Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f07f2447-d6a1-3e88-a6b4-cf39f3eb69d0.roa
File:                     f07f2447-d6a1-3e88-a6b4-cf39f3eb69d0.roa (raw, json)
Hash identifier:          99w54QhBtWDWbGJ/b8gi6PLUkEsDr16RpJvRiCwyBZY=
Subject key identifier:   C1:17:19:E0:85:B3:9D:00:47:7A:74:B7:03:B2:FA:0C:61:09:E9:3C
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584A81462E793CE7DFCA438E8380
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f07f2447-d6a1-3e88-a6b4-cf39f3eb69d0.roa
Signing time:             Sun 13 Jul 2025 13:01:03 +0000
ROA not before:           Sun 13 Jul 2025 13:01:03 +0000
ROA not after:            Sat 11 Oct 2025 13:01:03 +0000
asID:                     19905
IP address blocks:        2604:2e89:f400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:81:46:2e:79:3c:e7:df:ca:43:8e:83:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jul 13 13:01:03 2025 GMT
            Not After : Oct 11 13:01:03 2025 GMT
        Subject: CN=aa41a9b2-8ef1-4b8f-8f82-afd549b80069
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:a6:60:e2:50:d1:37:10:8a:76:51:90:e8:a4:
                    19:3e:19:f3:d6:2e:60:af:68:91:80:a7:02:22:85:
                    62:5c:43:90:7e:d3:71:ca:28:17:27:51:2f:17:cf:
                    6f:76:8f:11:0a:e3:cc:18:f9:dd:c0:6e:84:af:1c:
                    6c:c3:84:0e:fb:fe:08:23:4b:7c:03:38:30:6c:9e:
                    7b:4f:4a:99:26:f7:2e:34:67:49:8e:0f:79:c8:55:
                    01:ba:0e:91:7a:9f:ef:c2:37:ed:9e:c2:88:1f:1b:
                    50:e5:66:59:d2:6b:29:ae:84:a6:06:72:ac:7d:11:
                    a3:85:da:63:4f:08:6c:41:c9:f2:cf:85:17:6a:f5:
                    f0:55:97:98:35:38:95:06:60:d9:2e:d9:89:ee:6d:
                    37:f0:a0:c9:58:89:37:ee:c0:9c:42:75:27:2f:98:
                    5e:19:94:8e:0a:11:b5:54:bb:03:1e:33:eb:68:11:
                    c9:b1:c7:99:4b:a1:26:53:23:0e:35:3e:f5:eb:1b:
                    2f:29:93:9b:cb:56:34:58:42:55:54:c1:d9:f9:30:
                    5b:95:eb:b9:05:ea:2e:1c:78:4d:43:87:a0:91:29:
                    ec:20:d6:cf:ad:bc:1c:c7:4c:93:9f:6a:3f:64:fd:
                    14:e6:19:14:ee:b5:2c:bd:2f:55:37:e8:9c:81:84:
                    cd:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:17:19:E0:85:B3:9D:00:47:7A:74:B7:03:B2:FA:0C:61:09:E9:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f07f2447-d6a1-3e88-a6b4-cf39f3eb69d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e89:f400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:b2:be:3c:69:76:84:bd:4f:0d:70:00:60:28:d5:4d:fc:f5:
         7f:57:9c:d7:d3:ce:5b:6f:fe:47:89:14:10:cb:8b:af:fb:a4:
         06:a0:1b:3b:72:35:55:3f:77:d4:11:b8:9c:f1:b8:ca:8a:b9:
         d7:f5:51:f2:a7:b9:eb:83:09:10:68:17:14:4e:9c:5b:67:c8:
         80:64:67:8b:a7:ef:a5:10:4c:99:cf:0a:25:ae:fc:28:fe:55:
         92:2e:b3:60:8b:e1:8a:5b:aa:87:65:45:ce:eb:2e:c2:1e:3a:
         9a:24:29:e5:96:e0:9c:bc:25:7f:d2:dc:7d:9d:c5:a7:53:67:
         dd:e7:8c:c1:01:a4:a5:9b:d8:57:83:df:46:8f:fb:5e:9d:c9:
         39:17:75:55:32:c3:c6:07:3f:f1:28:8e:50:3d:11:ec:54:17:
         d1:7d:0a:e6:e1:70:c7:48:62:56:84:97:5f:1c:ff:26:cb:e4:
         93:85:bb:bd:03:d0:17:2c:02:87:8f:2a:37:ab:fe:34:d6:52:
         8b:53:17:95:c8:fa:a5:ac:bf:83:a1:1f:47:2e:3b:0a:ce:e0:
         46:95:b4:f8:e0:cd:33:23:41:af:44:46:0a:8c:00:6e:11:8a:
         06:4a:ea:de:fe:f3:a7:14:7d:f7:a6:7c:e7:11:dc:43:29:c9:
         de:48:47:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 20:16:45 2025 by rpki-client