Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bfafb855-3437-348c-9908-1e71541bb5df.roa
File:                     bfafb855-3437-348c-9908-1e71541bb5df.roa (raw, json)
Hash identifier:          hhm1DCbM3Q56lUyC+e/Gdz3EdgXNb++mGTb/MWSDWd0=
Subject key identifier:   E7:80:35:7C:6B:1C:92:56:F0:3A:C1:32:4C:8D:3C:01:43:9B:1E:79
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584AB91C0634505F7651F7F59050
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bfafb855-3437-348c-9908-1e71541bb5df.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     30036
IP address blocks:        2604:2e87:2800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1c:06:34:50:5f:76:51:f7:f5:90:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=58b1ccb4-c7b2-4e03-8500-a3f3300b5d05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:79:79:b2:48:2f:a7:68:08:30:81:b1:cc:83:
                    38:f9:81:53:51:3a:08:34:79:a6:a0:ef:36:60:e7:
                    07:9c:be:7a:71:07:50:33:0a:74:7b:08:a9:f0:ed:
                    f4:65:a2:0a:e9:e6:17:56:fa:a1:c8:41:85:93:b2:
                    e9:81:11:fe:ee:5f:0a:f8:dd:65:b2:a4:e0:94:e0:
                    ba:e2:4b:15:13:50:ee:bf:ee:c7:7d:1b:87:fb:b5:
                    e9:d8:28:1b:9a:f0:ed:52:b9:6d:d1:09:83:9e:fb:
                    6f:bd:bd:22:84:c8:3a:13:e3:29:bb:a9:5e:08:0f:
                    bf:a4:34:0c:79:c4:ab:07:87:31:64:69:01:39:59:
                    a0:dd:33:21:a3:23:39:b5:af:4b:0b:34:f3:90:28:
                    70:f9:c6:bb:71:40:4b:92:b7:33:9d:46:6d:18:a8:
                    91:df:96:b7:c6:bd:e6:5e:47:e1:f1:c9:11:38:4a:
                    b0:62:3d:58:70:55:b1:bf:82:e0:95:38:ae:ef:d9:
                    1e:a5:8e:2b:58:21:48:53:17:a1:b2:7b:f7:ed:9e:
                    58:6c:b8:98:f2:a1:ab:3d:11:f8:a2:10:19:de:5b:
                    e0:79:2b:cb:47:51:eb:eb:2d:3a:93:db:0e:de:63:
                    ab:17:04:d8:9f:52:43:54:bf:7c:21:61:b4:ba:f5:
                    3b:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:80:35:7C:6B:1C:92:56:F0:3A:C1:32:4C:8D:3C:01:43:9B:1E:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bfafb855-3437-348c-9908-1e71541bb5df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e87:2800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:54:f7:58:1d:44:9d:fd:c8:c5:db:50:d4:33:35:40:89:f8:
         66:cb:45:99:b4:9a:6b:41:0e:7c:df:04:a8:50:03:bb:44:ca:
         e1:d2:2e:93:1e:4d:63:36:b3:01:3b:40:fe:dd:55:12:ef:0a:
         bc:6e:57:ba:6d:6a:50:35:6a:06:a0:01:4f:47:16:ce:05:70:
         38:76:43:4f:3b:2f:d5:44:74:c3:a9:f5:12:67:5f:1b:08:65:
         c5:39:82:50:00:7d:86:33:49:de:cc:ca:75:49:3a:2a:67:16:
         2b:30:f7:ca:61:38:2a:35:3a:9a:3b:6a:3b:2f:c7:08:ac:ab:
         44:6c:42:73:c6:82:cb:57:f3:40:e2:46:7c:07:f6:c0:cf:c1:
         23:c1:a4:3c:d2:3f:43:96:60:31:25:88:d2:91:d7:7d:25:cc:
         89:a0:b4:27:f7:b8:12:7f:01:f2:ff:08:0b:42:00:a9:b3:70:
         ba:62:4e:36:03:d7:db:4f:0c:4e:05:c1:d4:f7:2f:f5:ba:5a:
         c3:22:e4:d0:31:ae:a3:4b:f3:a1:42:e6:c6:37:b8:e8:71:bb:
         6a:8c:b4:5b:9f:6a:0d:ec:a2:01:fc:da:9d:ba:a7:1d:5a:9f:
         69:84:d4:4f:13:60:02:ec:78:8f:61:a0:eb:3e:9b:55:07:c2:
         b7:5e:5f:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:25:19 2025 by rpki-client