Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/55231139-bc3f-38a6-b5f6-e8a09ae0ce5e.roa
File:                     55231139-bc3f-38a6-b5f6-e8a09ae0ce5e.roa (raw, json)
Hash identifier:          CE+wMAWPtC2U3nvlKhisWhDLTt0CO4L8T5xNmkXs7RE=
Subject key identifier:   6E:37:CF:CD:83:A0:B8:57:D4:D1:2E:A6:A2:A1:06:D0:F3:FF:AD:40
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584B2CF6E2F19280950B8DCA945C
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/55231139-bc3f-38a6-b5f6-e8a09ae0ce5e.roa
Signing time:             Sat 13 Sep 2025 01:00:33 +0000
ROA not before:           Sat 13 Sep 2025 01:00:33 +0000
ROA not after:            Fri 12 Dec 2025 02:00:33 +0000
asID:                     30036
IP address blocks:        2604:2e8d:f000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2c:f6:e2:f1:92:80:95:0b:8d:ca:94:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Sep 13 01:00:33 2025 GMT
            Not After : Dec 12 02:00:33 2025 GMT
        Subject: CN=00577dd5-a76a-460b-8dc8-004b308e0be1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:fd:f6:f5:d1:f1:bd:c1:49:cc:22:e2:24:f4:
                    69:a9:56:99:10:ed:97:f1:db:d1:92:42:9a:70:13:
                    28:3a:74:f7:75:f4:8f:f2:5a:92:92:b3:8e:09:b3:
                    40:bd:d5:a6:2c:19:be:48:44:c0:78:e9:89:d2:e9:
                    70:dd:de:25:ad:d5:e4:cc:9c:df:74:92:cd:ba:23:
                    3c:f0:98:08:8a:0a:f1:e2:bb:c5:43:e8:7a:cc:3b:
                    6a:5e:8d:c3:51:5c:e7:1c:df:1d:b6:dc:e3:3c:f7:
                    5d:ea:75:d7:e1:50:86:0a:77:c0:f4:0a:59:73:52:
                    34:5b:dc:69:81:94:95:c3:0e:6d:e1:94:35:9d:ce:
                    9b:d5:5f:48:d7:ad:51:cc:6b:cb:3c:3d:b7:f1:0b:
                    52:fb:90:ab:99:9d:5a:83:92:7d:b0:a4:e2:37:37:
                    4c:d9:99:66:33:87:72:6f:68:e4:d6:91:00:c1:f7:
                    af:8d:c0:50:25:78:02:6a:6a:47:de:47:ad:f8:88:
                    90:18:12:df:51:6a:ba:13:17:76:72:3e:c6:9c:e7:
                    7c:cf:9d:f5:fd:79:1b:cb:f7:2b:02:24:f3:bb:53:
                    c3:c4:fd:e5:27:41:65:f2:6b:0f:58:39:ea:41:e9:
                    9d:20:b6:7b:df:6e:c9:08:56:ac:c4:ac:5f:18:48:
                    de:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:37:CF:CD:83:A0:B8:57:D4:D1:2E:A6:A2:A1:06:D0:F3:FF:AD:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/55231139-bc3f-38a6-b5f6-e8a09ae0ce5e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8d:f000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:a5:22:56:14:ff:43:43:50:67:e5:6e:69:e6:ee:57:35:7b:
         3b:4b:c2:c5:f3:28:ac:1a:f3:3b:fe:c9:9d:9c:ec:f5:16:11:
         18:58:8f:ec:4b:3a:15:62:c4:ca:9b:dd:dd:4f:7c:cb:7b:ab:
         ea:bd:f5:e3:34:bd:ab:20:42:ce:37:59:4c:88:52:c0:ec:99:
         09:28:9b:95:4c:a5:69:22:cc:68:ad:c6:52:d1:8e:70:40:68:
         1a:04:54:bf:d7:35:c6:03:e1:45:39:ab:bb:e7:c9:5f:fe:d6:
         85:ef:a8:8e:a5:ae:ce:32:71:f9:15:33:88:8e:e9:93:45:13:
         4c:d1:d9:e4:35:ea:61:d3:28:84:b9:4e:09:ea:87:1f:c2:2d:
         94:1f:4b:57:9c:44:9f:36:b5:3c:55:70:dc:6f:78:c5:ef:43:
         29:72:78:30:1e:27:c3:a0:1d:db:52:f6:f7:90:35:e8:be:33:
         ce:d3:c3:da:d7:d3:9e:7e:4f:1a:91:6f:7a:da:6c:de:d1:6d:
         d4:33:5f:d9:31:03:d8:9b:bd:44:ac:63:fd:4f:0c:5a:26:bd:
         de:4d:4e:b0:a2:c5:3d:63:b2:d6:3a:28:6a:cd:b3:e0:bb:f9:
         b7:6a:7e:ae:43:1c:8d:01:72:c7:d8:f4:38:63:4b:1b:c0:07:
         60:b4:34:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 07:20:20 2025 by rpki-client