Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/fe8e9adf-b293-3f08-ae41-148e5c6eea90.roa
File:                     fe8e9adf-b293-3f08-ae41-148e5c6eea90.roa (raw, json)
Hash identifier:          1OkjzKQ+Qeqyi2M+e3+b+D9adqphl9B8xMplqRyabPY=
Subject key identifier:   BF:ED:79:7A:A7:39:48:C6:ED:B4:67:5F:F1:F0:08:90:DF:A2:85:EB
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584A7BB0B0B26190F520F7FED1C0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/fe8e9adf-b293-3f08-ae41-148e5c6eea90.roa
Signing time:             Fri 11 Jul 2025 13:01:05 +0000
ROA not before:           Fri 11 Jul 2025 13:01:05 +0000
ROA not after:            Thu 09 Oct 2025 13:01:05 +0000
asID:                     19905
IP address blocks:        2604:2e88:fc00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7b:b0:b0:b2:61:90:f5:20:f7:fe:d1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jul 11 13:01:05 2025 GMT
            Not After : Oct  9 13:01:05 2025 GMT
        Subject: CN=1520d638-4981-4d6a-8996-39579c6233ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:06:85:6a:06:db:b6:5d:c4:41:f3:34:39:7a:
                    0f:dc:ee:fd:09:62:be:a1:1b:a2:94:92:a4:45:e0:
                    e0:5b:c5:f3:21:de:31:9a:25:e7:4a:f8:a6:20:90:
                    21:07:d3:10:34:a4:6d:37:51:d1:b4:92:d4:ac:39:
                    7b:30:69:e7:a5:a6:51:8c:d9:bd:73:79:bf:78:d2:
                    50:43:d1:3a:c4:5b:77:c3:33:c8:49:66:ed:1b:75:
                    99:d0:b9:18:60:b0:a5:a0:c1:3a:6b:65:33:7d:63:
                    f9:77:b1:cc:cb:97:db:1e:24:b6:f6:9d:87:2c:30:
                    4b:92:5c:0e:5d:29:ca:12:81:fd:31:ca:e2:7f:df:
                    06:28:9c:d7:1f:49:4b:2d:4c:3c:8f:b9:7c:22:bc:
                    a7:43:21:39:92:29:dd:ff:a3:79:80:cb:37:e2:54:
                    cb:eb:32:65:0f:4a:69:11:87:d9:93:01:21:96:7e:
                    6e:fc:cd:4d:06:a7:34:e7:75:10:a9:40:2f:83:c0:
                    ee:87:52:ac:6a:d3:b2:ce:eb:80:d9:3e:03:b8:7b:
                    45:f7:cc:f9:30:34:d6:72:14:5d:37:84:e8:cf:d1:
                    e5:4b:fd:f0:c7:41:80:76:1f:ac:e7:09:6f:d8:3a:
                    13:a9:82:ce:57:9e:61:0a:29:48:bb:48:a7:05:77:
                    f4:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:ED:79:7A:A7:39:48:C6:ED:B4:67:5F:F1:F0:08:90:DF:A2:85:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/fe8e9adf-b293-3f08-ae41-148e5c6eea90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e88:fc00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:95:d3:6b:16:3f:ac:5f:36:df:17:bc:76:39:ed:c1:22:ad:
         4c:c7:95:87:6b:f6:27:db:df:f5:f6:71:3e:0e:e9:bb:0b:c2:
         05:2f:28:6d:3f:37:1d:c3:b2:eb:59:a3:61:54:58:f3:72:0c:
         62:16:46:97:93:c9:c4:e7:7d:5a:71:a0:67:f8:a4:58:c3:25:
         47:b4:4b:cf:78:47:a9:e7:c1:e1:58:e9:6c:d6:80:26:99:46:
         4d:c3:d6:17:7c:6d:cc:fd:a7:eb:f6:78:22:e6:34:9a:bc:73:
         5d:d0:24:34:7f:5d:b1:90:1a:bc:6b:a0:09:00:f1:4c:b3:73:
         4e:93:3f:db:79:fa:9f:79:02:42:4f:49:7e:ca:3b:2e:0c:22:
         dd:48:9d:39:4a:bc:10:4e:83:cb:89:ae:09:77:91:88:af:a2:
         b9:89:54:bb:8d:94:51:b4:31:ff:fd:fa:95:37:d9:ad:65:5d:
         4f:56:c0:d6:f3:d1:c1:e4:cb:60:18:ee:50:a1:2f:c1:10:46:
         06:dd:4e:d5:20:15:8a:f4:2d:b1:af:13:f0:e1:5d:27:a6:d3:
         4f:8c:b3:04:51:5e:3b:99:45:ec:81:a0:46:59:4e:70:6a:94:
         e1:10:53:89:34:02:e0:be:02:05:60:8a:70:36:24:b3:c8:12:
         15:0a:69:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 20:20:47 2025 by rpki-client