Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/e0c395d7-a6d1-39dd-8bf2-b618b0462e61.roa
File:                     e0c395d7-a6d1-39dd-8bf2-b618b0462e61.roa (raw, json)
Hash identifier:          N0TkZuFFNS0NhtLH16OU+ExuIsRMI5WfRUIJVSNDQ8w=
Subject key identifier:   D2:66:8C:3E:D0:64:9C:C7:92:11:D7:4D:C8:82:93:64:1B:23:2F:F9
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584B6797F478BE266493B348D940
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/e0c395d7-a6d1-39dd-8bf2-b618b0462e61.roa
Signing time:             Sat 04 Oct 2025 01:00:33 +0000
ROA not before:           Sat 04 Oct 2025 01:00:33 +0000
ROA not after:            Fri 02 Jan 2026 02:00:33 +0000
asID:                     30036
IP address blocks:        2604:2e8e:c000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:67:97:f4:78:be:26:64:93:b3:48:d9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Oct  4 01:00:33 2025 GMT
            Not After : Jan  2 02:00:33 2026 GMT
        Subject: CN=a7112624-c11f-4659-9fe3-2498784fe4d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:a4:b5:92:80:55:1e:86:64:94:0c:c3:6c:5f:
                    8f:41:18:5d:84:c0:74:ef:d9:39:e5:35:d7:ee:cb:
                    bb:7c:e7:96:f1:21:6e:95:fa:13:df:5a:39:3c:3b:
                    e9:86:f9:5c:23:40:f6:cb:03:0e:ad:a6:a3:ef:1d:
                    96:2b:7a:db:39:1c:0f:2f:61:34:c5:d3:11:1a:80:
                    03:e1:3e:d6:ec:58:f6:99:f8:4d:39:30:40:ed:e2:
                    5c:0d:1e:78:86:3a:89:4a:78:ce:a1:61:fc:7b:6c:
                    ae:88:1d:bb:d9:9f:6c:fc:6f:4b:d2:99:42:8b:9b:
                    09:bd:f8:ea:eb:88:71:4c:97:78:3f:a6:84:c4:e7:
                    fe:5a:b6:24:6b:21:33:2a:52:bc:89:f3:59:eb:24:
                    8c:d5:dc:79:15:72:9e:a9:23:5e:11:0a:2e:88:8e:
                    ca:b9:90:d9:c1:6a:6b:7a:65:2a:db:b5:3a:1c:ae:
                    0f:aa:19:64:56:eb:ad:1c:ed:ab:1e:6e:9f:93:9e:
                    c7:f8:9e:9a:e8:6b:0d:a4:17:ad:07:95:7a:ea:4b:
                    85:ae:42:3b:e3:79:24:75:13:57:f6:d9:22:f2:cb:
                    59:49:24:46:67:21:51:0a:fa:25:26:fd:8a:0a:ed:
                    47:0d:8f:1a:9a:0b:55:3f:a8:98:4e:4f:2a:03:18:
                    d6:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:66:8C:3E:D0:64:9C:C7:92:11:D7:4D:C8:82:93:64:1B:23:2F:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/e0c395d7-a6d1-39dd-8bf2-b618b0462e61.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8e:c000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:6f:6c:fa:d5:3a:bd:4b:21:9d:c0:a9:f2:0c:1d:18:9a:18:
         03:82:8c:f6:53:08:5e:ac:ca:71:bf:eb:c8:a6:43:37:ca:ca:
         2c:73:37:c6:f4:16:e2:4a:35:eb:d9:a5:80:73:79:dd:4d:65:
         76:54:83:7c:51:b5:de:15:20:51:af:04:b4:2d:ed:56:04:03:
         9f:90:81:e2:4e:ed:0a:d2:95:3d:fb:a3:7d:ce:15:95:e9:a6:
         4e:16:49:a6:4b:0e:a1:9b:f1:c2:3e:47:12:22:cf:c2:02:80:
         e5:1f:33:58:b6:47:97:8f:56:83:17:63:81:86:cc:14:45:34:
         32:42:21:6c:de:00:67:04:1a:9b:42:17:a6:ba:56:ee:5d:64:
         52:8f:c3:98:78:c1:77:d0:4e:18:6e:53:cf:b7:3e:f0:47:f1:
         d4:cb:b2:1b:d2:5d:f0:51:e7:71:2d:78:71:81:a2:bf:a1:14:
         e2:d0:29:6a:44:de:4f:19:e2:08:01:1a:8b:86:5d:9c:09:4a:
         0e:dc:27:40:23:69:de:22:78:78:be:9e:f8:67:9e:9e:bf:27:
         d7:f7:46:e9:b4:79:5b:00:d8:f1:0f:57:ee:6c:75:8f:b2:d1:
         31:c5:69:3e:ba:0c:c3:9b:43:7a:7b:e5:e7:8d:0d:ea:4e:d5:
         d3:4a:f4:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 07:15:34 2025 by rpki-client