Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/087b07d0-1cac-3152-9792-ad893ab231d3.roa
File:                     087b07d0-1cac-3152-9792-ad893ab231d3.roa (raw, json)
Hash identifier:          70e2fyXKxS3w5PsW+y62Pjdel0SxIdT6sKPOANVwHKM=
Subject key identifier:   06:00:F6:ED:51:97:54:67:47:E7:AD:EF:E7:8B:AB:1F:2A:AA:7A:49
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584B64CE4FD3CA906A83D86F1D82
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/087b07d0-1cac-3152-9792-ad893ab231d3.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     30036
IP address blocks:        2604:2e8e:800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:4f:d3:ca:90:6a:83:d8:6f:1d:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=930e5698-41b1-46f6-a32f-eb7b234eea20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:fb:72:a9:ee:20:5a:5d:27:c5:58:9c:bd:5a:
                    2f:14:dd:84:c0:d1:48:35:ff:e0:55:3c:86:82:27:
                    46:33:2d:3c:b3:05:70:5c:2c:73:94:f2:23:6e:61:
                    22:d2:42:4b:35:bb:dc:7f:a4:51:08:25:ff:b7:2e:
                    1a:67:46:3a:f6:1a:47:1e:5d:fb:66:26:75:18:30:
                    84:d2:d2:6d:cb:01:a5:55:d6:60:84:fc:09:fe:92:
                    2d:82:ab:68:5a:ef:da:c2:77:87:5c:15:1f:ce:6a:
                    7f:7e:2b:5d:5a:06:20:9f:30:4b:9c:b8:b5:4a:60:
                    e0:05:17:a2:ec:72:9b:ee:db:fc:44:f8:13:0a:23:
                    51:b3:50:54:b6:13:29:28:21:05:3c:aa:78:cd:7b:
                    66:17:18:8d:3f:e7:e0:2f:5c:9a:f2:3d:ce:25:72:
                    4a:48:65:c2:3d:80:02:ca:a0:35:5e:a5:7a:b7:a0:
                    ea:0c:f8:98:b8:d5:07:15:f6:37:68:87:5a:7b:35:
                    ac:dd:48:17:3b:23:04:fc:68:19:de:b6:b7:c1:a3:
                    45:69:11:b2:62:4b:ed:b0:00:ad:a5:0d:70:b0:d3:
                    26:4d:a1:50:65:b5:98:87:55:f6:fc:63:d5:40:bf:
                    6a:a4:b6:1b:6b:6e:1c:a8:9c:f3:ba:a7:e0:91:e4:
                    e7:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:00:F6:ED:51:97:54:67:47:E7:AD:EF:E7:8B:AB:1F:2A:AA:7A:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/087b07d0-1cac-3152-9792-ad893ab231d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8e:800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:ca:7c:13:db:9b:32:4f:f0:97:69:5e:dd:3b:a0:44:1a:46:
         5d:fd:6f:0c:e4:de:f2:99:0e:34:80:f9:bb:e8:75:7e:fd:33:
         c5:d2:3e:a6:2f:e5:a8:41:1e:84:32:71:c9:0d:34:8d:a3:d4:
         d1:0c:b9:6d:0b:c1:2b:78:54:5b:8f:09:0a:13:20:47:bc:a6:
         c8:67:17:c6:82:c7:f3:48:f8:1d:c4:11:1a:83:8d:a1:10:56:
         85:78:44:07:bf:90:a7:7f:77:18:b8:1f:79:dd:06:43:9a:08:
         fb:f3:ee:94:be:47:ff:2c:09:9e:db:11:b4:5f:f3:d9:76:f8:
         bf:c6:16:9d:6d:69:ec:95:dd:66:22:9c:e5:27:e5:70:b1:63:
         c7:4f:f5:c0:b3:64:1e:15:77:48:63:8b:d4:8f:39:0a:95:10:
         fd:c5:a3:04:62:12:97:58:c5:3c:e9:72:83:10:22:d0:10:23:
         cf:68:35:38:68:1d:86:fb:3d:af:be:9b:14:7e:e0:fe:68:41:
         a7:49:b2:33:8a:b2:f9:6f:97:bd:e2:51:33:ab:93:6f:71:0a:
         4b:3e:fb:b3:2b:6b:8e:c7:8a:72:7b:84:59:03:c7:63:c7:2f:
         e0:4b:13:fc:7a:90:e1:ec:99:d0:bd:97:07:e7:6f:b1:ba:38:
         bc:aa:66:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 07:16:28 2025 by rpki-client