Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3701ce5f-85d4-3d58-b502-48606325b1ba.roa
File:                     3701ce5f-85d4-3d58-b502-48606325b1ba.roa (raw, json)
Hash identifier:          SoB4gBxihOgDhax9/qbue7GqNkVc0e6tMMeTJBs2kfw=
Subject key identifier:   BC:3F:1B:78:6E:43:1C:B7:63:DA:8D:16:71:DB:98:43:7F:64:29:CD
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584B64CE430A0AF716662C1B28C3
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3701ce5f-85d4-3d58-b502-48606325b1ba.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     30036
IP address blocks:        2604:2e8a:5800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:43:0a:0a:f7:16:66:2c:1b:28:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=e8ca5b28-2e63-41fa-8cbb-3a4effb23746
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:74:29:d5:76:df:fd:c7:c3:fe:81:0f:45:63:
                    e3:0a:b9:25:e8:39:79:e6:b7:d1:ff:ab:49:a7:d1:
                    de:f1:f0:37:8c:27:ec:d6:84:e2:40:d9:db:ae:3b:
                    b6:8f:9f:62:5d:73:80:34:82:c2:81:c8:4a:55:7f:
                    66:33:ab:f0:80:5d:90:d8:c8:25:e6:6c:e9:53:7d:
                    5d:d3:89:ce:16:73:6b:93:a1:37:52:8f:7f:53:b6:
                    bd:23:e4:62:b0:87:32:88:2d:35:db:6c:af:d9:e4:
                    98:df:91:55:5d:07:2b:47:9e:6c:29:02:e5:22:93:
                    3a:68:f0:e9:50:b8:7c:51:fb:e5:3e:dd:6e:12:8c:
                    43:4e:42:31:ad:94:10:79:e3:f0:76:41:49:b6:14:
                    7a:f1:06:ce:f2:9c:b2:00:2f:ae:a6:fc:1b:a3:f5:
                    3c:1a:70:a2:05:d1:3e:a1:2d:ba:22:63:58:95:1f:
                    da:77:c2:95:83:e6:9b:6e:db:99:8a:64:32:d6:8b:
                    46:4f:0d:8b:c5:77:cc:c5:4e:12:bb:61:a1:9f:88:
                    cb:da:20:05:5b:88:62:02:30:3f:d2:ac:16:76:92:
                    7d:40:6e:ed:30:e0:50:ce:ef:4d:85:d4:90:a4:3d:
                    30:fb:ad:f1:ff:37:d5:74:a7:de:5c:52:ba:82:d3:
                    63:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:3F:1B:78:6E:43:1C:B7:63:DA:8D:16:71:DB:98:43:7F:64:29:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3701ce5f-85d4-3d58-b502-48606325b1ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8a:5800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:e8:c4:24:f7:e1:43:2b:6b:a5:6e:66:d7:de:9f:4f:d7:73:
         26:19:b6:20:5d:f2:4e:64:bb:48:65:96:2f:9c:55:6a:63:27:
         6b:4c:1d:39:4e:e8:30:8a:53:c1:66:c9:2e:3b:5b:31:0a:33:
         30:cf:37:ac:9c:44:60:83:ee:b8:5e:0a:26:2a:c3:94:f7:3f:
         d1:89:5d:ec:a4:ea:7e:a8:98:52:06:75:3c:41:f0:6d:58:36:
         24:a3:78:2f:c8:5c:2d:c5:b1:f9:fa:bf:ed:f7:81:10:73:c1:
         f5:a3:c6:4a:23:fb:66:86:be:88:98:e9:03:69:8a:e1:34:45:
         ae:e9:36:6b:cc:c3:58:b1:1c:2a:cf:cb:d6:e2:ea:d8:3e:02:
         4d:3e:53:2f:6a:43:97:ac:3d:86:26:9c:46:55:f8:8c:db:d0:
         11:93:0c:8d:9d:f2:ad:03:ad:af:86:71:5e:b9:cb:a0:26:43:
         e6:77:da:7d:f8:f3:f1:38:0e:96:0b:19:7b:7e:16:ad:57:71:
         da:bf:b7:ea:40:57:4b:91:15:5e:a8:3a:22:bf:33:9c:62:14:
         3c:b5:81:85:3c:ad:94:6e:ed:f5:a0:a4:38:06:d6:04:5f:b8:
         3d:77:6b:68:e4:cd:04:c3:66:02:8d:54:93:86:9d:09:6f:36:
         ef:35:56:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 07:16:24 2025 by rpki-client