Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5944d721-8f7f-3c27-86e8-fbdad857bf33.roa
File:                     5944d721-8f7f-3c27-86e8-fbdad857bf33.roa (raw, json)
Hash identifier:          MmcNRfdWVxPkTwLaEVJoXrvEiUpxSwiRE/PvXmoX7zc=
Subject key identifier:   A9:A7:88:C0:DB:2F:E6:B7:C6:12:D2:83:93:44:5D:E8:52:5F:44:07
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584B87B215AFDB37B9D9C0F4B600
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5944d721-8f7f-3c27-86e8-fbdad857bf33.roa
Signing time:             Wed 15 Oct 2025 13:00:38 +0000
ROA not before:           Wed 15 Oct 2025 13:00:38 +0000
ROA not after:            Tue 13 Jan 2026 14:00:38 +0000
asID:                     30036
IP address blocks:        2604:2e87:2000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:87:b2:15:af:db:37:b9:d9:c0:f4:b6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Oct 15 13:00:38 2025 GMT
            Not After : Jan 13 14:00:38 2026 GMT
        Subject: CN=b25c3257-5ffe-4f85-ad3f-a8e2598f3c32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:33:eb:04:57:3a:89:98:a9:bc:3a:5c:c7:2c:
                    20:01:c2:1f:02:62:0f:ff:aa:04:69:b6:a7:67:69:
                    67:e4:eb:00:92:1e:10:33:2f:c5:ed:69:84:30:fa:
                    a2:d4:5f:49:04:cb:62:00:d6:fb:0f:31:a4:fa:b9:
                    5c:73:c2:e6:fc:02:d7:09:fe:ab:8b:16:d2:4d:e0:
                    22:b9:fa:c4:8c:59:aa:e1:59:26:c5:e2:d5:cb:3c:
                    18:b9:f7:e9:8c:5d:ec:9a:fb:8e:f5:36:3d:31:0e:
                    c7:f7:1c:e2:44:6d:f6:e3:12:fb:71:e3:5e:09:d9:
                    20:09:09:98:f1:ac:77:17:3d:1f:b3:da:f4:0a:e4:
                    f2:68:21:99:82:a8:f1:e1:5b:54:c9:06:34:3f:6b:
                    c3:22:fe:30:39:81:e8:4a:98:56:34:cd:69:95:a8:
                    d2:4e:0c:93:bc:9b:4f:4e:19:c3:73:ac:3b:0e:b9:
                    e2:1a:db:ab:f6:73:30:15:da:d1:d4:6e:7e:ac:5a:
                    89:8e:a4:4b:d2:a7:75:b8:3a:44:38:31:eb:a5:9e:
                    fe:2d:c4:c2:8e:d5:4e:26:dc:25:b6:eb:19:f3:c1:
                    1c:c7:23:7d:af:60:41:d8:ab:bb:35:73:90:9d:fa:
                    6b:c6:b5:14:23:33:94:ee:a7:92:0e:7d:d8:22:e4:
                    04:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:A7:88:C0:DB:2F:E6:B7:C6:12:D2:83:93:44:5D:E8:52:5F:44:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5944d721-8f7f-3c27-86e8-fbdad857bf33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e87:2000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:93:27:58:ae:b7:3b:89:78:4f:54:1c:8c:4a:09:fe:9f:33:
         13:1d:c3:5c:ef:b9:ee:64:aa:cd:37:64:8f:1c:38:d2:ea:20:
         35:e0:5e:d2:71:71:70:68:bf:8f:5e:d4:a1:6f:4b:e7:5b:7d:
         ec:6c:c3:e9:cb:78:40:a1:ae:dc:43:e6:af:40:95:8c:4e:47:
         12:af:9a:eb:68:99:81:86:ed:9d:05:0b:20:75:05:ec:3b:92:
         1a:04:82:cc:14:a7:8f:c8:ac:26:d5:6a:89:a4:d3:93:bd:de:
         12:30:96:82:b6:c0:c5:57:3c:77:ab:fc:ff:2c:3c:1f:43:27:
         40:49:f5:3c:51:b0:b9:8f:42:29:48:3c:fc:6f:d2:94:dc:12:
         ed:12:bb:97:45:4c:32:70:8b:2a:b9:5b:9f:5a:46:1d:36:2b:
         c5:a0:93:54:02:52:b5:70:c4:5a:50:b7:14:2f:8a:84:ce:b4:
         b3:76:3c:49:20:08:37:79:3d:56:78:48:fc:4d:ff:8c:4d:9e:
         3a:f5:56:0c:05:ff:d9:f3:45:d5:b1:f3:80:72:59:10:80:7a:
         3e:c7:b7:c3:71:b2:2f:da:12:d6:53:d1:70:24:6d:6f:7b:74:
         b0:cb:b5:bc:c5:52:0d:de:15:ee:d2:1d:1f:d2:15:64:8d:22:
         0e:fe:da:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:39:04 2025 by rpki-client