Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/fca43530-5049-3e32-a93f-9ae5f61e8b35.roa
File:                     fca43530-5049-3e32-a93f-9ae5f61e8b35.roa (raw, json)
Hash identifier:          SJJjnE35cjVYGDOnCTXPFCAx1JOiG9TEsf9R3TC0t6o=
Subject key identifier:   33:92:54:C3:BD:9C:3B:FE:EF:5C:3C:DE:31:56:4A:8C:3F:AD:45:D0
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584B62021B9E27F9D8D1AB341780
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/fca43530-5049-3e32-a93f-9ae5f61e8b35.roa
Signing time:             Thu 02 Oct 2025 01:00:31 +0000
ROA not before:           Thu 02 Oct 2025 01:00:31 +0000
ROA not after:            Wed 31 Dec 2025 02:00:31 +0000
asID:                     30036
IP address blocks:        2604:2e88:c800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:62:02:1b:9e:27:f9:d8:d1:ab:34:17:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Oct  2 01:00:31 2025 GMT
            Not After : Dec 31 02:00:31 2025 GMT
        Subject: CN=2f9f1afb-67a3-4ecb-b2d9-b29a677da22e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:71:22:31:bc:f6:4c:b6:d5:15:f6:c4:b3:bc:
                    f0:e3:8a:9e:ef:63:66:3b:57:23:0f:8c:f9:3b:24:
                    0b:e3:f2:99:cb:e4:ae:0f:d3:fc:21:8e:d3:43:62:
                    fe:0b:02:ce:2c:97:f1:d3:28:99:fd:fd:03:f6:ca:
                    a8:8b:53:7f:9c:71:e0:19:4d:5f:73:5d:21:4c:4f:
                    fa:fa:b3:ec:a6:23:2b:6e:45:b6:21:49:ee:c8:c1:
                    9a:9e:e6:e5:7e:af:1d:5a:26:b1:c5:58:65:d6:9c:
                    b3:6f:a7:8b:06:99:48:76:5e:28:03:3a:95:a7:9e:
                    3d:37:22:e8:73:ef:fd:a5:76:da:a8:62:60:43:bd:
                    2c:fe:f1:af:f5:96:5f:70:b3:8d:ee:99:43:da:fd:
                    19:8a:e7:30:f4:56:6f:e4:36:80:cd:85:a4:87:95:
                    ee:a9:7c:9d:1c:df:81:87:7a:25:7c:7b:19:3f:e4:
                    a7:eb:06:ef:ac:51:18:1a:57:dc:69:45:23:4e:f3:
                    f5:ac:ea:fc:e6:82:45:94:67:52:c2:1e:fb:6e:05:
                    be:98:0d:dd:d9:4e:64:c4:ea:5d:7a:d6:9b:0f:1b:
                    09:ce:73:8a:a3:2c:bd:2d:fb:69:73:22:e1:f7:47:
                    e2:a1:30:e0:1f:3b:ed:b6:7e:65:6d:2e:64:01:3b:
                    a2:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:92:54:C3:BD:9C:3B:FE:EF:5C:3C:DE:31:56:4A:8C:3F:AD:45:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/fca43530-5049-3e32-a93f-9ae5f61e8b35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e88:c800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:bf:1a:34:93:50:14:b1:dd:3e:56:95:4a:b4:0b:0b:62:e5:
         83:27:19:77:4b:c3:73:c5:54:4d:d0:89:62:6c:c3:f0:cc:86:
         4b:d9:c2:10:1f:74:88:e6:62:22:ab:68:9f:e9:37:fe:58:ff:
         8b:6e:94:c6:a4:82:50:38:b5:4c:52:51:75:c8:2d:fa:64:35:
         3b:3f:70:15:b2:0d:3c:29:88:8e:a8:bc:06:fd:db:0e:14:1e:
         fe:1a:9f:0b:6f:d4:52:e4:de:2e:18:0e:6e:0c:4b:0f:87:4a:
         b7:dc:e2:08:90:44:a1:4c:33:45:50:cf:4b:0d:3e:88:52:51:
         7d:e3:56:77:0c:93:03:d6:36:d4:c2:11:a2:1f:74:58:ed:5e:
         82:77:d1:91:73:92:14:80:a7:9b:60:8d:3b:97:cd:30:48:dd:
         87:ba:39:5c:6d:f7:3b:f8:4b:52:8b:a4:8c:d4:dc:c5:8f:28:
         e9:d4:5a:b0:26:aa:74:c2:28:bb:7b:82:71:4a:df:58:c7:02:
         af:89:08:fc:e1:4c:eb:79:f8:06:75:8a:af:f2:9a:30:53:fc:
         27:e9:44:5b:c3:4d:39:92:5c:1a:c6:10:f2:15:b7:47:ac:85:
         25:6c:25:b8:25:5b:4e:4b:9c:d9:8d:e2:45:26:b9:ee:2c:49:
         ab:a3:02:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 07:20:20 2025 by rpki-client