Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/21a650b6-0f13-3acf-b4cf-17e2acc25fc7.roa
File:                     21a650b6-0f13-3acf-b4cf-17e2acc25fc7.roa (raw, json)
Hash identifier:          A6nBhiN2f27hY8Rnh5juUNTW7Kk7fWWlmPDyolKdpcc=
Subject key identifier:   4F:0B:2C:02:D3:A5:99:69:4D:5A:55:20:91:4E:3F:FA:BE:31:D5:C6
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584B64CC8A821354C5952FBD2D80
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/21a650b6-0f13-3acf-b4cf-17e2acc25fc7.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     30036
IP address blocks:        2604:2e8c:c800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cc:8a:82:13:54:c5:95:2f:bd:2d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=62641461-b31c-4313-9786-d3f76dd07e00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:14:20:a2:de:b7:59:59:64:e8:9e:b2:61:c7:
                    b9:25:c4:2b:fd:68:a4:d7:0f:3f:71:29:6a:7e:13:
                    ca:d6:93:00:bd:ba:10:a1:25:e7:36:20:03:7d:55:
                    af:e9:27:23:58:d2:83:02:bb:f4:2f:11:4f:03:47:
                    f2:55:f1:9f:61:7a:d7:27:94:3f:92:31:82:12:c0:
                    6c:c6:c7:50:96:81:64:5b:b5:f3:c3:3d:4f:ca:0a:
                    d6:d3:7a:e0:02:dd:70:9e:e9:01:e4:19:d6:f7:4f:
                    c5:81:e4:10:45:40:2c:84:60:14:7e:0b:2e:56:23:
                    ba:41:bd:b7:73:83:ff:5d:1d:fa:50:14:d8:0f:79:
                    89:ab:d0:fd:f4:8c:6f:b6:45:0d:73:a8:fe:ca:3a:
                    65:30:71:dc:d6:82:a2:23:cd:5e:d1:87:82:1b:21:
                    0c:2e:96:1c:47:8b:4c:7a:3c:3d:e6:2f:68:60:3a:
                    6c:1c:a9:8e:0f:de:4e:ad:9d:0a:10:41:9d:bc:d7:
                    d9:1d:d3:de:09:28:e4:06:e3:47:00:cc:77:0f:c8:
                    9d:7d:b7:e1:80:ee:19:b8:72:e5:17:f5:b6:37:d2:
                    11:32:80:3a:d4:13:88:38:16:d5:ff:ed:0e:20:c6:
                    3c:07:85:96:26:94:ef:40:4c:37:aa:62:4f:ad:dd:
                    76:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:0B:2C:02:D3:A5:99:69:4D:5A:55:20:91:4E:3F:FA:BE:31:D5:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/21a650b6-0f13-3acf-b4cf-17e2acc25fc7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8c:c800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:10:a1:ee:1e:6b:9b:30:c8:16:db:0b:97:75:14:57:1c:ac:
         5a:47:20:c5:74:54:56:b1:42:73:e3:8a:c9:0f:70:ba:b6:22:
         62:ed:ef:b9:bc:b8:5f:f6:f5:29:05:b8:d4:c3:7b:d7:fe:f5:
         96:e9:dc:53:57:86:2e:dc:af:a7:ff:e6:f9:4c:2d:03:0c:53:
         7f:39:66:bc:d6:fa:b9:dd:78:64:49:8d:65:db:fc:64:fe:3e:
         e6:68:86:b9:82:95:32:54:fc:9b:4e:22:50:86:e6:a4:4c:cf:
         90:c3:f9:3d:eb:b5:27:cd:8f:a4:55:6f:7c:be:76:fe:97:a5:
         b1:e3:af:d6:33:ac:3c:7a:b4:69:78:16:94:14:7b:2e:d8:74:
         56:97:64:d4:43:d6:7c:ce:a9:c2:bf:a3:91:37:b7:fe:e5:25:
         9d:94:88:f7:4a:2e:2b:74:7b:13:07:26:1d:a9:ca:03:4c:50:
         ed:fd:f9:19:81:06:51:2f:aa:05:51:01:3b:f8:a8:1a:3e:8e:
         84:ce:b7:50:5c:5e:53:34:0c:64:96:4b:c0:07:2d:f5:a8:25:
         0a:63:32:87:9b:9c:5c:22:9e:a4:c4:7d:f1:99:66:95:d8:2c:
         77:e4:53:8a:90:b5:eb:f1:2f:72:df:43:50:3f:81:ec:61:3c:
         f9:c8:83:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 07:14:25 2025 by rpki-client