Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9d885db0-78f9-354c-8cf1-040c707c8d9e.roa
File:                     9d885db0-78f9-354c-8cf1-040c707c8d9e.roa (raw, json)
Hash identifier:          VbMtcK3TiiujAXQYB6CiuSK7JZh8DmN+xQcfxt/DaK8=
Subject key identifier:   1E:52:11:EF:CF:11:D3:0C:49:2A:56:3D:20:5D:20:E1:87:B8:5A:E8
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584AE67B9345C78D177292763180
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9d885db0-78f9-354c-8cf1-040c707c8d9e.roa
Signing time:             Mon 18 Aug 2025 19:05:40 +0000
ROA not before:           Mon 18 Aug 2025 19:05:40 +0000
ROA not after:            Sun 16 Nov 2025 20:05:40 +0000
asID:                     30036
IP address blocks:        2604:2e87:9c00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e6:7b:93:45:c7:8d:17:72:92:76:31:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Aug 18 19:05:40 2025 GMT
            Not After : Nov 16 20:05:40 2025 GMT
        Subject: CN=d75900e0-7a70-4284-805f-39de09fdb471
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:5f:94:af:b7:39:01:ac:66:d1:59:59:f0:df:
                    92:bc:ba:ee:30:24:97:60:4b:82:f1:bf:7b:4c:2a:
                    8e:a8:22:90:80:b6:34:2a:cf:b5:a4:9f:a8:21:d4:
                    50:82:9a:97:0e:18:0f:39:c7:25:ed:20:db:6c:81:
                    ac:27:4f:fd:3a:0e:34:15:ee:79:1a:04:b0:31:bd:
                    2d:c7:c9:f0:af:e2:2a:d6:83:65:91:f2:49:a7:38:
                    6e:53:55:76:c5:98:6e:6b:f3:12:72:29:86:3b:53:
                    ed:f6:b3:59:10:d3:4d:14:a7:51:9f:f3:e5:4b:db:
                    c8:52:7b:50:7b:d8:85:f3:da:eb:3a:e7:5c:99:94:
                    1e:8b:a3:b1:c9:d9:2b:1f:2c:09:8e:37:e7:06:b0:
                    6a:40:83:17:18:35:5c:5d:47:d0:57:f9:d9:73:b0:
                    2a:b3:60:79:02:2d:77:77:5a:a3:c1:44:18:5d:44:
                    27:65:64:eb:3e:5b:25:b8:07:41:3c:e5:ae:3d:0f:
                    ff:14:01:43:06:ba:76:71:9d:50:99:d9:ed:66:9b:
                    45:1b:83:05:df:36:3a:9f:a8:9d:3a:dd:69:ad:eb:
                    61:51:4e:80:3e:f4:08:a0:ab:d9:5f:4f:39:64:88:
                    07:20:18:ad:cf:8c:8c:bf:2f:57:9c:c6:6b:c5:a2:
                    6c:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:52:11:EF:CF:11:D3:0C:49:2A:56:3D:20:5D:20:E1:87:B8:5A:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9d885db0-78f9-354c-8cf1-040c707c8d9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e87:9c00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:59:0b:c4:46:d7:ac:26:57:df:a2:9a:24:f7:85:76:21:0e:
         99:c7:51:59:9a:ff:a1:17:dd:51:05:9d:1a:5e:2e:01:f3:db:
         c8:2a:ee:86:90:a5:fc:47:fd:45:ad:77:54:31:c4:c5:bc:32:
         89:de:e7:6b:8e:5a:be:74:5c:4e:f4:f0:0f:7a:6f:f4:6d:4c:
         70:12:bf:46:c0:24:40:2d:38:80:30:f3:05:09:fe:bf:71:0c:
         c5:a7:14:a8:3f:9d:0f:50:7a:6f:38:1c:a1:5c:1b:60:bf:ee:
         0c:11:9c:1b:df:d8:f1:d1:33:d3:f1:02:da:7b:a9:25:45:4a:
         c4:03:36:32:b4:4b:15:6d:81:24:43:f0:d8:16:8f:35:6c:92:
         46:fa:d6:38:1a:66:4d:09:59:73:7f:d4:35:23:8d:3a:7c:2d:
         19:de:1f:c5:3d:66:0f:86:26:5f:c1:39:f8:0d:f0:c5:39:f1:
         38:cd:7e:89:83:a3:db:a4:d9:cd:b6:5a:ae:ff:fc:66:e5:be:
         1f:46:ab:3f:32:36:1d:e5:ce:4d:2d:d6:0c:c4:89:44:3a:f7:
         85:ae:1f:14:c9:39:d7:16:0c:09:e4:f4:c7:f3:ed:4d:32:0d:
         7e:96:37:91:e6:1e:9b:4a:bf:78:31:a4:27:7c:5e:ad:7a:d5:
         ee:48:18:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 07:20:23 2025 by rpki-client