Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/82908c13-b5b2-34ed-8c05-a5ca7204a41f.roa
File:                     82908c13-b5b2-34ed-8c05-a5ca7204a41f.roa (raw, json)
Hash identifier:          pA59Qa6biHNUuryJaIJ5E7YIzyRKpJc2rief284yqYU=
Subject key identifier:   7D:94:CE:7D:21:EE:A6:F1:6E:C4:56:3B:7D:A8:82:C6:D3:10:B0:74
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584B64CCA5E59CA7152A03EF0100
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/82908c13-b5b2-34ed-8c05-a5ca7204a41f.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     30036
IP address blocks:        2604:2e8c:3400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cc:a5:e5:9c:a7:15:2a:03:ef:01:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=083232ec-db00-44c4-8c6c-b3dd3b224132
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a5:7e:de:9c:4b:83:54:d1:b9:a7:4b:83:5d:
                    c8:25:c8:fd:c0:bc:44:2e:6b:e1:23:ab:f7:e6:73:
                    dd:78:10:94:53:54:a6:6d:cd:b2:34:89:9c:f7:13:
                    bb:9c:23:95:ea:97:65:17:ff:ad:ae:b6:b3:42:3f:
                    e4:29:c3:f6:a8:43:c9:02:10:1a:96:ce:86:a5:b6:
                    a5:ac:04:cb:f6:42:9c:83:d4:33:45:4a:ba:24:b8:
                    7d:a8:22:45:d1:95:39:1b:f3:b8:52:4d:20:10:eb:
                    ec:e1:6f:13:ea:e2:3b:88:de:27:bf:7d:dc:59:c8:
                    f1:43:c7:43:53:eb:64:aa:a4:ac:d4:aa:35:19:0f:
                    1c:7e:aa:5c:9b:21:ae:1f:37:7e:61:40:c5:ee:cf:
                    a4:d1:38:87:4c:fd:5e:1f:6e:d8:3a:2b:d1:e4:ad:
                    a0:ed:d6:02:b2:51:ea:f8:82:26:82:e5:03:e9:27:
                    68:52:e4:ea:ad:86:fc:93:b3:9c:42:f3:53:4f:a7:
                    27:14:16:6f:fd:1f:f6:da:77:c2:92:ab:e3:01:13:
                    2b:2a:56:bf:f4:7c:24:1e:76:d6:38:9d:7e:c2:09:
                    6e:61:c7:40:e8:90:17:74:fa:ea:56:4a:a7:1a:01:
                    2f:82:56:6b:62:9e:c6:2e:ad:6e:38:dd:15:e2:24:
                    99:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:94:CE:7D:21:EE:A6:F1:6E:C4:56:3B:7D:A8:82:C6:D3:10:B0:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/82908c13-b5b2-34ed-8c05-a5ca7204a41f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8c:3400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:89:13:d7:c0:41:3b:5c:ac:5f:33:01:9b:75:4b:0c:53:d2:
         5b:98:b8:af:ed:4f:47:54:33:29:70:04:b6:d4:1c:6d:7b:a3:
         76:06:c7:11:32:59:c8:03:23:3c:e1:05:eb:a4:11:a9:ba:db:
         f7:43:59:06:1e:b2:b3:b9:4d:39:5c:87:66:d4:96:f2:5b:12:
         66:70:06:f9:a9:13:ed:bc:bb:85:ca:a6:e1:8e:99:fe:a7:14:
         0e:85:68:54:52:ff:c5:9c:cf:19:30:18:d2:83:74:eb:b4:f7:
         5b:06:d3:da:e8:dd:05:23:6b:33:82:05:33:a8:26:5d:4f:5c:
         07:57:43:f6:56:d0:12:92:8c:0e:4e:67:05:49:f8:66:40:84:
         13:f9:a7:6a:43:63:3f:e7:3f:49:4e:fd:8c:41:8d:5a:7e:03:
         0e:c3:06:79:9d:1f:7e:54:bd:ac:04:ea:1d:d3:7a:ec:0b:20:
         98:8b:ac:94:3b:ab:57:44:e1:29:dd:36:ca:0a:5d:c9:59:51:
         0f:a6:06:45:79:d3:31:2c:8a:07:a9:b5:b6:0f:5c:f5:0b:9c:
         6c:ad:f3:ef:27:c2:39:cc:3a:fa:9c:a1:b4:e5:3d:a6:a2:c2:
         2c:a3:89:a3:f6:ad:cf:33:18:ca:1e:38:85:08:1a:98:78:db:
         ce:5e:f0:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 07:14:26 2025 by rpki-client