Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3d9eed2c-4b6e-3395-9a7b-2b3e6383ca7d.roa
File:                     3d9eed2c-4b6e-3395-9a7b-2b3e6383ca7d.roa (raw, json)
Hash identifier:          5sHgYnE/EdIp2qRdnz+gF9fLzAYqi85ChmXc8zMKaPQ=
Subject key identifier:   8B:A4:D5:A2:97:8C:4B:5C:CB:F9:F3:5E:94:A4:52:FD:95:37:44:5B
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584AFC9F630E579459DFD47FE2E0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3d9eed2c-4b6e-3395-9a7b-2b3e6383ca7d.roa
Signing time:             Tue 26 Aug 2025 17:25:37 +0000
ROA not before:           Tue 26 Aug 2025 17:25:37 +0000
ROA not after:            Mon 24 Nov 2025 18:25:37 +0000
asID:                     19905
IP address blocks:        2604:2e87:cc00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fc:9f:63:0e:57:94:59:df:d4:7f:e2:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Aug 26 17:25:37 2025 GMT
            Not After : Nov 24 18:25:37 2025 GMT
        Subject: CN=c4743f21-3a25-4a9d-b29c-d08181fe7c3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e6:19:5d:e0:e5:97:ad:57:88:24:6b:23:2f:
                    2c:de:53:78:d6:fe:12:2e:5c:f7:63:d7:48:5b:7c:
                    21:f6:5b:4d:c8:33:a4:e6:91:0a:2f:62:85:7b:4d:
                    70:af:49:d1:c1:1a:8f:5f:3f:0e:c6:08:9b:d5:0f:
                    33:fe:ae:63:37:b9:49:42:f0:28:9c:92:18:d8:ca:
                    65:99:c9:58:d1:44:38:a2:8f:a9:a3:79:c1:5d:33:
                    63:47:0f:e1:04:74:84:38:eb:4d:1d:67:c3:93:8e:
                    2a:8e:64:39:2d:42:03:10:5a:e1:b8:22:fd:fa:6c:
                    89:f8:c4:b5:1d:77:a0:38:9e:37:4d:ad:2d:d9:f1:
                    9e:a8:19:84:dc:18:d1:ff:ab:5c:6d:9b:45:6d:bf:
                    b2:d0:41:c6:e0:20:23:7f:4f:0b:88:c3:36:18:4a:
                    90:01:bc:f7:f1:88:16:20:23:2e:84:89:79:4f:fd:
                    df:c0:b0:3a:af:ea:9a:3e:2e:28:5c:b4:71:d4:e7:
                    69:1d:c6:07:c3:0e:9e:8b:21:ce:22:d2:ce:90:ef:
                    25:a7:d4:eb:92:f4:64:0b:fc:b5:16:5e:9c:74:39:
                    ce:83:77:ea:80:63:69:74:9a:9b:a9:f0:3f:26:a9:
                    85:bd:bc:3f:12:fd:df:2a:fc:7d:fc:93:45:e8:11:
                    55:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:A4:D5:A2:97:8C:4B:5C:CB:F9:F3:5E:94:A4:52:FD:95:37:44:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3d9eed2c-4b6e-3395-9a7b-2b3e6383ca7d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e87:cc00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:b6:e1:5e:0e:c0:05:fb:7f:99:11:7b:67:81:ac:cb:00:f3:
         99:42:51:de:70:7e:f3:96:1a:bc:18:ea:31:6c:0e:11:08:71:
         1d:73:79:f4:c9:f8:0a:43:01:dc:19:dd:a5:d7:78:da:18:dd:
         92:0d:8f:5c:8a:cc:66:84:ba:26:b8:4c:fe:65:76:ea:24:dc:
         ad:49:73:b8:df:49:44:b7:31:31:92:40:30:18:32:db:f3:a8:
         d7:00:6f:91:5e:0e:5d:b5:10:ce:43:74:fd:0b:a1:a3:ea:7e:
         ed:d1:70:65:3c:ae:eb:89:10:f8:ab:3f:63:fe:08:d3:4b:7c:
         cd:db:c3:55:3f:e0:5f:c5:32:7e:b8:ce:21:83:c7:d9:19:04:
         23:1f:6b:31:34:c6:a9:aa:9f:f2:45:ca:33:a8:23:76:85:74:
         00:1e:71:7e:43:96:a1:b0:97:cd:88:71:a8:56:e8:80:62:02:
         bb:98:df:8d:c5:9d:27:26:61:48:4d:1f:99:c5:d2:3b:9d:8f:
         30:9b:e6:3e:64:91:b2:94:de:2f:03:5f:91:70:b0:0e:a6:9f:
         d5:b0:e5:91:fd:21:2e:8f:7f:f6:7c:fc:37:df:bd:cc:7e:c7:
         a9:cb:cc:50:5a:40:30:93:ae:3c:19:5f:7a:3b:9b:1b:ee:b3:
         c6:31:c1:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 05:37:34 2025 by rpki-client