Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9109694f-41d8-3b4c-8018-ede04cede03d.roa
File:                     9109694f-41d8-3b4c-8018-ede04cede03d.roa (raw, json)
Hash identifier:          tXHGK41bwcj/CRIrxa0eEyKzF1czhOLhVhpUs8L4fDI=
Subject key identifier:   BC:95:BA:66:37:27:BC:C3:60:24:C3:AF:FB:E6:5A:E1:29:5D:4C:22
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584A3FB1ABDE958FEA27A7D8F580
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9109694f-41d8-3b4c-8018-ede04cede03d.roa
Signing time:             Fri 20 Jun 2025 01:14:40 +0000
ROA not before:           Fri 20 Jun 2025 01:14:40 +0000
ROA not after:            Thu 18 Sep 2025 01:14:40 +0000
asID:                     19905
IP address blocks:        2604:2e87:5400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3f:b1:ab:de:95:8f:ea:27:a7:d8:f5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jun 20 01:14:40 2025 GMT
            Not After : Sep 18 01:14:40 2025 GMT
        Subject: CN=6d3523b2-40a4-4c63-b29a-022032d1ab5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:3a:29:a2:54:08:47:6b:d7:ae:33:fd:d3:46:
                    32:b4:f1:05:6d:ea:1e:f1:7f:55:5b:9e:18:7a:99:
                    fd:a3:03:5f:b9:0e:29:cb:f4:e6:0a:6d:06:54:9d:
                    aa:02:32:b3:02:2c:75:cc:c7:20:69:69:c7:77:cf:
                    aa:aa:c1:cc:62:e0:8e:6a:7d:4a:4d:ff:5a:eb:18:
                    b9:d3:38:df:dd:33:3a:a3:2a:4a:3f:50:f4:3d:04:
                    d2:60:81:82:1d:a3:c0:5a:16:f3:3c:0c:6e:4e:8c:
                    b5:b1:41:4b:03:46:e1:7c:db:bd:fb:01:08:5e:92:
                    5e:99:db:98:13:f3:e1:d9:aa:19:1a:01:4c:a2:b7:
                    e5:f4:28:b9:17:01:1b:41:5c:82:23:c2:3c:5e:7e:
                    b8:86:52:f0:e9:ab:8a:c4:c7:71:00:00:a8:63:6f:
                    06:05:4e:fc:4b:7f:1c:bb:18:68:90:ee:84:a2:97:
                    70:c0:4a:a2:04:d6:da:3f:92:8f:2f:be:f2:c0:c9:
                    04:70:a3:b7:7e:bc:df:da:eb:57:08:36:4d:8c:c4:
                    c0:9b:7f:b6:f6:6e:c0:97:f4:2f:9e:b9:14:12:77:
                    2f:43:f8:8c:2d:f7:3c:b2:ee:44:8a:73:40:f9:7e:
                    f1:56:67:ad:08:13:0b:3e:9e:d0:1f:78:58:fa:4f:
                    d6:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:95:BA:66:37:27:BC:C3:60:24:C3:AF:FB:E6:5A:E1:29:5D:4C:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9109694f-41d8-3b4c-8018-ede04cede03d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e87:5400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:93:ad:b2:01:13:1b:81:c8:5f:55:d6:a7:8e:ac:06:b6:47:
         20:32:77:d0:52:0d:3a:15:0f:08:26:95:48:2f:01:56:7c:e1:
         00:2c:ae:e7:5e:43:ed:59:60:e3:df:98:16:82:bf:da:2a:3f:
         40:2a:df:ea:df:45:29:5a:23:39:07:56:23:6b:07:ba:7f:81:
         6d:66:e2:90:90:8e:00:c0:46:c3:e8:7a:df:5f:d7:3d:0e:71:
         9a:dd:23:2b:b6:53:1d:da:84:3d:d8:9a:a2:71:55:9b:56:6d:
         4b:75:60:b5:05:fd:a1:6a:6a:22:5a:f7:e7:84:e9:d3:2b:42:
         d4:70:1d:5d:7a:5e:6e:82:c7:af:d5:d0:b7:5e:ec:b0:22:cf:
         5a:59:f4:3f:c1:24:7c:4b:62:f5:ae:e9:9b:b7:e3:14:ce:e2:
         e6:87:58:06:52:cf:2a:ce:e2:ac:8e:15:66:e7:ae:46:6b:0c:
         21:54:f1:b2:bd:7a:0f:8d:43:be:94:c6:ce:03:a9:88:3c:b3:
         3b:d2:9a:1d:65:85:5f:c1:e1:54:4a:51:ce:42:eb:13:d2:16:
         e7:43:59:08:58:c1:73:a7:d9:9b:d2:59:81:9c:8f:18:32:8e:
         80:06:e1:96:41:7b:46:be:67:64:5f:eb:dd:62:01:ca:e6:cf:
         e0:fe:fc:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 16:28:12 2025 by rpki-client