Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b4e0c176-214f-3286-8616-fd3f51e93567.roa
File:                     b4e0c176-214f-3286-8616-fd3f51e93567.roa (raw, json)
Hash identifier:          ixNHRkbEIkxfaEm9yTQNG7HdANV5whoZ4R05oyvhakk=
Subject key identifier:   1D:D0:23:58:71:D8:EE:BF:74:38:6A:D4:2B:15:2A:98:96:93:84:B6
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584AAE9E3E5FA480189A0237BF80
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b4e0c176-214f-3286-8616-fd3f51e93567.roa
Signing time:             Tue 29 Jul 2025 18:50:15 +0000
ROA not before:           Tue 29 Jul 2025 18:50:15 +0000
ROA not after:            Mon 27 Oct 2025 18:50:15 +0000
asID:                     19905
IP address blocks:        2604:2e87:7c00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ae:9e:3e:5f:a4:80:18:9a:02:37:bf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jul 29 18:50:15 2025 GMT
            Not After : Oct 27 18:50:15 2025 GMT
        Subject: CN=aad48ece-eb9c-4bdb-a447-22ef02bb3711
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:b1:eb:6b:bf:f4:0a:f6:03:59:b8:01:23:5b:
                    69:59:0f:34:32:75:91:61:1b:b2:c4:17:29:65:d7:
                    8f:cb:68:a5:92:ea:6d:69:cb:4a:25:55:a6:ab:86:
                    46:e8:4c:f2:a9:91:ff:ad:73:7a:a1:11:c8:cd:9f:
                    f8:79:6b:9a:de:2f:4f:b9:a3:75:c8:fd:48:3e:7c:
                    0d:83:7f:4e:3d:ec:f2:ed:92:21:34:0a:0d:01:58:
                    3f:6b:94:0f:8c:2b:56:5f:63:52:0a:7c:c2:13:81:
                    50:aa:d5:81:46:a1:d8:67:78:93:ef:e0:92:25:aa:
                    6a:74:f7:dd:fb:fa:a8:0d:f1:6c:22:02:cb:4d:d2:
                    42:5f:c0:53:83:c3:0f:78:1b:9f:5b:27:8a:66:a8:
                    5c:3d:b4:28:26:99:bf:08:16:35:19:b8:0c:f3:0f:
                    69:07:40:cf:7e:1a:6c:f1:12:a4:73:96:c3:8d:b2:
                    8d:e7:41:1e:ec:a1:c4:19:1b:f0:24:05:c3:d1:9a:
                    e4:98:03:49:a8:f3:a3:7c:34:b3:0f:bc:5b:63:d6:
                    0e:f8:44:d2:53:8b:93:72:9a:70:94:4a:31:c5:c4:
                    3c:e7:d9:5a:96:4c:4f:ce:07:84:fd:f0:bd:37:0e:
                    f0:73:87:ee:57:f9:91:64:58:7e:74:d1:d1:55:0b:
                    34:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:D0:23:58:71:D8:EE:BF:74:38:6A:D4:2B:15:2A:98:96:93:84:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b4e0c176-214f-3286-8616-fd3f51e93567.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e87:7c00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:0f:a6:d2:46:fa:11:7f:ba:1c:bb:ca:8e:7b:43:4e:7f:22:
         3a:05:78:93:41:c2:46:51:b0:81:7d:32:69:db:4b:2a:02:6b:
         b7:f4:69:e8:ae:dc:17:50:12:d6:51:03:a2:ab:39:f1:53:a7:
         5b:37:d6:21:21:fb:f9:e6:89:8f:e9:8e:04:e5:aa:ca:c2:ba:
         db:ac:ce:21:8b:74:6b:0d:60:4e:bd:f3:37:c7:91:5b:48:7e:
         bb:46:31:77:c6:2a:9a:6b:b8:a7:bd:3a:d3:71:0a:b4:23:0d:
         4a:42:dc:12:63:0e:f9:a0:66:11:16:9f:7f:6b:c7:06:39:f2:
         2b:b5:ce:b5:4d:7e:f3:40:e7:da:a4:28:e6:da:85:cf:8d:56:
         34:fb:5f:e7:e3:9b:19:77:28:73:89:e0:08:bc:98:49:36:44:
         0b:80:f4:94:35:3e:5d:8b:36:07:ce:ce:24:dc:37:54:aa:6a:
         82:ae:29:ad:e9:22:a7:e4:e0:cc:2a:19:8d:72:25:31:8c:90:
         be:8e:3c:32:3b:d2:37:0d:b9:d6:c1:72:c5:c0:bd:de:47:ec:
         07:bb:eb:c9:9e:da:67:95:70:b6:4c:fb:12:37:7e:61:c1:8e:
         d6:ee:9b:0e:e8:00:83:45:a9:cb:e3:c6:bc:cf:a5:ee:ca:2b:
         41:c3:91:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:43:43 2025 by rpki-client