Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/007ee090-d984-3799-a6a8-f7e29951d9f0.roa
File:                     007ee090-d984-3799-a6a8-f7e29951d9f0.roa (raw, json)
Hash identifier:          Cg39xA4POHl1JdMCx9daGzqo4SuChvu8msAGCDh8Z/w=
Subject key identifier:   A5:62:EC:1C:93:52:23:0A:C6:DC:A7:B4:C1:52:6E:40:EC:EA:4A:2F
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584B64CE575849021416CB9F2780
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/007ee090-d984-3799-a6a8-f7e29951d9f0.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     30036
IP address blocks:        2604:2e89:d800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:57:58:49:02:14:16:cb:9f:27:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=1c6d0596-b36e-4fce-88c1-589a09e2e788
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:6c:c4:db:9d:21:fc:c9:1f:dc:fe:8e:f5:5c:
                    55:10:c3:12:34:86:fd:e7:94:10:98:13:7a:23:73:
                    a1:e4:f9:2a:c6:be:2e:58:6c:c5:b0:2e:fd:63:a7:
                    70:3a:d6:97:e7:13:62:c7:f4:5a:d6:e6:ea:6b:bf:
                    cd:c8:9c:4b:16:ce:dd:a9:18:fe:c2:56:00:46:d4:
                    87:99:dd:fe:64:af:41:64:ed:d7:00:93:53:47:8a:
                    d5:46:f4:64:b7:ee:c0:e1:78:8f:3d:77:42:3d:00:
                    6f:f8:48:4c:06:b0:fd:72:f8:5e:46:2f:ae:3e:39:
                    8a:58:6b:9f:f7:ea:79:b6:de:a0:45:7d:a8:b5:28:
                    f8:3d:3c:bb:53:d4:c9:e3:a5:f3:60:0e:a9:8e:d1:
                    72:2f:b2:09:72:d3:d9:bf:fe:8c:9c:29:66:59:6a:
                    69:cf:b3:7d:4d:92:78:9c:d9:4e:d3:64:5e:78:60:
                    77:f4:29:14:0d:78:e0:6b:7a:3e:5d:e9:03:d9:1d:
                    36:70:b9:d3:ca:98:f2:96:fb:0f:77:bf:04:82:d5:
                    81:9e:d5:ed:ac:0b:48:34:7e:d7:9e:1c:4b:95:28:
                    68:09:ac:80:24:95:36:5d:87:ad:46:12:10:7e:44:
                    ed:5f:e8:a3:a3:87:8d:83:4d:5a:ba:ad:60:93:14:
                    d5:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:62:EC:1C:93:52:23:0A:C6:DC:A7:B4:C1:52:6E:40:EC:EA:4A:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/007ee090-d984-3799-a6a8-f7e29951d9f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e89:d800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:98:3b:91:e5:e2:ae:04:df:f5:1d:11:50:eb:ba:19:cf:68:
         8b:c1:54:9e:e7:6a:b6:83:d8:ae:24:1a:9d:2d:2d:81:05:06:
         71:98:17:69:df:8a:21:78:e9:c4:01:37:e2:9c:f0:15:f7:bb:
         60:4c:16:e2:b6:1a:f1:26:89:65:05:31:78:1c:31:6c:42:94:
         91:03:28:8e:5d:b2:f5:2f:d0:e9:76:07:c1:7d:f7:d4:9d:c9:
         ce:2e:3f:6d:6c:eb:4f:82:34:f6:cd:a5:53:13:91:72:e4:84:
         50:73:9d:58:81:c8:77:35:4a:cb:2b:b7:45:8a:c8:19:ec:7d:
         aa:7c:2c:21:c8:87:f3:30:a9:02:ce:bc:f1:54:c1:b3:38:5c:
         0a:b8:92:91:1e:c6:9b:6f:e6:74:07:c0:63:5f:2f:8f:e7:b6:
         85:6e:b5:63:c0:f8:89:8f:b8:27:f0:83:4c:57:35:1f:d1:69:
         59:b7:6a:9c:f3:da:5f:ca:a0:79:0e:6a:ae:ec:a2:16:e7:d4:
         4b:46:c3:6c:9c:d1:bf:15:5a:fa:fe:9d:d3:3b:43:6b:fb:52:
         15:4c:46:43:50:65:2e:4d:8d:b7:aa:7d:be:70:9c:a1:eb:ed:
         b7:d7:7c:cb:2e:ed:1c:43:78:3e:c9:aa:17:27:cd:b1:65:ab:
         e6:e2:16:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 07:20:27 2025 by rpki-client