Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b37c9285-0b7b-3404-b47c-61153de8103f.roa
File:                     b37c9285-0b7b-3404-b47c-61153de8103f.roa (raw, json)
Hash identifier:          Gw1mFc54H2+w0iaLJbkrGlmPpxk1Pap2nss0/f0rMyE=
Subject key identifier:   9C:48:00:70:2A:84:41:F3:14:3C:6A:71:45:5A:91:4C:51:0F:83:1B
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584B62023A99A00AFCF0E1DC4F80
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b37c9285-0b7b-3404-b47c-61153de8103f.roa
Signing time:             Thu 02 Oct 2025 01:00:31 +0000
ROA not before:           Thu 02 Oct 2025 01:00:31 +0000
ROA not after:            Wed 31 Dec 2025 02:00:31 +0000
asID:                     30036
IP address blocks:        2604:2e8a:6c00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:62:02:3a:99:a0:0a:fc:f0:e1:dc:4f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Oct  2 01:00:31 2025 GMT
            Not After : Dec 31 02:00:31 2025 GMT
        Subject: CN=40605f3e-e2c2-441a-b23f-020ebc0be71a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ec:15:96:28:d3:61:de:c4:9a:32:1e:29:35:
                    a9:7b:cb:3b:7c:dc:de:79:08:de:61:8a:ef:c9:5b:
                    4c:b4:46:94:e3:7d:8d:ad:bd:0a:87:1a:fe:b2:67:
                    04:0f:2f:9e:19:ec:4b:a8:1e:6c:6f:ea:5f:61:06:
                    ee:a2:d1:34:8c:e2:b4:a9:bd:a4:28:03:d2:15:ae:
                    c6:f3:ce:b6:37:9f:f9:35:cb:93:76:06:c3:53:7f:
                    6b:20:3c:d0:56:2d:8e:16:9d:37:71:71:d9:4a:67:
                    13:97:d5:cb:03:7a:69:52:66:c6:9b:a0:e7:8d:7e:
                    70:9a:b3:d7:fa:b8:08:01:02:77:a5:4c:97:bf:36:
                    a2:ea:75:33:29:6d:0a:c8:af:8d:a6:d6:13:24:86:
                    0b:a2:78:d0:c3:04:2e:a4:39:cb:77:b7:35:63:b3:
                    31:44:e3:f2:f1:0b:84:d1:f2:1c:a1:43:c6:4c:0e:
                    78:40:33:5b:6d:ea:98:52:65:b7:e4:8e:e4:d0:cb:
                    e0:b2:23:3a:8d:01:66:1a:ad:45:a5:6a:27:e2:76:
                    b5:97:81:e9:df:74:be:b1:20:82:03:82:bc:85:e2:
                    da:4b:99:d2:c9:5c:62:79:b4:3f:39:af:54:e1:d8:
                    84:55:4a:74:93:fc:76:f1:a5:25:ba:4a:83:29:50:
                    c7:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:48:00:70:2A:84:41:F3:14:3C:6A:71:45:5A:91:4C:51:0F:83:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b37c9285-0b7b-3404-b47c-61153de8103f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8a:6c00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:3e:c6:83:47:a3:3c:a5:f3:99:9f:c3:e7:b7:23:a7:06:bb:
         0d:46:ac:24:fc:1c:ba:79:e0:a2:be:ec:52:a4:2e:6a:5b:d2:
         b8:9d:53:79:c2:1c:03:9a:62:79:80:df:fd:5c:30:81:ff:8b:
         59:cb:ee:79:df:df:df:16:4e:26:cb:8e:4f:49:4b:d8:84:0a:
         ed:84:26:e1:07:e7:41:1f:a8:24:b9:af:35:69:e1:8f:2f:99:
         e7:20:9f:c8:8e:46:52:a6:15:a9:14:0e:c9:5e:0f:fc:d9:d3:
         0b:a3:55:5a:ba:d7:4e:81:44:fb:20:bc:b0:86:69:c8:5e:8b:
         86:f0:8a:35:a2:e2:15:5e:af:c4:54:9a:03:2b:b7:11:09:5e:
         1e:78:55:eb:61:7e:4c:41:17:7e:03:21:0f:4b:7f:0d:97:56:
         0f:74:38:bb:dd:a4:a7:28:08:c1:c1:6d:3d:5b:6f:31:46:28:
         9e:1e:c9:2d:73:40:fe:ac:3a:db:38:4e:0a:cb:4e:ae:8e:6e:
         c1:4e:8f:66:fc:97:ab:a5:3d:f1:58:f6:99:bf:3c:56:b5:0a:
         35:4b:8f:a5:6b:13:2f:78:c5:38:94:27:f1:9c:f1:9d:5d:b0:
         e9:42:5d:65:d4:01:6f:86:ec:a0:2f:b3:d2:84:9b:85:00:84:
         22:3f:f9:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 07:16:26 2025 by rpki-client