Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/28fdf0f6-ef7d-305c-a395-adc1a76c85b4.roa
File:                     28fdf0f6-ef7d-305c-a395-adc1a76c85b4.roa (raw, json)
Hash identifier:          dLJDQ8D5GbS80LOFZuxvIgH5/WMLsL37MWH7YeS9P8I=
Subject key identifier:   B4:18:78:11:DF:19:4C:34:BB:66:07:FD:D7:1B:3D:D9:2F:3B:6D:68
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584B68FC946DDDF32E87B80BE1A0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/28fdf0f6-ef7d-305c-a395-adc1a76c85b4.roa
Signing time:             Sat 04 Oct 2025 13:00:40 +0000
ROA not before:           Sat 04 Oct 2025 13:00:40 +0000
ROA not after:            Fri 02 Jan 2026 14:00:40 +0000
asID:                     30036
IP address blocks:        2604:2e8d:b800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:68:fc:94:6d:dd:f3:2e:87:b8:0b:e1:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Oct  4 13:00:40 2025 GMT
            Not After : Jan  2 14:00:40 2026 GMT
        Subject: CN=9aea6079-3073-4faa-aaa5-99e8e66f6851
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:a7:dc:31:03:d5:1f:27:bd:eb:23:3f:e2:d5:
                    c5:07:b3:b5:35:8f:dd:2b:4e:74:f2:89:68:b2:8c:
                    1a:b0:e9:8c:c4:ae:9d:8d:a8:62:a1:f1:a2:30:6c:
                    63:4b:72:98:4a:74:f8:d2:19:e2:80:d7:77:5e:66:
                    ee:14:87:79:fc:0d:9e:86:86:fe:73:2a:8e:f5:f1:
                    b3:26:ba:70:6a:11:09:b1:aa:61:60:30:b4:ae:d7:
                    75:2b:9c:da:04:e1:b9:a0:fc:9b:c1:26:05:88:dd:
                    a3:79:a3:ce:99:d4:1a:69:f5:62:ef:fe:1b:ba:b9:
                    e7:3d:fe:de:2f:9d:84:3b:c2:67:e4:64:b5:9d:f1:
                    72:6c:83:4e:ca:c9:9a:70:81:82:b2:62:01:24:86:
                    30:77:00:17:90:83:d7:86:2a:08:4f:1f:90:12:70:
                    00:76:9f:17:08:ac:0c:0d:5e:b2:45:01:99:17:69:
                    c2:00:3e:2c:07:11:e4:f6:8e:4d:6e:4c:1f:5a:0e:
                    ce:71:5c:b8:fb:a3:d0:75:df:ed:61:6c:38:35:4e:
                    7d:48:7a:91:2f:a8:1d:2a:1e:41:92:c8:1d:fb:74:
                    a0:8d:97:f6:ee:fd:9a:85:f7:be:1d:0b:ca:c8:0d:
                    56:90:64:e7:f2:ce:f0:d7:b7:79:c1:b7:e0:b4:6a:
                    5f:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:18:78:11:DF:19:4C:34:BB:66:07:FD:D7:1B:3D:D9:2F:3B:6D:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/28fdf0f6-ef7d-305c-a395-adc1a76c85b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8d:b800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:e6:97:30:5e:a6:59:8d:3d:8f:9b:06:3c:e0:f9:42:80:24:
         1d:2b:b5:30:59:92:93:f8:cf:3e:9d:d5:8c:05:67:b5:ad:15:
         b7:1c:35:68:74:b8:8f:d9:43:ce:f4:42:2b:8f:11:6e:a9:35:
         aa:bf:86:aa:04:f9:eb:51:eb:fc:32:d1:30:58:23:4e:07:d0:
         a2:ab:cc:a7:9f:54:75:08:33:e3:c0:a2:2c:58:e0:53:2e:b1:
         8f:b0:af:71:51:f2:7b:6b:c3:39:aa:b3:95:65:37:5b:51:d7:
         8d:d7:c3:5a:0c:b8:27:63:01:01:08:3b:38:6b:23:aa:06:2b:
         15:69:a0:8b:a8:f5:43:06:f0:49:14:61:4d:07:86:63:ec:2b:
         e0:73:d4:8f:82:c1:70:ed:35:c5:be:14:ae:92:3c:97:b0:95:
         ea:36:52:95:ca:cf:a6:1e:0a:58:45:04:0e:88:32:ca:30:22:
         f4:d9:c1:5f:3b:13:23:08:32:dc:6e:2c:d1:35:be:2e:96:53:
         9e:ff:98:e8:a8:7b:d8:c4:46:34:7c:d1:5b:39:05:46:6e:ce:
         fb:26:60:c2:e0:78:d5:88:d4:df:fe:81:56:90:88:10:a2:2e:
         2d:d1:b9:84:6e:14:55:35:a7:93:87:a0:4d:56:17:20:4d:6d:
         07:31:28:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 07:14:22 2025 by rpki-client