Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/e7f89a32-54c8-3f68-ba91-13ce4c06051b.roa
File:                     e7f89a32-54c8-3f68-ba91-13ce4c06051b.roa (raw, json)
Hash identifier:          MN0XPf+txYfRYsQPJOx0EwRVzgqEFLgQxh94Hcwj88k=
Subject key identifier:   7C:9F:A3:2C:EE:9F:2C:DD:22:30:19:2D:FB:71:1E:6B:9E:6E:40:79
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584B6A6205316B2EAA860E91A050
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/e7f89a32-54c8-3f68-ba91-13ce4c06051b.roa
Signing time:             Sun 05 Oct 2025 01:00:32 +0000
ROA not before:           Sun 05 Oct 2025 01:00:32 +0000
ROA not after:            Sat 03 Jan 2026 02:00:32 +0000
asID:                     30036
IP address blocks:        2604:2e87:6800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6a:62:05:31:6b:2e:aa:86:0e:91:a0:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Oct  5 01:00:32 2025 GMT
            Not After : Jan  3 02:00:32 2026 GMT
        Subject: CN=f78e0fef-f3e1-4186-9175-d3095ee31e71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:b9:93:67:1a:35:98:d8:67:c5:c7:53:9f:da:
                    23:80:87:d5:f3:6b:67:ad:d9:61:55:3d:ca:c0:b9:
                    9f:26:f4:41:f3:e2:b4:20:b3:c7:cd:d6:f5:f0:96:
                    73:5d:27:b6:bd:b7:e1:54:7e:7b:61:14:52:a8:4a:
                    2e:68:ff:12:48:33:fe:c7:c6:3c:d5:36:24:af:cd:
                    38:e2:62:5b:65:4d:40:0c:f2:09:66:f0:4b:23:43:
                    19:e6:cd:ad:36:96:3f:48:98:60:05:fb:ec:ab:dc:
                    f7:72:4d:88:d7:80:c3:c9:22:05:51:50:4d:4d:22:
                    32:4e:77:24:a0:21:13:b3:ba:32:41:b2:f4:dd:63:
                    a2:93:4e:67:d8:1f:be:f7:69:3f:79:bb:19:46:b5:
                    f9:48:79:3a:b5:cb:13:b0:10:16:69:d3:12:9a:06:
                    db:38:3c:e9:a0:c1:f0:34:cb:a7:39:02:18:d7:50:
                    cf:a5:c4:f3:73:9c:64:ba:9b:0e:e9:9a:2e:ec:f8:
                    60:79:18:d2:2d:81:93:55:5a:6f:74:82:64:e9:e4:
                    bc:04:14:f1:d0:cc:0a:1a:4d:4b:bc:4f:ab:f2:06:
                    7a:8a:38:0c:b0:41:8f:2c:d2:a3:4e:28:29:ea:6e:
                    a5:a3:22:55:f1:52:c8:42:d1:be:04:55:ce:b0:82:
                    77:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:9F:A3:2C:EE:9F:2C:DD:22:30:19:2D:FB:71:1E:6B:9E:6E:40:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/e7f89a32-54c8-3f68-ba91-13ce4c06051b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e87:6800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:ad:7a:11:eb:9f:2d:c3:2b:1f:a4:23:86:6c:f5:46:65:b3:
         33:d6:df:57:b0:da:da:37:d8:36:16:ba:38:38:1e:69:50:08:
         b7:10:17:78:68:78:0e:07:48:7e:f8:ee:b3:2d:03:c2:e8:0f:
         63:92:09:0a:7e:60:17:3d:df:92:ae:08:dd:82:fd:cf:f2:18:
         f0:0f:ef:05:e5:f4:63:cd:27:0e:ef:b8:0a:c3:42:b0:70:d5:
         a5:f9:13:c6:4b:5d:61:f1:ad:23:f4:84:e1:16:ce:b2:1d:88:
         32:39:7b:fb:d9:32:10:08:75:4c:07:f7:c3:ac:55:5c:c9:c6:
         98:76:71:b8:4d:aa:da:58:99:38:be:9b:c5:fd:03:4f:fa:09:
         ae:d5:9f:f5:b2:96:42:f9:09:18:a6:4e:7b:6e:60:ca:c7:4e:
         b2:13:21:86:59:5d:9d:e5:26:3f:ad:7e:aa:56:4a:ab:5e:9c:
         69:bd:f4:06:4c:6b:ac:5c:45:ff:39:73:0d:55:8b:fa:f2:4a:
         36:8f:bb:4e:2e:2b:cf:d3:42:46:ee:59:45:ed:34:20:22:8e:
         bd:92:c3:ed:f6:82:93:a6:46:6d:8c:99:90:4d:a5:d9:dd:e6:
         a3:d8:27:0c:f9:14:bf:31:28:6c:b9:78:64:a8:e0:82:1e:9e:
         81:d8:6e:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 07:16:37 2025 by rpki-client