Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/af93279e-c2ce-3301-939b-693d8b7926a6.roa
File:                     af93279e-c2ce-3301-939b-693d8b7926a6.roa (raw, json)
Hash identifier:          ke43wJdPZTvFVF66g6RaniPifAx7iQL75MaNVJHrTm0=
Subject key identifier:   41:89:1E:A1:76:70:9E:B9:4D:2C:D9:BE:04:04:CB:8A:3F:7B:28:F2
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584B79BCAF596360E0BB595A2C80
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/af93279e-c2ce-3301-939b-693d8b7926a6.roa
Signing time:             Fri 10 Oct 2025 13:00:37 +0000
ROA not before:           Fri 10 Oct 2025 13:00:37 +0000
ROA not after:            Thu 08 Jan 2026 14:00:37 +0000
asID:                     30036
IP address blocks:        2604:2e8c:5000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:79:bc:af:59:63:60:e0:bb:59:5a:2c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Oct 10 13:00:37 2025 GMT
            Not After : Jan  8 14:00:37 2026 GMT
        Subject: CN=193bec1e-7421-4238-8501-5154360ca61b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:0a:10:2a:f1:cf:98:57:47:ee:42:4a:50:c3:
                    37:fe:70:5f:63:51:36:22:e1:e5:62:f6:5a:30:47:
                    fb:f1:ed:18:bb:81:a1:7d:3c:a8:83:20:ef:37:4e:
                    57:ec:ba:97:d5:b6:48:cb:9c:a8:98:ae:df:4b:b1:
                    89:49:85:41:01:bc:1e:ec:5d:bf:49:a3:40:f7:5b:
                    69:aa:2a:1e:3b:18:e2:70:0a:04:dd:3f:f5:68:7e:
                    ea:8e:c8:8d:c9:b0:01:b9:ee:c5:7a:08:29:0b:90:
                    7c:47:75:5e:a9:8e:ca:50:d3:bd:f4:90:2d:9f:c5:
                    f8:5d:e1:3c:08:13:86:13:00:a0:ad:84:66:8a:96:
                    1f:6a:ba:8a:14:7d:5f:ad:fe:6b:ff:8a:09:f3:4a:
                    d4:22:32:4a:33:4d:f6:23:53:f2:30:60:33:1b:b2:
                    38:be:34:01:e0:c5:f2:db:ab:b5:8d:70:65:c0:d4:
                    e7:09:bf:b2:6b:60:f0:33:ce:38:c7:7c:58:0e:5b:
                    08:15:30:f3:95:b5:05:7c:e1:56:0f:8d:b8:31:47:
                    a9:01:6b:29:9e:e3:38:42:43:e3:f3:18:fc:0a:6f:
                    3a:f9:4b:f0:7d:f7:8a:ea:0e:f3:1f:84:aa:4b:be:
                    d3:6a:cb:d6:ca:0f:6a:a3:ae:69:62:27:08:69:0e:
                    12:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:89:1E:A1:76:70:9E:B9:4D:2C:D9:BE:04:04:CB:8A:3F:7B:28:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/af93279e-c2ce-3301-939b-693d8b7926a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8c:5000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:04:c6:a9:c0:05:9b:57:98:0f:a3:4d:7e:93:4c:12:c4:35:
         fa:b0:df:0e:bd:73:03:93:b2:d4:1b:31:51:03:78:87:04:ed:
         99:5c:32:72:cc:c6:b7:0f:55:e1:94:89:09:f4:41:27:89:e5:
         30:61:5d:e6:96:9b:50:e8:87:7c:2a:04:46:1c:8c:45:53:dd:
         cd:6b:c9:3c:bf:d8:5e:71:cb:3f:c6:61:43:aa:fc:e4:b2:84:
         de:f2:f8:b1:a7:88:0e:b6:1a:85:12:8b:21:7d:f7:4a:12:41:
         01:4b:26:db:d3:2a:a3:99:02:a9:9b:41:4e:f8:b4:7f:a3:45:
         d1:1e:9c:ae:2e:f2:31:8e:e1:80:fe:d1:0f:29:8c:0c:11:dd:
         8c:26:2e:44:72:f4:f6:65:a4:8a:6b:66:cc:3d:f8:c0:e2:0a:
         fe:7f:e8:c7:2c:c5:bb:80:68:47:57:4e:3b:0c:3e:43:e8:40:
         63:c4:46:64:54:54:13:da:64:5f:4d:d2:ff:38:da:96:d5:56:
         80:4d:86:53:ee:e2:e7:20:27:83:82:86:78:e8:c6:77:79:cb:
         f1:7d:d2:2f:8a:ef:47:df:a9:e6:28:7f:13:81:48:85:91:02:
         7b:93:c5:5c:c3:0a:4c:e5:d8:c1:ce:61:19:f4:4b:fa:f4:0a:
         24:f3:51:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 07:15:32 2025 by rpki-client