Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1301f016-de88-3b11-a50b-dcb210b63fe1.roa
File:                     1301f016-de88-3b11-a50b-dcb210b63fe1.roa (raw, json)
Hash identifier:          pLZCQT8AhyVO/vLHsEIG8lkjaKh8F0Fn//rH9RhY7ls=
Subject key identifier:   AB:4F:EE:89:4A:FD:0A:60:EB:64:BF:15:81:68:F1:35:B1:21:F6:BF
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B64CC9D0975F5AAFD4D431080
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1301f016-de88-3b11-a50b-dcb210b63fe1.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     30036
IP address blocks:        2604:2d80:dd00::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cc:9d:09:75:f5:aa:fd:4d:43:10:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=eb5b38b9-d49c-4291-9aba-6ba2e6f6acd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:81:a5:4a:88:e8:e3:0c:39:a8:ff:db:04:01:
                    96:6b:bc:ed:6d:b3:46:ac:54:c7:2c:01:92:0e:35:
                    f6:42:ef:d9:74:c2:ff:d0:35:fe:1d:b6:96:97:44:
                    a6:55:b5:c6:c3:8f:ad:17:71:ec:87:14:1b:f8:fd:
                    67:38:1e:4e:be:98:d6:2b:2a:66:fe:f8:4e:a1:29:
                    1e:0f:d9:5f:f3:dd:7e:f2:94:ad:2d:3a:46:2d:85:
                    af:e8:9e:3a:bc:99:82:f9:2a:f1:25:0e:ab:40:3f:
                    a3:36:b3:ca:41:be:f6:f7:46:f9:58:7a:ad:65:20:
                    56:d2:f0:65:f8:8a:a8:24:db:f0:a2:f2:95:5a:18:
                    69:a2:66:48:fb:1b:a0:5a:d7:4f:e7:38:0e:fa:64:
                    d3:a3:cf:8f:e3:e1:28:88:27:36:82:27:b1:3a:18:
                    7d:3e:5d:d1:08:de:a3:bd:20:c8:0b:11:0d:fd:4b:
                    55:d2:1c:8d:db:72:d5:9d:4b:11:2a:8b:85:77:ad:
                    18:6c:6e:f2:bb:30:59:b5:c0:17:1e:82:33:31:e5:
                    8f:7f:a8:4c:14:11:1b:57:17:fd:13:fa:67:c8:61:
                    85:a4:3b:ab:75:7e:5d:95:84:db:c6:25:ae:7e:d6:
                    52:c8:ff:2d:6f:1f:19:fb:61:01:3c:0d:db:7d:83:
                    b0:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:4F:EE:89:4A:FD:0A:60:EB:64:BF:15:81:68:F1:35:B1:21:F6:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1301f016-de88-3b11-a50b-dcb210b63fe1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:dd00::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:00:10:94:4b:58:93:24:5d:bb:29:50:9a:e0:95:29:14:0e:
         6f:be:4b:f7:46:7c:58:ee:cf:eb:22:d4:87:d1:06:67:c0:42:
         83:90:13:3f:ee:96:ca:0b:32:f9:a6:b2:f0:b0:c5:1d:63:8d:
         47:37:cd:70:d1:10:51:80:18:1c:1e:9d:d5:35:9c:d3:94:04:
         3a:68:c1:33:e0:34:22:87:84:21:42:85:91:28:6b:d3:63:f1:
         4a:17:cf:82:51:77:5a:2a:c5:cd:c5:c0:0a:83:87:43:9b:73:
         32:09:28:aa:93:f0:8a:5c:19:76:a7:01:3e:16:a3:52:b4:50:
         35:09:e0:0f:c8:1b:ac:1c:26:36:06:34:8d:cc:9b:66:cb:10:
         7d:c9:fb:8a:ce:23:8f:54:21:08:df:81:84:9d:0e:fd:9d:db:
         18:f3:71:da:c9:d9:49:6c:83:aa:11:7e:8e:19:bc:43:18:b7:
         f8:81:7f:a8:f8:c1:54:bc:93:7d:67:e2:46:57:79:99:cf:d6:
         2c:67:b3:57:a9:50:2a:30:1b:a5:c9:f2:c7:90:a3:51:0e:99:
         9b:66:03:f6:3b:6c:34:7e:6d:14:a9:87:84:37:54:4a:f8:15:
         a8:35:45:5b:33:36:e7:70:47:6e:a3:40:14:f9:49:2d:a1:7c:
         a1:39:71:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 02:53:41 2025 by rpki-client