Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0acdb127-849d-3ad8-b339-03b9e0feb6f4.roa
File:                     0acdb127-849d-3ad8-b339-03b9e0feb6f4.roa (raw, json)
Hash identifier:          QqdDroHwzmAHHeFrhiwob4/EyiM/TBe7C4Wm4IFAqgc=
Subject key identifier:   D9:FD:01:DA:10:DF:AA:12:C5:27:8D:FE:84:CA:69:20:16:66:15:B1
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B64CC92433C1E8D2502B61640
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0acdb127-849d-3ad8-b339-03b9e0feb6f4.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     30036
IP address blocks:        2604:2d80:2100::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cc:92:43:3c:1e:8d:25:02:b6:16:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=38bf18f4-a968-420f-a1b7-49ba2454151e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d7:10:f3:80:4a:b0:47:fc:62:a7:18:f2:7d:
                    d4:bb:0d:49:e5:30:f4:a9:86:c0:73:ed:97:f9:68:
                    f7:02:90:0f:47:ea:71:57:84:2a:29:51:e8:be:85:
                    7f:74:d7:1a:d2:c4:90:7d:57:4e:8a:5b:64:25:d8:
                    de:7d:c5:90:67:2a:60:e2:9d:37:39:78:c7:fc:3b:
                    db:6a:48:9e:1c:0f:71:8a:b3:6b:7f:c1:d2:dd:ed:
                    73:29:81:50:0a:5c:ee:06:fd:09:9c:cc:00:5a:54:
                    0a:fd:12:23:19:ff:b7:0e:4d:49:c4:12:2f:34:66:
                    34:b2:ff:d7:1a:d9:c3:08:92:e2:10:aa:cc:9e:91:
                    97:90:7f:95:65:e6:04:f3:14:12:64:af:69:5d:bf:
                    16:b8:3a:ab:40:8c:32:5a:84:8e:2d:a1:28:89:a7:
                    5f:18:c3:5b:36:9a:3b:e1:20:37:08:e8:52:57:38:
                    92:92:8c:0b:9f:c1:20:12:e7:6f:3b:f6:cf:46:0d:
                    8f:5e:48:12:70:d1:22:c7:ad:b0:09:15:4e:b8:77:
                    b0:0d:b4:86:26:ad:f7:6c:fa:a9:25:41:e7:90:8d:
                    bb:0d:c8:62:a3:4c:f9:f7:47:7d:d1:bf:85:25:dd:
                    1f:b6:46:51:90:21:b0:fb:03:0c:b1:07:28:7b:aa:
                    0a:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:FD:01:DA:10:DF:AA:12:C5:27:8D:FE:84:CA:69:20:16:66:15:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0acdb127-849d-3ad8-b339-03b9e0feb6f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:2100::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:be:00:2f:4e:86:81:ae:5c:aa:ae:bd:3c:05:f5:27:b1:4b:
         ae:e9:0c:60:05:f7:d0:f2:b6:e0:24:4c:43:da:9a:21:0f:1a:
         e5:c6:f6:8f:fe:95:cf:40:d0:4e:9e:27:9f:8c:9e:f8:ef:28:
         1b:7a:a8:02:ea:77:88:3d:87:05:47:38:ee:3d:6f:cd:32:cc:
         38:3f:1d:bc:2b:a7:ca:7e:37:0c:01:31:7f:ae:ba:36:b0:7c:
         49:fc:eb:ad:52:46:39:e1:02:88:78:78:84:fb:e9:0f:87:21:
         2f:fc:8d:b9:6d:0b:2a:65:da:13:c9:93:6d:0d:b1:14:38:4e:
         e9:4c:f9:38:bb:a2:c5:40:2e:4a:59:b6:96:b6:4b:7c:17:ed:
         be:1f:20:cc:25:b2:9c:42:d8:90:88:7d:54:78:08:e0:19:fa:
         57:bd:b6:9b:77:fb:bf:75:b7:74:10:f9:63:18:03:8e:b5:93:
         60:bf:bf:97:c8:b3:e1:d0:21:3d:63:77:6e:92:02:1d:64:6d:
         60:ff:c4:1b:78:3e:cf:96:56:52:61:04:b6:55:ea:c5:04:78:
         f5:47:bd:26:d7:a7:88:f7:b6:07:2c:2c:d1:64:32:77:8e:f1:
         d3:a2:1b:12:bd:fe:4c:3f:3a:43:15:66:a1:f2:b8:29:6f:69:
         52:6b:da:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 02:42:54 2025 by rpki-client