Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cbb1fa14-5f45-3d88-bee9-8bc3a3bb1a25.roa
File:                     cbb1fa14-5f45-3d88-bee9-8bc3a3bb1a25.roa (raw, json)
Hash identifier:          q+V0GJG53AnTsBcviDA9+ym0pa3hRgF6FveW7Z2JIzk=
Subject key identifier:   EB:F4:FC:B8:1C:D7:A4:B1:D9:54:6F:5C:CC:B5:47:B2:C4:4D:F0:8C
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584B64CC7DF0B35325C12D103300
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cbb1fa14-5f45-3d88-bee9-8bc3a3bb1a25.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     30036
IP address blocks:        2604:2e8a:c00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cc:7d:f0:b3:53:25:c1:2d:10:33:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=bfe18cf6-7fb9-4937-8e8f-795b51f7dab1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d0:79:5d:50:46:a4:0b:9a:06:7b:8e:31:0b:
                    50:f9:22:90:e6:19:b2:d8:40:fe:e8:39:51:17:fb:
                    b3:2c:74:9e:e6:82:03:84:89:ff:89:0f:09:6e:8c:
                    d8:8b:7c:6e:2f:93:7f:42:48:4a:36:d0:50:fb:07:
                    ed:a1:c3:33:e3:29:e6:fb:83:54:e6:b3:b9:d4:bc:
                    73:12:b5:89:82:e3:3f:55:8d:b0:77:f5:96:8b:84:
                    86:96:de:2a:34:ec:c9:5d:19:e7:ba:39:93:d1:5c:
                    24:9f:19:35:85:c8:e3:25:97:64:90:56:07:74:d4:
                    fe:85:98:fa:43:a6:83:c4:5a:1d:fd:4f:b6:75:b3:
                    6d:ab:7c:68:05:12:31:db:bd:a7:c7:8e:1a:09:e2:
                    8e:6c:31:d5:e2:65:16:3b:94:fb:35:6f:97:03:70:
                    30:97:9f:3b:7f:28:19:48:4c:da:ce:9d:ff:a5:24:
                    16:fb:84:30:73:39:f7:e4:71:e9:88:18:f4:fd:ed:
                    93:ee:2f:eb:22:e2:f0:ab:68:da:3c:36:68:f8:41:
                    7f:90:6f:0b:3a:0b:f3:5d:6a:32:3b:ca:76:15:cf:
                    f5:47:18:a4:25:92:34:e1:a7:c0:b2:2e:12:8e:a6:
                    d6:d9:d6:7d:d3:88:a8:6b:5c:67:3f:88:77:6d:09:
                    97:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:F4:FC:B8:1C:D7:A4:B1:D9:54:6F:5C:CC:B5:47:B2:C4:4D:F0:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cbb1fa14-5f45-3d88-bee9-8bc3a3bb1a25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8a:c00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:a1:96:70:9e:3b:20:5e:91:39:ea:d0:93:2a:28:21:2b:4d:
         e9:68:67:54:af:63:d0:6d:ff:6e:25:e4:c4:9b:22:e5:eb:da:
         47:fc:0b:e9:02:52:0f:2c:29:5b:01:3b:35:07:1e:3b:97:e6:
         8f:9e:dc:c1:91:a6:af:e6:7c:7d:1d:16:59:41:4d:f5:78:75:
         1b:e0:6b:bc:eb:1e:79:4f:de:7d:da:e7:ee:e0:d3:fc:24:5f:
         77:cf:f3:81:ba:70:e0:1d:c8:cd:db:1a:ea:84:98:d5:84:24:
         d8:65:31:68:40:07:87:a4:7c:ee:47:ec:22:e2:57:04:ad:d4:
         0c:9f:ba:05:a3:78:e5:ab:3e:cb:a4:64:49:19:60:6e:0e:72:
         83:43:c2:2e:7f:f1:23:96:3e:ec:1d:cd:f7:ad:26:55:46:82:
         0f:1f:08:f6:f9:94:1c:60:1a:74:de:b8:4b:72:75:62:b0:ca:
         b9:a5:61:e7:1e:04:d3:7b:e9:fc:99:59:8d:f6:8a:d1:54:fa:
         4f:e8:9c:90:a6:45:ed:bc:fe:a1:4f:91:68:43:92:df:1e:f3:
         cf:58:93:82:87:90:dc:2d:d3:b2:2f:75:3c:fc:07:26:52:9e:
         14:c7:f5:37:56:46:84:16:24:c0:67:89:56:81:11:ae:d1:64:
         99:93:b1:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 07:22:57 2025 by rpki-client