Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ec89997a-3ac7-3b00-9699-5bf074cf743e.roa
File:                     ec89997a-3ac7-3b00-9699-5bf074cf743e.roa (raw, json)
Hash identifier:          +lGpS0OSg/wtnpBFP315cFHQmPqyyUJK+bjMo0Jl4Mw=
Subject key identifier:   7B:31:8F:6C:B4:4F:3D:30:8C:64:6D:D5:3D:16:E6:26:FA:B4:2B:82
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584B64CC8EA807EB8B088EAC7580
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ec89997a-3ac7-3b00-9699-5bf074cf743e.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     30036
IP address blocks:        2604:2e89:b000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cc:8e:a8:07:eb:8b:08:8e:ac:75:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=9e424fcf-f1e5-4c51-bf4b-06694debdf7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b6:dc:9b:9e:4e:41:f1:78:4b:37:f1:4b:5e:
                    91:e6:86:19:34:06:81:b3:0c:20:c3:ae:b1:ca:2c:
                    7a:c0:90:11:7e:98:e0:c0:ab:f4:27:0d:dd:c4:ae:
                    6b:29:4e:4f:db:57:45:59:09:5f:bd:a7:3b:54:3d:
                    76:3e:aa:2f:df:f0:49:a0:50:81:5c:11:1a:e1:1f:
                    18:93:9e:65:1d:d2:65:44:7a:d1:b2:5f:c1:4e:ef:
                    41:1d:e5:33:16:3a:d9:6a:44:36:a3:3c:4e:84:06:
                    79:6c:8f:33:e6:74:6f:43:c6:c5:7f:cf:ce:47:20:
                    d0:b5:db:ac:9f:f9:12:e3:cf:ea:69:3e:8d:6b:aa:
                    ff:81:cc:19:58:b5:3c:48:fc:95:a8:5c:3d:57:56:
                    af:01:31:ce:f7:25:2a:b2:d1:da:f9:77:da:b1:e1:
                    a6:2d:c7:8f:be:47:1c:23:e1:6e:ae:51:2a:89:ce:
                    7f:be:6d:69:66:4c:ba:bf:92:b5:47:e5:cc:54:ef:
                    24:51:1e:b2:e6:c4:1d:0e:33:9e:f9:d1:d0:df:78:
                    bd:24:60:b3:75:4b:17:18:8b:43:b3:82:47:bd:d4:
                    ed:aa:a2:fe:74:1b:6f:9e:3d:2e:c5:5f:81:a4:2d:
                    ca:5d:c2:e8:03:68:3e:1f:a2:24:ab:91:2e:f9:a9:
                    e9:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:31:8F:6C:B4:4F:3D:30:8C:64:6D:D5:3D:16:E6:26:FA:B4:2B:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ec89997a-3ac7-3b00-9699-5bf074cf743e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e89:b000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:89:40:59:fb:24:52:84:4a:01:de:50:d5:a0:a6:c0:da:81:
         3b:3a:31:8a:5f:9c:fd:ae:5a:b5:a4:2d:b9:cd:94:64:fc:f3:
         df:00:b0:5b:fd:30:6a:ba:e1:ba:cd:93:45:e1:d5:df:3c:a7:
         19:41:f3:bc:69:fd:f2:2f:6e:b5:83:02:6e:8c:d5:8a:7f:21:
         c3:c5:08:3e:fd:e7:4d:c7:c8:67:77:d3:d5:b0:ea:08:9a:0c:
         5b:60:ec:8b:42:4d:86:ec:12:14:1d:bf:cc:5d:6d:14:ad:96:
         07:10:db:7c:bb:f5:a7:f1:72:eb:81:9c:ec:ae:1b:19:7e:66:
         6b:f0:0b:71:85:0b:96:d6:b1:73:cf:87:ff:83:03:5a:e6:99:
         5d:45:3f:36:55:bd:c9:4c:b0:83:09:ea:f7:33:67:84:e9:7a:
         d3:31:94:09:29:c6:0d:29:6c:ae:06:92:15:92:73:cc:67:25:
         cc:45:2e:f8:88:91:c3:dd:dc:c6:f7:d8:bc:c7:b8:9f:5e:f7:
         19:35:e7:c6:63:87:aa:71:1c:3d:30:51:ae:e1:a8:cb:78:7c:
         f2:1e:a4:50:76:5b:a6:6d:34:30:e8:27:f3:0a:d1:3a:b0:4e:
         c8:33:bf:a9:fd:26:32:1f:07:2e:93:bf:2c:e8:e2:62:f0:22:
         54:60:98:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 07:14:29 2025 by rpki-client