Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b4e0c176-214f-3286-8616-fd3f51e93567.roa
File:                     b4e0c176-214f-3286-8616-fd3f51e93567.roa (raw, json)
Hash identifier:          yvjmYbILj1dGv29s8W6ovWm2wPeew1UjWGx1py3WJP4=
Subject key identifier:   96:7A:D4:60:49:BD:CF:71:26:70:2C:4C:CD:5D:CE:1D:6E:F2:C5:C6
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584B8EAD0CC8592AE6B7BC201A80
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b4e0c176-214f-3286-8616-fd3f51e93567.roa
Signing time:             Sat 18 Oct 2025 01:00:30 +0000
ROA not before:           Sat 18 Oct 2025 01:00:30 +0000
ROA not after:            Fri 16 Jan 2026 02:00:30 +0000
asID:                     19905
IP address blocks:        2604:2e87:7c00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8e:ad:0c:c8:59:2a:e6:b7:bc:20:1a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Oct 18 01:00:30 2025 GMT
            Not After : Jan 16 02:00:30 2026 GMT
        Subject: CN=e980b8b1-70f5-40ee-b021-0126a6fff2c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:02:84:ee:11:8e:a0:66:24:26:c7:9f:92:ae:
                    16:b8:e4:ae:26:ab:72:79:2e:33:e3:8e:0b:30:63:
                    bd:bc:a6:c7:f0:b4:9d:41:16:ad:df:86:07:52:b6:
                    1d:8f:d3:ed:de:f1:9b:1d:fe:91:c6:71:d5:fe:10:
                    e7:e5:f4:a4:4a:3d:e7:7c:39:c9:f2:e2:ca:b3:8f:
                    c1:3c:3f:f3:42:b7:49:bf:c6:a3:6e:4b:50:0f:1d:
                    e5:5e:c1:57:2d:ea:13:e5:0b:62:d4:57:89:f7:b6:
                    5c:b8:19:49:a6:45:d4:aa:65:86:4d:4f:9a:c6:5c:
                    99:38:f9:e2:1e:5a:e4:9f:ba:d8:22:35:15:e9:ca:
                    a3:c5:e5:8e:55:20:40:1c:62:e8:de:95:9b:9d:5d:
                    4b:17:c1:ef:97:c2:ac:fb:2f:a9:82:62:ce:cc:c2:
                    da:d3:8a:87:2a:2f:7e:bb:12:b2:97:a9:f5:9c:01:
                    79:a6:17:30:4e:86:c8:4c:0a:81:33:93:78:ef:af:
                    33:a5:db:06:c1:2c:e3:1d:1a:e4:fc:84:67:e1:ad:
                    ab:e2:d4:45:75:20:76:1c:3a:ce:26:4f:13:33:fa:
                    01:4c:a7:1d:df:89:e8:a7:a3:92:07:79:71:39:f5:
                    01:d5:c1:1e:c4:c5:85:ff:7b:b1:fb:10:80:1c:fa:
                    5f:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:7A:D4:60:49:BD:CF:71:26:70:2C:4C:CD:5D:CE:1D:6E:F2:C5:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b4e0c176-214f-3286-8616-fd3f51e93567.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e87:7c00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:18:4d:85:33:59:d3:c0:9e:f8:6a:0f:cd:22:2f:fd:a0:49:
         c7:ee:7a:2b:f8:cb:89:ab:ff:fe:7a:fa:e6:c2:b7:f4:25:f7:
         d0:d6:ff:7e:28:80:f6:e4:3e:5a:90:87:66:3e:c4:77:c1:d9:
         1c:c0:39:33:86:c1:97:2a:84:3e:8a:b8:0f:e9:93:82:82:97:
         88:d1:be:96:ff:fd:93:44:fa:ce:22:61:8e:f7:09:3a:67:33:
         b5:c3:7d:03:b8:ce:27:40:93:b8:97:fc:7e:36:68:93:f2:36:
         f0:be:25:0e:b0:27:01:b6:b3:62:29:d3:4e:8b:96:2a:bf:5b:
         40:8f:d2:04:e1:5a:6f:43:8e:96:fe:db:ce:9b:59:90:f5:e8:
         12:83:e3:e8:02:1d:d7:0f:54:c7:6f:95:98:61:40:9a:98:8d:
         79:d9:09:6c:1e:98:58:f7:62:17:f0:ea:93:f8:06:66:47:1f:
         1b:f2:eb:24:f3:bc:36:35:8c:b7:c5:8d:8a:d3:59:64:c2:00:
         bd:10:e1:24:5a:fd:44:d0:13:0b:9e:4a:5e:a0:bb:af:8f:0c:
         f8:7e:be:cf:29:bc:2e:9e:09:0e:8e:f6:d3:a0:42:00:0b:b8:
         c2:99:50:b9:f5:a1:91:e0:8d:f9:09:e8:a8:fe:b4:81:82:0d:
         fd:dd:4e:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:57:32 2025 by rpki-client