Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/eb61dd8f-f009-3017-85d7-773e004c66af.roa
File:                     eb61dd8f-f009-3017-85d7-773e004c66af.roa (raw, json)
Hash identifier:          NUF9YAmembRMkmT6Bkshrg9vWy7QDv+vPhJ73GHnzw0=
Subject key identifier:   75:71:DA:0D:5D:CC:E4:C9:32:DB:AA:35:12:09:F4:99:51:90:FE:44
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584B6201FDF603424F02AAAE2900
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/eb61dd8f-f009-3017-85d7-773e004c66af.roa
Signing time:             Thu 02 Oct 2025 01:00:31 +0000
ROA not before:           Thu 02 Oct 2025 01:00:31 +0000
ROA not after:            Wed 31 Dec 2025 02:00:31 +0000
asID:                     30036
IP address blocks:        2604:2e8b:4000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:62:01:fd:f6:03:42:4f:02:aa:ae:29:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Oct  2 01:00:31 2025 GMT
            Not After : Dec 31 02:00:31 2025 GMT
        Subject: CN=f349f8ce-83f0-498c-8a45-253f30150c2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:2f:0c:07:22:6f:67:0b:82:89:cb:c7:8c:e6:
                    1e:8f:ba:a0:22:fd:e7:09:9b:c5:af:fd:8f:bf:78:
                    51:25:db:c9:1a:d2:ac:d6:10:64:58:94:e5:0d:47:
                    c0:f1:74:3b:4d:47:80:77:42:97:d9:47:9f:81:3a:
                    48:51:d2:ce:71:36:e3:e3:09:a8:43:94:12:4a:ca:
                    df:c6:c4:b6:63:1f:87:b8:dc:6f:50:ce:64:45:25:
                    f7:d8:cd:0e:b1:1c:3f:c3:d5:fd:35:4e:42:19:59:
                    b7:41:a5:30:d8:57:30:c9:83:b3:78:80:f0:1a:53:
                    df:98:62:d6:42:62:14:af:87:64:01:a3:f3:8a:bb:
                    92:b9:31:17:ec:36:ba:37:2c:ee:df:73:62:3f:89:
                    96:a5:f9:06:62:9d:8a:a1:db:db:2d:f6:d9:03:c1:
                    74:df:04:1a:19:3e:19:31:09:a7:46:7b:02:1d:1e:
                    9b:93:b5:a6:96:e4:4d:6f:b7:da:8d:a6:1c:91:eb:
                    97:50:f4:2e:fe:ad:02:ba:bb:66:c8:8e:08:bd:e3:
                    0e:51:d9:11:40:f3:08:db:f0:77:98:e3:66:56:a7:
                    20:66:ac:d0:03:cf:cf:72:93:09:67:39:de:5d:42:
                    bd:aa:a8:e7:e0:f0:6e:fd:56:92:f4:aa:46:c5:d0:
                    c7:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:71:DA:0D:5D:CC:E4:C9:32:DB:AA:35:12:09:F4:99:51:90:FE:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/eb61dd8f-f009-3017-85d7-773e004c66af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8b:4000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:93:ce:83:3d:83:6b:c8:42:cc:b5:5a:63:51:1e:c2:e6:46:
         d0:32:9c:2b:b6:71:1e:80:32:f0:59:b7:e9:99:eb:45:a0:46:
         34:3c:37:cc:09:5c:ac:d4:5b:dc:a3:34:66:c7:9d:66:1b:9f:
         fe:20:42:72:fc:d2:7b:e2:49:4b:de:63:e7:26:12:d0:9e:84:
         5d:2b:48:df:56:58:f9:2a:eb:07:87:cf:c6:8e:e1:88:6a:47:
         a3:77:97:fe:f5:a7:d2:35:8b:87:05:b9:f0:91:d8:e9:98:00:
         1b:e5:a9:c0:92:15:86:a9:c7:65:16:43:83:5a:f4:50:23:51:
         7a:57:ec:90:f6:3b:09:04:ce:65:80:b9:57:4f:72:39:04:e6:
         28:4b:c2:cb:43:30:24:66:c7:6b:87:90:96:53:14:ee:47:17:
         ca:61:93:37:6a:df:0c:7a:8c:f5:c4:62:98:05:15:b6:76:93:
         9a:3b:dd:75:9e:54:e7:4d:0f:f7:80:32:42:60:00:cb:a8:74:
         24:be:55:4d:75:55:91:58:3c:7a:91:b3:90:75:87:fd:2e:e2:
         7e:0c:65:7e:7a:70:b7:80:ba:32:b1:8e:11:72:5c:7d:e1:2f:
         da:92:5d:bf:b1:77:b1:f4:d0:9e:86:66:93:c7:cb:fd:50:02:
         da:7c:5f:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 07:16:27 2025 by rpki-client