Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/6305c5d1-d28c-36bc-99a6-22832eebb498.roa
File:                     6305c5d1-d28c-36bc-99a6-22832eebb498.roa (raw, json)
Hash identifier:          s0jq9LxZTsJ1sffvzX+A+WSaKASDCVovetesxchgiOI=
Subject key identifier:   3E:FA:B2:71:AB:4E:19:5E:8B:F7:6F:5A:1A:22:A6:01:F3:45:50:A2
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584A81462F2F651D000B917EEF00
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/6305c5d1-d28c-36bc-99a6-22832eebb498.roa
Signing time:             Sun 13 Jul 2025 13:01:03 +0000
ROA not before:           Sun 13 Jul 2025 13:01:03 +0000
ROA not after:            Sat 11 Oct 2025 13:01:03 +0000
asID:                     19905
IP address blocks:        2604:2e8d:7800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:81:46:2f:2f:65:1d:00:0b:91:7e:ef:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jul 13 13:01:03 2025 GMT
            Not After : Oct 11 13:01:03 2025 GMT
        Subject: CN=6f8ac4be-c49f-4979-b62a-bccc25b7ac41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e9:93:89:a3:c7:c8:c3:e0:ea:6d:aa:f1:4b:
                    b8:9e:37:6f:ba:92:99:96:14:a8:76:4c:e5:76:52:
                    ec:cf:82:1f:6f:d6:60:08:0d:12:c0:86:58:60:21:
                    b8:5e:cf:ea:c1:5b:64:a8:7f:0c:e5:9c:df:1c:2e:
                    05:6d:b8:63:e3:2f:76:71:54:72:92:90:af:bc:bb:
                    6a:3f:2a:88:b4:b4:f2:44:2b:54:c2:eb:24:91:20:
                    03:42:8f:92:95:27:4e:8a:02:e0:6f:e0:75:63:d0:
                    b2:fa:42:63:0c:fe:cf:f9:5e:16:80:76:1f:20:b1:
                    0b:fa:11:e3:4c:95:bd:4c:74:07:2c:d2:16:40:4c:
                    2c:39:26:2a:55:ad:76:38:08:14:bd:cb:bc:b9:e8:
                    3d:f1:10:c2:cf:4b:92:a9:86:1b:e4:0d:49:95:cc:
                    6f:15:04:44:04:4c:63:05:b4:67:c9:a2:4a:29:cc:
                    f2:11:22:37:b9:e5:f3:b5:a0:84:16:99:44:74:cd:
                    6b:37:19:23:42:ae:c5:14:58:6e:d4:11:67:90:33:
                    3e:43:e2:68:4b:e0:3e:09:bc:10:dc:a9:2f:96:fa:
                    48:23:b2:7b:b5:26:2c:a4:d7:a0:32:29:1b:1a:ba:
                    a7:77:74:62:8c:9f:5e:38:1d:69:2c:54:99:16:da:
                    72:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:FA:B2:71:AB:4E:19:5E:8B:F7:6F:5A:1A:22:A6:01:F3:45:50:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/6305c5d1-d28c-36bc-99a6-22832eebb498.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8d:7800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:04:a4:c6:f7:95:80:33:6c:d9:1f:fc:e8:b0:94:4b:4c:a5:
         d5:00:90:87:f4:e4:8e:3c:57:fa:e6:73:d9:40:c7:9b:33:ed:
         4f:c4:32:3d:23:ea:90:14:0d:df:a4:d8:5e:f0:eb:07:ae:5e:
         cd:be:64:84:09:69:3b:af:19:3c:52:4e:ce:65:18:25:1f:81:
         b2:af:29:88:04:76:5f:42:78:68:a8:7c:40:45:76:ea:6a:c9:
         ba:6b:f3:2a:81:98:6f:28:e3:8b:08:5b:f9:41:75:ad:f9:ea:
         14:4a:5a:3d:87:77:e0:eb:88:f2:08:12:95:f0:d0:3e:c8:b9:
         9d:a5:a5:68:ba:6b:11:d1:3e:6c:1e:72:f0:6e:bd:d9:a6:14:
         a4:44:09:47:48:e4:16:d2:82:09:4d:ec:23:53:a3:54:c2:af:
         ce:8a:3a:b1:c7:6e:13:2f:66:40:d3:d8:b9:c3:9f:4d:db:63:
         97:9d:b3:d0:72:71:6f:ea:6e:4f:b6:04:a6:b5:6a:52:37:ce:
         28:32:b8:83:48:81:89:ec:7d:57:96:68:00:83:e5:26:c9:76:
         6d:df:3b:eb:e5:ee:77:c9:aa:90:f4:3e:c3:35:55:b0:71:4d:
         ca:15:f1:71:dd:07:30:fd:41:a4:ed:eb:0d:05:c1:b9:1f:8f:
         7b:e5:d0:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:02:11 2025 by rpki-client