f7:
                    07:47:30:7e:8e:1c:99:9c:0b:da:04:25:79:93:2f:
                    8c:4b:4a:97:7f:d5:8a:20:c0:33:76:51:80:7c:f8:
                    2a:36:1c:75:68:ab:0c:0a:6b:61:8b:1b:06:43:a6:
                    c6:90:ae:ab:53:31:1f:8f:3a:c8:0c:eb:fc:7a:9b:
                    78:61:3e:ae:7b:f6:41:60:3c:91:8d:0a:43:d5:23:
                    15:c9:a5:41:ea:de:3a:43:d2:7b:7f:17:98:89:b7:
                    0a:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:4D:84:7C:AE:EF:1A:57:97:17:F2:C2:DC:46:B5:18:07:82:3E:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4a05e5d8-d018-36d4-a06d-3cacfb1d8e8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e87:1400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:1d:f1:bd:79:81:7c:fe:af:ad:80:65:44:09:29:fd:18:e1:
         e3:28:e8:51:ee:bb:0d:e8:fe:72:0a:04:f9:35:91:6e:58:84:
         d8:c4:8d:3c:6a:99:85:05:d3:63:08:75:0d:77:ce:2a:f6:4f:
         9b:94:49:41:a7:a5:3d:c2:97:b1:4d:f5:04:8d:f7:52:d1:3b:
         70:48:d4:35:10:0a:93:46:21:18:57:cd:7b:97:a0:1c:d9:57:
         7d:6d:eb:35:08:5d:06:de:b0:d8:49:f8:4f:03:de:35:14:2e:
         90:10:46:ce:63:35:e1:a2:fd:be:6a:97:f5:42:ca:74:e2:5f:
         bc:8b:31:c7:49:f7:4d:f8:77:af:56:1d:b4:08:2a:67:81:a7:
         1d:26:ee:6f:9a:d4:6e:87:c3:d2:e5:31:c9:d1:ff:73:fe:0b:
         93:50:af:d0:85:6b:1a:b5:3b:c1:4b:08:66:4a:ec:ac:5d:ef:
         ea:bb:29:b8:26:17:2e:47:68:6e:d6:cc:c5:5f:88:f9:23:9b:
         ef:60:3b:4e:c6:e9:93:8b:2f:07:38:ec:a7:65:fa:35:46:b1:
         2d:07:b2:a1:60:25:d6:ec:0a:ac:3f:23:f9:4f:2b:0c:3d:0d:
         fa:57:97:e0:e3:c3:ec:b8:01:13:05:6f:5c:bb:86:9e:6d:f9:
         19:7d:8d:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:40:28 2025 by rpki-client