Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1c0b27b3-59e7-3325-b102-f0bda3de4e8a.roa
File:                     1c0b27b3-59e7-3325-b102-f0bda3de4e8a.roa (raw, json)
Hash identifier:          XuiLph7bY8tQnD/KCwyKGApGgjRCsfp0PuhAvXZepcA=
Subject key identifier:   3F:FA:44:79:6E:80:16:AA:FE:19:5E:56:28:A0:FC:ED:16:36:A4:82
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584AE94D7CC55043D53AC786C800
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1c0b27b3-59e7-3325-b102-f0bda3de4e8a.roa
Signing time:             Tue 19 Aug 2025 19:20:14 +0000
ROA not before:           Tue 19 Aug 2025 19:20:14 +0000
ROA not after:            Mon 17 Nov 2025 20:20:14 +0000
asID:                     30036
IP address blocks:        2604:2e87:a400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e9:4d:7c:c5:50:43:d5:3a:c7:86:c8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Aug 19 19:20:14 2025 GMT
            Not After : Nov 17 20:20:14 2025 GMT
        Subject: CN=9bf92714-9efa-4817-bd8f-547a38463fb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:1f:ef:a2:4b:63:8f:01:75:1c:02:5f:75:2a:
                    5f:9d:b3:7f:7e:94:b8:2e:cf:c4:4e:d9:80:49:3d:
                    36:5f:a7:81:e7:84:8e:a5:79:3d:ff:d3:f9:1b:35:
                    7c:07:62:b8:2d:61:0c:f4:f4:1b:10:9d:58:87:54:
                    56:ce:f7:38:aa:14:ce:78:2c:78:3f:ff:b1:9b:ba:
                    8e:5e:89:c4:c8:6d:6e:93:ce:53:73:99:04:d8:7c:
                    a9:bd:7a:cf:f5:68:a1:04:f7:ac:5d:69:c1:62:d6:
                    54:ab:08:58:56:97:f0:a7:59:99:9d:67:25:2b:6d:
                    4f:6e:0d:c0:a9:04:0a:47:4a:e0:30:1a:57:86:f5:
                    b6:68:fb:29:84:ae:c2:5b:f6:6c:16:dd:76:1d:2e:
                    34:0a:11:87:e1:4e:3c:03:1e:84:f7:2c:ea:0e:cd:
                    2e:3c:57:32:ac:f8:34:da:29:43:a6:37:66:c7:21:
                    08:c1:6f:b0:48:5a:32:62:bd:3a:f2:57:31:24:1d:
                    00:e4:d3:5a:c2:e8:58:62:fe:f4:ce:5d:85:4e:1b:
                    3e:c7:dd:a1:c3:5b:09:22:24:79:c6:f4:87:20:c4:
                    3b:14:3e:75:b8:0e:7a:54:a3:c3:f0:b6:bd:9b:bc:
                    74:24:fd:db:ca:de:3e:9a:c1:4b:75:d5:2d:3c:d0:
                    3c:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:FA:44:79:6E:80:16:AA:FE:19:5E:56:28:A0:FC:ED:16:36:A4:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1c0b27b3-59e7-3325-b102-f0bda3de4e8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e87:a400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:52:2c:f5:7f:a1:e5:15:47:e8:a5:97:73:94:49:bf:2f:77:
         6b:5c:61:5d:4d:0f:cd:72:34:4b:ce:2c:5a:38:12:da:11:eb:
         73:f7:d4:c4:8c:14:c8:47:10:47:3d:7e:9e:52:39:51:e5:71:
         bb:e0:e1:5e:d1:b0:7f:68:69:58:a8:cb:3a:ff:c4:d6:34:a7:
         98:dd:df:1e:7b:4f:22:e3:ed:1c:39:f5:17:4e:bf:b8:cd:13:
         2c:f9:fa:60:65:e3:b8:72:5e:72:93:ba:4f:a9:48:95:1a:2e:
         d4:90:cd:52:69:49:d2:98:77:cb:38:00:59:30:10:82:23:e3:
         37:5b:44:44:84:04:d3:54:cc:aa:a6:48:89:a6:ec:ef:e9:17:
         20:2c:bb:c9:97:da:27:75:b9:ef:00:cb:e5:4f:cd:86:ed:ac:
         98:21:db:83:92:e2:c5:95:94:22:3d:c4:fd:a6:c1:94:ea:02:
         3c:e0:68:eb:f5:a6:30:7f:a3:ce:86:63:42:c5:55:fc:2c:4a:
         f6:71:29:bd:a4:ee:63:12:5c:e8:d5:ea:45:0a:23:98:b9:6c:
         90:0f:ab:ad:29:95:e7:8e:2d:58:0a:ed:96:cd:30:97:39:35:
         a3:06:87:9d:82:4f:6b:bf:63:88:46:2c:f9:a1:03:b9:bb:2f:
         53:aa:cb:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 07:20:25 2025 by rpki-client