Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6cb6bf07-4e00-444e-a404-d3174fa94ce8/cecd7a26-37f7-391f-988a-77a64e655f49.roa
File:                     cecd7a26-37f7-391f-988a-77a64e655f49.roa (raw, json)
Hash identifier:          N1vTc2GgCcDUC3pbpdtU/vzNdiddCe9FqjJy3pLp9v8=
Subject key identifier:   0D:A6:29:13:60:AF:BF:80:A0:19:1C:97:99:C9:29:F6:92:F8:64:DB
Certificate issuer:       /CN=6cb6bf07-4e00-444e-a404-d3174fa94ce8
Certificate serial:       010D0C9F4328584B382194C2C1219A7CD43E0310
Authority key identifier: 18:2D:6E:FB:F8:F8:70:25:A4:EB:BC:6F:AE:84:94:14:62:7B:58:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6cb6bf07-4e00-444e-a404-d3174fa94ce8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6cb6bf07-4e00-444e-a404-d3174fa94ce8/cecd7a26-37f7-391f-988a-77a64e655f49.roa
Signing time:             Wed 17 Sep 2025 01:00:33 +0000
ROA not before:           Wed 17 Sep 2025 01:00:33 +0000
ROA not after:            Tue 16 Dec 2025 02:00:33 +0000
asID:                     36515
IP address blocks:        2604:4c80::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6cb6bf07-4e00-444e-a404-d3174fa94ce8/6cb6bf07-4e00-444e-a404-d3174fa94ce8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6cb6bf07-4e00-444e-a404-d3174fa94ce8/6cb6bf07-4e00-444e-a404-d3174fa94ce8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6cb6bf07-4e00-444e-a404-d3174fa94ce8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:38:21:94:c2:c1:21:9a:7c:d4:3e:03:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6cb6bf07-4e00-444e-a404-d3174fa94ce8
        Validity
            Not Before: Sep 17 01:00:33 2025 GMT
            Not After : Dec 16 02:00:33 2025 GMT
        Subject: CN=e1ca4978-a25b-4d3e-9663-33d9d014b652
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ff:b3:20:84:39:ed:10:97:b6:db:19:e2:88:
                    f2:3b:a5:57:f0:95:e2:7f:aa:e6:8b:48:23:b9:9b:
                    f4:62:e6:f7:93:e3:c8:a7:74:83:70:89:fc:76:e4:
                    18:4a:21:0e:7f:48:1d:07:19:5d:f2:2e:7a:31:23:
                    de:40:2c:19:c6:e7:18:d2:3f:31:79:aa:36:1c:3c:
                    32:c0:81:88:34:7b:0a:85:27:ca:c5:c2:1a:e6:b2:
                    fd:11:ff:52:2b:8d:a3:63:04:85:a7:fe:e4:2b:5e:
                    a0:4c:ab:2f:65:2f:dc:0f:e7:18:44:04:71:a4:41:
                    5f:de:7d:df:4c:68:1e:ee:90:05:84:75:23:e6:27:
                    d5:8c:ba:4d:2f:e7:d1:7f:3c:a2:d2:c6:49:6c:7f:
                    bf:f1:10:6a:51:3f:81:a2:39:b0:40:75:1f:0d:72:
                    15:e5:19:ed:c7:f4:de:9d:1a:a5:99:2b:e0:98:14:
                    b1:8c:96:4b:48:8b:76:2d:68:c1:fe:22:b1:08:03:
                    1a:b9:47:b7:50:5e:bb:22:25:22:77:2b:d4:1d:bc:
                    e8:2c:e5:b1:04:d1:23:35:33:15:a1:a7:df:69:0c:
                    67:92:e3:28:e0:88:d0:5f:e7:b5:f3:99:43:0f:df:
                    7e:ff:13:24:62:4f:1b:af:e7:7c:91:c8:ea:a5:4f:
                    ab:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:A6:29:13:60:AF:BF:80:A0:19:1C:97:99:C9:29:F6:92:F8:64:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6cb6bf07-4e00-444e-a404-d3174fa94ce8/cecd7a26-37f7-391f-988a-77a64e655f49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6cb6bf07-4e00-444e-a404-d3174fa94ce8/6cb6bf07-4e00-444e-a404-d3174fa94ce8.crl

            X509v3 Authority Key Identifier:
                keyid:18:2D:6E:FB:F8:F8:70:25:A4:EB:BC:6F:AE:84:94:14:62:7B:58:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6cb6bf07-4e00-444e-a404-d3174fa94ce8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:4c80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:22:bc:66:87:df:8d:0d:16:fa:9e:f5:5d:c0:e5:9b:7d:cb:
         4d:70:41:d2:6a:40:ac:d0:17:4e:a7:a4:32:a9:5c:16:d0:9d:
         f4:7c:07:fd:2d:b6:e1:c2:0e:3e:fe:bd:50:e2:0a:e3:82:2f:
         02:60:17:e3:8c:42:2a:39:13:5e:9f:d6:7b:ab:c2:6c:de:ad:
         fa:35:04:c2:3e:74:d1:7d:d7:a0:05:1f:9d:7e:b9:b1:81:bf:
         fd:f8:b5:f4:cc:85:56:8d:99:af:9e:0a:7c:f2:c4:5c:4d:27:
         6c:fe:d3:32:cd:88:bb:df:aa:80:14:d6:9c:7d:44:17:79:df:
         08:2a:6c:15:bd:9d:b3:89:95:3b:91:19:6c:3c:68:40:3f:26:
         86:71:7f:97:7a:0c:c4:f1:9a:2f:43:92:22:45:53:6b:34:8c:
         34:9b:63:85:c8:76:d1:03:da:ae:3d:c0:af:5f:67:84:8d:9d:
         69:88:f6:1a:da:a3:21:79:6f:8d:12:11:af:3f:93:66:d0:41:
         fb:78:7d:c5:bc:7f:36:a9:d6:30:40:78:30:02:ba:33:67:f2:
         7b:02:f0:9b:6b:cd:ae:04:28:15:e2:bb:e5:65:31:cf:c5:f2:
         e5:68:6a:97:3e:a0:92:76:50:b5:42:48:6a:cc:1c:67:a0:ed:
         0f:e1:d5:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 04:35:06 2025 by rpki-client