Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/224026a7-62df-3231-8c7d-c6cf239abf57.roa
File:                     224026a7-62df-3231-8c7d-c6cf239abf57.roa (raw, json)
Hash identifier:          YqRGnr1svM1X6TVk7nH92ym510irsJ84uXQLnpzs5JQ=
Subject key identifier:   E9:7F:28:65:20:D3:06:15:82:73:20:39:04:38:6D:4B:4E:D4:36:85
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584AAC8B7D2F7936226400E71B00
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/224026a7-62df-3231-8c7d-c6cf239abf57.roa
Signing time:             Tue 29 Jul 2025 01:00:48 +0000
ROA not before:           Tue 29 Jul 2025 01:00:48 +0000
ROA not after:            Mon 27 Oct 2025 01:00:48 +0000
asID:                     19905
IP address blocks:        2604:2e87:2400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ac:8b:7d:2f:79:36:22:64:00:e7:1b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jul 29 01:00:48 2025 GMT
            Not After : Oct 27 01:00:48 2025 GMT
        Subject: CN=41fea384-f58c-44d7-b0df-22f881c2c4a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:eb:36:53:75:48:9e:41:2a:c9:e5:e7:67:95:
                    c6:fa:c5:50:f3:9d:fb:7f:f7:80:8e:a3:ec:dd:45:
                    23:26:2d:7d:93:c7:99:00:87:70:72:b6:9a:17:70:
                    97:8d:6d:48:54:54:71:19:ca:80:c0:45:78:a5:69:
                    47:e1:b8:ff:05:39:4c:2b:c1:ac:69:a3:08:8c:45:
                    03:57:7d:9f:e9:eb:da:66:ba:bd:3e:7c:e0:f6:8a:
                    9c:f2:7d:a4:7c:25:78:86:90:94:81:5c:ee:d5:ef:
                    c3:44:e9:20:e5:0e:24:64:cc:48:af:10:b1:9a:7a:
                    d8:d7:a6:20:35:ed:fc:f1:6e:11:fb:39:ae:38:1d:
                    c2:12:12:8e:e8:2a:d5:8d:31:a3:97:10:34:f7:c0:
                    aa:23:7f:a5:0f:93:b0:65:70:03:41:3e:b5:83:57:
                    1e:c4:a9:a1:15:d9:c2:47:d6:0d:ef:cd:75:73:a1:
                    4a:ca:9f:c9:84:78:2b:68:a6:d3:4b:c3:db:be:26:
                    c1:cf:75:5f:55:58:9e:9e:91:ea:69:7c:c7:01:a2:
                    02:5e:fe:a6:29:af:20:6a:a6:b6:61:d3:13:87:b6:
                    83:2b:34:ed:8e:34:5a:c9:c4:71:ec:84:15:56:4a:
                    66:60:bc:76:ef:2f:ab:88:51:4b:62:8b:49:0b:67:
                    0e:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:7F:28:65:20:D3:06:15:82:73:20:39:04:38:6D:4B:4E:D4:36:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/224026a7-62df-3231-8c7d-c6cf239abf57.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e87:2400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:73:3e:06:7f:65:b5:47:c4:dd:8c:ba:4a:b4:5d:96:2d:78:
         69:1f:24:a8:fd:b4:b5:1c:ba:02:af:36:83:0b:db:77:07:2a:
         f7:1a:36:31:5b:55:ab:f2:d8:ba:d3:dd:67:be:a0:93:03:05:
         12:a8:92:54:e0:6b:3c:e5:76:4d:09:af:61:6c:76:3f:e1:76:
         e2:4c:40:c7:12:a0:c2:07:e4:e5:76:b1:3a:e4:52:80:12:fc:
         c6:68:6d:50:5d:c2:22:3e:34:c6:0d:7a:8c:00:45:19:d1:2f:
         c1:4a:dc:8e:4b:13:82:ce:c0:b2:c9:4f:8d:19:91:9c:f0:53:
         58:84:08:3b:ee:4b:7e:7d:4e:7e:96:73:33:95:6c:3c:53:07:
         6a:99:b5:4f:ec:63:51:77:95:4b:db:13:89:ec:2b:7d:1a:bc:
         da:f5:0a:ed:19:88:0a:af:55:b9:42:03:73:68:6c:e7:60:d6:
         f2:19:b6:bb:c2:3c:3d:b0:f6:c9:e9:b5:02:5c:e6:7f:18:8a:
         bb:93:6d:fc:17:f5:5e:71:fa:91:73:e8:24:58:36:ac:84:dd:
         14:f4:23:e0:72:be:40:bb:82:a3:0e:67:c2:66:4a:a6:59:66:
         f6:84:f4:0a:00:cf:fe:34:f3:f7:50:f5:23:9f:af:16:be:45:
         47:5d:7d:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:22:42 2025 by rpki-client