Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/6abeb5c4-e434-3687-ba0e-2d38683e7ff5.roa
File:                     6abeb5c4-e434-3687-ba0e-2d38683e7ff5.roa (raw, json)
Hash identifier:          9SsfWe1RHd2TVprIOlsY9w+JjZN/YzIYhLAHyU0gP40=
Subject key identifier:   C9:5A:C6:E7:74:3D:49:93:C8:2F:03:78:46:4D:C9:1D:FB:07:56:66
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584BB45D1AE61BD5640FE26E0C00
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/6abeb5c4-e434-3687-ba0e-2d38683e7ff5.roa
Signing time:             Fri 31 Oct 2025 13:00:39 +0000
ROA not before:           Fri 31 Oct 2025 13:00:39 +0000
ROA not after:            Thu 29 Jan 2026 14:00:39 +0000
asID:                     30036
IP address blocks:        2604:2e8e:9800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b4:5d:1a:e6:1b:d5:64:0f:e2:6e:0c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Oct 31 13:00:39 2025 GMT
            Not After : Jan 29 14:00:39 2026 GMT
        Subject: CN=1b30171c-b620-4113-aa45-c5694c58cd57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:7f:d3:f6:73:66:62:19:56:c0:92:ca:1c:05:
                    ae:88:8a:a9:9e:53:1a:f7:d3:b5:64:d3:3c:0e:39:
                    7c:2f:08:32:31:4d:81:fd:4d:0a:13:6d:56:30:69:
                    33:69:29:f5:2e:e1:60:71:e4:8f:ce:80:82:aa:4c:
                    e0:15:4d:52:f5:de:c3:73:e5:65:26:d3:c2:c7:35:
                    50:10:2b:1e:e3:42:ef:23:04:4b:73:45:ae:1f:22:
                    da:58:9c:81:be:55:0b:2f:89:7d:62:1f:53:10:87:
                    57:6b:2d:43:68:75:89:c9:c0:01:69:4c:cd:37:3b:
                    6e:38:ca:b3:35:b2:82:d3:43:37:a8:ec:c0:ba:2d:
                    57:4d:fc:dd:ae:5d:aa:ea:74:53:72:94:1e:12:38:
                    9f:1a:d5:15:a4:a7:39:0b:ea:1d:d3:a6:0f:15:1e:
                    48:9b:7d:20:55:85:9f:b7:ac:7d:7a:10:d2:55:b4:
                    1a:1a:d3:6d:07:59:48:74:bd:54:d6:74:00:7e:1d:
                    a8:d8:66:e3:28:08:d5:9a:51:b0:0c:fb:7b:6c:7e:
                    2a:da:1d:c6:ee:d5:d5:22:72:06:a5:d5:b9:b9:bc:
                    7e:5a:21:e5:10:e8:c3:64:89:38:24:1a:30:22:6f:
                    92:96:ae:4a:db:21:9d:b6:b7:ea:0f:d2:bf:69:a5:
                    a9:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:5A:C6:E7:74:3D:49:93:C8:2F:03:78:46:4D:C9:1D:FB:07:56:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/6abeb5c4-e434-3687-ba0e-2d38683e7ff5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8e:9800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:8d:0b:11:d3:9f:d0:8d:a8:cc:cf:8e:16:2e:b9:b9:38:3c:
         d8:76:bd:a1:53:64:31:59:9b:d6:26:4f:d1:f0:5d:5a:72:0d:
         49:78:ac:bf:9c:10:ef:9d:8e:45:f8:eb:35:72:31:a1:29:ff:
         de:ec:6e:fe:3a:bc:2d:db:eb:b7:42:4e:50:ad:ac:ba:10:be:
         66:bd:36:dd:aa:30:d1:a6:dc:c5:66:33:c9:2e:e2:75:8f:f6:
         82:d7:40:b8:b8:3b:ec:cf:c1:a5:39:9f:ec:e2:55:3d:69:27:
         52:60:0b:d6:4e:35:4e:28:b8:39:81:52:43:80:7f:8f:f3:aa:
         40:a5:24:c0:db:12:3c:37:96:95:d2:69:67:b8:74:07:d0:aa:
         74:80:db:3b:3c:91:53:42:9b:f3:bb:99:49:c5:2b:76:a5:59:
         7e:50:19:d9:0c:b3:cc:3d:a5:53:fc:7b:bf:e3:f8:58:7f:96:
         f8:c5:c0:97:db:0e:1d:21:51:7a:c1:07:cd:88:04:1d:ca:3a:
         4d:26:b2:82:4e:06:ce:a7:44:10:c7:53:1b:ac:ef:c4:c1:35:
         b4:ee:c4:a7:41:93:1d:c1:cb:ba:38:92:e1:b5:50:5d:7f:f7:
         12:2b:b5:fe:fd:49:4e:85:f1:01:1c:bf:91:9d:f3:43:9c:0a:
         2d:8c:14:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:03:47 2025 by rpki-client