Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cbfe86d9-6fc9-3c47-8b42-2422ad59647e.roa
File:                     cbfe86d9-6fc9-3c47-8b42-2422ad59647e.roa (raw, json)
Hash identifier:          ms1E3oov5xh3arNRoC11A4mDd9QptkiQRHxXss1ItuI=
Subject key identifier:   19:C3:B3:2E:AC:95:61:8E:DB:BB:8E:36:91:5B:D2:A8:AC:D2:67:D2
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584B56D724966AD6720B53D4D280
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cbfe86d9-6fc9-3c47-8b42-2422ad59647e.roa
Signing time:             Sun 28 Sep 2025 01:00:33 +0000
ROA not before:           Sun 28 Sep 2025 01:00:33 +0000
ROA not after:            Sat 27 Dec 2025 02:00:33 +0000
asID:                     30036
IP address blocks:        2604:2e88:2400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:56:d7:24:96:6a:d6:72:0b:53:d4:d2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Sep 28 01:00:33 2025 GMT
            Not After : Dec 27 02:00:33 2025 GMT
        Subject: CN=16916efb-060d-493b-b974-6c854b952ea7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:fd:7b:11:a4:aa:99:18:02:e3:a9:0c:30:78:
                    90:0a:4f:f0:22:93:12:e6:aa:a9:4f:66:0b:16:02:
                    32:a1:f0:4c:24:7d:56:1a:1d:55:47:66:54:37:ce:
                    9d:8a:c9:e2:30:65:6a:88:4a:ce:76:cb:14:fb:af:
                    91:3c:f2:e5:38:c0:43:6d:59:3e:a6:82:2a:37:34:
                    a6:83:f5:01:a9:f3:47:6b:66:0b:2c:31:19:f8:4a:
                    39:a6:67:ca:9b:79:6a:86:c7:7f:13:df:2d:eb:15:
                    ad:b7:a8:3b:36:90:30:7f:db:38:68:93:95:0f:b5:
                    97:ce:b5:19:79:98:c6:ba:42:c4:71:92:d1:5e:f2:
                    60:bf:68:a8:99:5c:6d:17:0c:65:ab:fa:50:f5:96:
                    e7:75:a4:c4:35:de:be:38:01:95:f2:c6:c5:f4:5f:
                    fc:d3:56:dc:60:30:cd:e2:f3:4c:45:5f:75:bb:ec:
                    cf:51:93:f4:e3:1e:d4:63:b9:6c:f5:ef:04:7e:1f:
                    3d:83:93:d2:ad:5f:f6:f9:d4:49:a4:44:f9:02:83:
                    d7:5e:a6:bc:12:35:4f:78:71:66:46:92:67:7c:03:
                    59:8a:c8:2b:0a:64:65:78:fe:4e:9f:83:62:10:65:
                    cb:9c:e3:93:06:02:d1:a0:6b:92:ee:2a:08:e2:19:
                    f1:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:C3:B3:2E:AC:95:61:8E:DB:BB:8E:36:91:5B:D2:A8:AC:D2:67:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cbfe86d9-6fc9-3c47-8b42-2422ad59647e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e88:2400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:31:12:bd:78:af:74:81:87:e8:00:98:ce:5d:57:41:03:eb:
         64:35:cf:cc:ba:55:3d:0d:1d:43:e5:d9:b2:20:b6:2d:19:bd:
         51:45:d7:0b:eb:6c:52:b4:d1:3b:da:89:46:6c:43:99:2a:bd:
         cd:79:70:75:c9:26:fa:16:ad:25:8d:1f:08:94:0c:88:d9:d6:
         a1:60:75:dd:69:d8:e9:a7:28:3a:41:9b:e7:5a:00:15:7a:2c:
         d8:4c:af:49:02:1b:bc:f7:c1:89:ca:e3:68:a1:18:7e:69:41:
         fc:f2:1b:a8:e7:e4:e0:ef:c6:26:8d:2a:20:26:3d:e4:34:19:
         20:f5:13:0e:9e:f2:a4:88:21:02:04:05:68:13:9b:e8:57:d8:
         ef:e9:56:29:c0:4c:de:98:0d:87:09:12:ac:45:21:35:e0:72:
         da:c8:23:26:d7:1d:6f:e0:41:31:c8:36:23:4f:4a:a3:d1:92:
         32:27:e3:67:f1:e7:28:b6:d7:ec:b8:42:a9:7c:bc:a1:43:32:
         aa:a4:a9:cf:20:ef:85:4b:5b:d0:0d:5e:3b:ea:4e:e0:09:0f:
         45:cf:75:70:14:9e:46:c0:98:3d:68:4c:54:47:ce:ee:88:7b:
         df:4e:39:f4:8d:8c:1c:81:d3:6d:46:6d:22:2e:e2:0d:48:49:
         4f:77:43:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 07:14:19 2025 by rpki-client