Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b54aff74-14f0-3bd2-9926-5516c6566542.roa
File:                     b54aff74-14f0-3bd2-9926-5516c6566542.roa (raw, json)
Hash identifier:          LKEC5xTFj/xNFN8xul/3dGyUUtwcDgqquYaK5mp+dLg=
Subject key identifier:   5A:25:46:95:4F:D0:0E:61:44:C9:0C:20:E7:89:E0:9E:F0:00:FE:95
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584BB45D1B62C302C211F5E6942E
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b54aff74-14f0-3bd2-9926-5516c6566542.roa
Signing time:             Fri 31 Oct 2025 13:00:39 +0000
ROA not before:           Fri 31 Oct 2025 13:00:39 +0000
ROA not after:            Thu 29 Jan 2026 14:00:39 +0000
asID:                     30036
IP address blocks:        2604:2e8c:cc00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b4:5d:1b:62:c3:02:c2:11:f5:e6:94:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Oct 31 13:00:39 2025 GMT
            Not After : Jan 29 14:00:39 2026 GMT
        Subject: CN=a6337199-f913-49b0-adfa-031909284c32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f6:59:14:30:08:d9:6c:3c:34:b9:8e:b4:fa:
                    a0:86:27:6c:59:00:d7:53:6d:cd:25:d6:08:7f:f6:
                    b9:ab:a8:b0:98:e7:f7:0e:15:7e:cd:0f:2f:f8:55:
                    9e:32:75:d9:79:9f:8f:99:b0:c5:aa:30:46:f7:8a:
                    b2:02:40:b0:d8:1e:a3:04:6b:e3:2a:0a:31:87:1e:
                    0f:d6:52:0f:47:36:1f:47:c2:4b:96:bc:b0:f4:c0:
                    fb:46:67:d2:ed:fa:ea:6e:17:1c:cb:6c:5a:06:29:
                    31:bc:8e:8e:2c:82:2f:5b:7b:ae:ef:58:8a:d7:63:
                    ae:87:27:f1:40:8a:02:14:9d:c7:17:0e:86:92:5d:
                    d5:9a:66:49:c1:c2:2b:ed:20:e4:10:74:68:bc:7e:
                    fe:3f:2d:16:b3:2b:5b:19:32:af:d2:9f:35:4c:67:
                    06:e8:e5:dd:d2:bb:1e:ef:d2:52:88:68:fe:42:e2:
                    40:51:8b:8d:37:fa:91:05:53:c6:6f:7c:43:78:1c:
                    e0:17:94:fa:15:eb:54:bb:08:1a:bb:6e:a2:80:df:
                    c7:5a:15:78:b3:74:45:f1:90:d5:83:0c:24:9d:4d:
                    3c:b6:3f:61:ae:ff:b2:04:6b:bc:41:59:5d:d6:07:
                    68:ac:a2:c6:45:e0:68:e6:bc:3f:27:16:f8:a1:fe:
                    9d:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:25:46:95:4F:D0:0E:61:44:C9:0C:20:E7:89:E0:9E:F0:00:FE:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b54aff74-14f0-3bd2-9926-5516c6566542.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8c:cc00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:7e:e8:bb:29:6c:bc:e5:45:2f:8d:15:c9:3f:bf:3f:38:a3:
         c9:bc:21:53:ab:eb:11:04:75:a4:87:e5:f8:a5:25:c0:d2:52:
         c5:ec:70:70:34:3a:2c:40:73:45:80:f0:c9:da:19:29:bb:4f:
         9b:70:9b:02:a4:5b:4a:88:a6:01:9e:9c:49:83:f8:9a:03:d3:
         7c:af:fd:a6:f1:7d:4e:53:a9:58:d0:69:a5:e8:ba:4a:c1:cf:
         ac:0c:96:8d:00:b0:03:4e:13:cb:51:4a:ac:61:9b:69:05:0b:
         bc:b6:3c:31:aa:dc:50:9c:ae:1f:92:eb:ec:a1:58:48:5d:e2:
         e0:a8:b5:03:f2:a3:f3:23:b7:05:35:25:ab:e5:4a:ad:35:ff:
         0a:27:95:dc:84:50:16:cf:94:71:6f:fd:e7:52:a2:69:2b:82:
         84:cf:86:1b:87:81:80:3b:a5:71:ba:ca:a4:35:58:f0:3c:bf:
         db:12:36:b4:ba:62:13:4a:46:cc:df:45:69:c5:a6:42:f3:90:
         df:f1:b9:e8:52:e5:6c:3e:aa:d5:34:64:f2:1b:1b:69:b7:77:
         d2:a0:77:3d:88:c5:d3:5f:40:49:ad:87:19:aa:4e:28:3d:ca:
         97:fe:22:3c:b1:93:1b:60:4c:7c:92:5a:e6:42:99:92:b1:5c:
         46:39:ab:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:18:02 2025 by rpki-client