Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1d37db6a-bc24-3386-a7aa-3f193b383e4a.roa
File:                     1d37db6a-bc24-3386-a7aa-3f193b383e4a.roa (raw, json)
Hash identifier:          jZpDA0nzYGtyEVw0GMoWrePzfmg7EIU7sZ0rV5U+z7E=
Subject key identifier:   E6:79:35:52:22:49:0B:3D:D0:E7:7B:C8:C4:39:95:5A:02:3F:7C:BA
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584ABD4BB2803DCFC8E3B176C140
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1d37db6a-bc24-3386-a7aa-3f193b383e4a.roa
Signing time:             Mon 04 Aug 2025 01:00:32 +0000
ROA not before:           Mon 04 Aug 2025 01:00:32 +0000
ROA not after:            Sun 02 Nov 2025 01:00:32 +0000
asID:                     19905
IP address blocks:        2604:2e87:2c00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:bd:4b:b2:80:3d:cf:c8:e3:b1:76:c1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Aug  4 01:00:32 2025 GMT
            Not After : Nov  2 01:00:32 2025 GMT
        Subject: CN=03f011d5-7eef-45d9-bb8b-ae6f062ac05c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:ba:af:5b:40:f3:40:f9:db:48:56:c8:21:b3:
                    ab:28:f4:4f:06:23:1d:07:35:bc:d9:e0:62:34:c6:
                    37:85:ec:93:6d:b9:5a:6f:3d:0d:5e:9b:1b:a6:bd:
                    a4:21:09:c2:77:6f:9e:36:db:c4:6b:51:cd:0a:12:
                    7c:cf:ee:1e:aa:c1:50:10:1f:9f:e0:cc:3a:f5:51:
                    c6:18:4d:c3:8a:d5:d2:ac:29:1e:01:51:34:ac:86:
                    9d:7f:66:ca:63:1b:ca:6f:37:3e:c6:41:9e:3e:b1:
                    96:10:0d:b9:3c:e5:ca:a9:e5:5e:13:75:0d:91:ac:
                    72:ca:34:be:97:9e:94:8c:b7:f6:48:c3:9d:9a:e7:
                    00:83:5b:7c:f9:c0:b3:95:36:7c:f8:ee:2d:67:8a:
                    f8:8e:fa:bc:2f:8c:b5:d0:21:b4:e1:41:ec:67:ab:
                    3e:19:a9:63:89:a6:3a:0a:80:46:2e:7d:d2:08:9e:
                    9c:40:33:76:5a:86:64:ea:71:71:e4:ba:80:31:67:
                    ef:df:9b:79:75:c0:7c:a0:9b:76:52:29:a5:c3:71:
                    be:0e:16:94:a2:38:74:27:a2:86:b4:a9:40:7c:ac:
                    85:94:fb:e4:24:c0:f5:d7:82:79:2f:87:fd:cf:c7:
                    61:8b:83:e0:29:9d:0e:77:94:a6:7c:69:6e:5e:3f:
                    87:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:79:35:52:22:49:0B:3D:D0:E7:7B:C8:C4:39:95:5A:02:3F:7C:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1d37db6a-bc24-3386-a7aa-3f193b383e4a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e87:2c00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:ff:df:99:d3:e8:f0:48:7a:09:78:17:ea:7a:d7:4d:d5:2b:
         2c:0d:12:5f:33:fc:2e:03:56:18:b3:a9:c6:fb:db:d9:06:03:
         68:a7:93:46:06:49:b3:ef:88:0b:8e:83:b1:71:6e:b1:60:d8:
         40:ef:7f:5c:fc:73:91:d2:16:7e:00:d5:79:fc:cc:89:03:1e:
         d0:4b:fd:43:2b:f3:db:dc:7e:63:68:f8:11:7a:f8:83:25:8b:
         ee:6c:98:52:c7:db:9f:dc:56:54:f0:3a:e1:d5:53:3b:a2:86:
         48:68:2b:76:0c:1c:69:5d:e5:51:7a:96:68:f5:61:22:08:6b:
         85:2d:85:15:ea:c3:29:12:b1:a6:51:d5:15:ce:21:8f:68:44:
         d7:03:40:15:04:35:09:ad:af:07:40:bd:29:e1:a2:04:ca:17:
         e3:95:e8:0f:c7:ff:60:3d:b5:6c:dd:d4:53:e9:2b:03:df:19:
         07:63:4c:bc:e6:64:ec:2b:81:01:f2:51:52:f6:01:62:f9:b0:
         b4:ef:7a:c2:da:9c:8e:6b:25:50:4a:12:27:00:95:47:05:67:
         f0:1e:e0:29:7b:ae:2d:e2:1a:10:1d:1c:12:74:b7:b7:9f:1c:
         3d:b7:78:f7:1b:4f:a0:5d:81:a6:9c:58:f3:84:d1:3f:f8:73:
         9b:f2:9d:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:42:13 2025 by rpki-client