Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1fbda34c-051e-3dde-81e4-2d6069452d78.roa
File:                     1fbda34c-051e-3dde-81e4-2d6069452d78.roa (raw, json)
Hash identifier:          pVOYpyWZJgsgBNSg7c8O57URBVItu6UdKPECmeKLFAs=
Subject key identifier:   FB:3E:A1:14:52:F7:7C:49:98:00:41:89:4E:8F:92:97:1C:DF:AD:06
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584B41E70FF455BD8FC471D38D80
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1fbda34c-051e-3dde-81e4-2d6069452d78.roa
Signing time:             Sat 20 Sep 2025 13:00:41 +0000
ROA not before:           Sat 20 Sep 2025 13:00:41 +0000
ROA not after:            Fri 19 Dec 2025 14:00:41 +0000
asID:                     30036
IP address blocks:        2604:2e8d:f800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:41:e7:0f:f4:55:bd:8f:c4:71:d3:8d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Sep 20 13:00:41 2025 GMT
            Not After : Dec 19 14:00:41 2025 GMT
        Subject: CN=6a0b0c19-be1b-4f95-925e-968d644932b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:d2:6c:14:3c:ac:35:c4:39:38:0f:b0:55:6b:
                    ed:71:83:c3:14:b9:3c:a0:bb:ea:48:e4:04:7e:3e:
                    7c:2b:68:2e:1d:1d:aa:73:d8:82:1f:03:04:b2:58:
                    3d:59:49:60:88:4e:06:0d:f3:91:2f:35:d3:bc:a3:
                    df:b4:c0:d5:c3:aa:4c:c7:58:e3:da:c6:28:8f:aa:
                    9c:d2:82:2a:5f:ea:de:13:b7:3a:1e:34:2c:00:af:
                    3c:2c:cc:d1:d6:9a:0f:42:19:9e:af:fc:da:77:92:
                    f3:56:38:ce:df:a3:80:57:b1:16:ab:ad:fb:f2:6a:
                    96:00:eb:4c:bd:97:33:ab:8b:c6:bb:0d:1d:88:fb:
                    2c:af:31:55:bf:d7:25:83:a8:23:86:5f:31:09:19:
                    70:35:76:bd:d5:73:e9:50:f8:82:14:06:d3:68:47:
                    1d:f7:14:f3:3d:dc:3d:2b:4e:f2:1d:c3:23:eb:e8:
                    fd:b9:04:25:45:66:9b:2c:12:65:01:16:8b:fb:90:
                    97:3d:9f:b5:88:2f:10:b9:5e:32:77:d2:2c:de:24:
                    21:b8:53:67:7f:63:91:30:ba:3d:b1:ca:fc:65:a7:
                    6d:c8:8f:3f:c9:12:19:9d:a0:1b:00:59:00:d1:35:
                    ee:76:4d:c5:cb:38:c4:90:21:66:4c:8e:2b:16:25:
                    73:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:3E:A1:14:52:F7:7C:49:98:00:41:89:4E:8F:92:97:1C:DF:AD:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1fbda34c-051e-3dde-81e4-2d6069452d78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8d:f800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:8c:b2:2c:79:d6:5f:0d:d2:4a:f7:38:52:af:81:b9:c8:5d:
         da:23:8a:69:bc:5a:56:b4:44:c2:fd:c4:d1:56:54:53:5b:63:
         cf:1e:ff:bc:25:54:6c:16:41:85:ff:e5:c5:f0:b2:0e:43:93:
         ce:1b:07:0f:e8:e7:19:84:6f:af:2a:ef:1a:4f:ae:3f:c0:63:
         f3:2e:90:58:8e:7c:fa:41:71:aa:6d:16:53:73:71:3c:40:3f:
         48:31:92:a7:77:38:13:a2:53:d0:bc:a2:51:2e:86:c7:26:d0:
         2b:88:96:89:d9:5b:65:89:90:68:dd:83:f0:3c:00:2c:e5:f3:
         86:07:a2:31:33:b2:da:20:ce:30:17:93:6f:4d:35:88:83:cc:
         b5:32:36:87:56:3a:50:6c:93:f7:18:09:81:77:95:60:21:62:
         ef:8d:b3:dc:ce:b7:39:b0:ca:a3:a1:7a:1e:49:ec:cd:44:cb:
         03:a0:5b:2e:ea:80:37:09:0c:f9:4a:d3:83:23:3b:a9:94:a7:
         98:94:54:98:21:22:a2:81:a4:7f:45:51:14:f5:e5:ef:2e:28:
         33:68:2b:d6:68:56:db:eb:e0:91:c0:41:dc:47:29:6c:5b:39:
         e7:81:0f:44:77:9c:4c:38:83:14:75:53:bf:18:62:51:f0:9f:
         70:26:2c:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 07:12:26 2025 by rpki-client