Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1893eeb7-40d1-3788-a29c-435033842060.roa
File:                     1893eeb7-40d1-3788-a29c-435033842060.roa (raw, json)
Hash identifier:          HG161hwtFwvP67nM2bcOz+5fXhdAMQgRJm4mA2sGNfo=
Subject key identifier:   0D:99:FE:47:96:29:68:A1:26:52:70:04:94:11:DF:5E:12:56:40:44
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B56D72773DD182B752F195D80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1893eeb7-40d1-3788-a29c-435033842060.roa
Signing time:             Sun 28 Sep 2025 01:00:33 +0000
ROA not before:           Sun 28 Sep 2025 01:00:33 +0000
ROA not after:            Sat 27 Dec 2025 02:00:33 +0000
asID:                     30036
IP address blocks:        2604:2d80:5c80::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:56:d7:27:73:dd:18:2b:75:2f:19:5d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 28 01:00:33 2025 GMT
            Not After : Dec 27 02:00:33 2025 GMT
        Subject: CN=54af219d-676d-4b64-8e90-a2c6c07e2368
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:dc:30:e6:df:53:6e:1a:23:88:1a:32:66:3b:
                    2f:7f:0f:6f:88:0a:ae:94:d6:f8:ad:df:b2:e7:9e:
                    03:03:bd:e6:b0:98:f7:48:25:2e:93:6e:bf:b3:e6:
                    79:b4:b4:6e:1b:c2:85:b4:59:18:52:3f:18:76:37:
                    92:2a:f5:b9:18:41:bc:59:8f:ef:20:eb:b2:ad:41:
                    a0:c5:15:3d:28:b0:dc:31:d8:fc:02:a5:4e:f6:66:
                    e2:d5:5a:dc:64:cc:0c:44:77:c4:f1:45:87:be:e7:
                    9c:13:91:4c:50:02:1d:9b:b1:43:3b:6c:ff:1b:14:
                    78:46:a4:82:ab:df:b3:96:ac:25:66:85:2f:db:2d:
                    a5:36:86:7d:97:5a:f5:be:3c:56:a3:b4:01:b5:28:
                    8c:43:c0:a0:aa:f4:00:93:6e:d4:95:4e:d5:20:37:
                    b9:bb:ab:34:57:61:c6:93:c9:de:a1:aa:3a:b4:a8:
                    4e:fa:7e:93:22:8e:04:e4:3a:98:ae:60:3c:f7:86:
                    ba:d8:10:aa:59:fd:46:f5:28:c7:ac:3a:2d:a0:29:
                    41:81:6f:81:88:b2:1f:0f:cb:ab:f1:9d:5c:1a:4b:
                    dc:a7:4e:88:f2:f7:4b:6e:dd:cd:ee:c4:13:d4:cc:
                    b3:1b:97:de:fd:08:83:9f:d1:72:ba:c8:61:00:ce:
                    56:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:99:FE:47:96:29:68:A1:26:52:70:04:94:11:DF:5E:12:56:40:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1893eeb7-40d1-3788-a29c-435033842060.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:5c80::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:5a:bf:f6:0b:59:65:fd:f6:cf:6b:1c:0d:0a:e8:9c:c4:dc:
         a3:70:69:ba:4e:ea:39:9a:0e:31:76:22:77:c0:c1:88:60:5a:
         13:33:94:09:fc:a1:44:9d:33:68:42:ab:69:40:31:32:c0:26:
         83:af:8e:63:20:33:63:bd:ce:18:2a:90:a1:ef:ec:d2:8a:bc:
         b0:f9:75:4d:5b:ae:a8:9d:07:7f:5b:e1:45:3f:e0:2c:5c:33:
         2c:f6:d3:2c:67:ed:ef:ec:b6:a9:04:a6:9b:ff:de:b8:73:b4:
         a0:43:59:ea:4f:26:b6:29:9c:cf:3d:1a:db:1e:c4:0b:70:57:
         82:ff:ea:0e:4f:ee:e4:29:85:94:92:8e:32:cd:f8:89:6f:46:
         e0:de:e1:0a:ce:d8:23:89:8f:6d:40:97:18:92:ba:ee:53:05:
         70:4b:13:7e:28:7c:54:a5:a2:1a:e3:e0:c2:90:26:78:d8:cb:
         af:e3:6f:6a:36:66:84:73:62:c3:04:d7:fd:03:87:ed:59:9c:
         12:ff:56:19:14:f0:60:b7:d5:ad:d1:a3:5d:47:89:71:f9:e4:
         31:4c:c7:5e:b7:dc:00:f8:b5:05:4f:76:8d:f6:a1:3c:41:f1:
         2d:d2:27:3f:ca:81:75:d4:c9:95:86:fb:c2:e1:9b:57:35:f1:
         85:4c:76:19
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtW1ydz3RgrdS8ZXYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDkyODAxMDAzM1oXDTI1MTIyNzAyMDAzM1owLzEtMCsGA1UEAxMk
NTRhZjIxOWQtNjc2ZC00YjY0LThlOTAtYTJjNmMwN2UyMzY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9ww5t9TbhojiBoyZjsvfw9viAqulNb4rd+y
554DA73msJj3SCUuk26/s+Z5tLRuG8KFtFkYUj8YdjeSKvW5GEG8WY/vIOuyrUGg
xRU9KLDcMdj8AqVO9mbi1VrcZMwMRHfE8UWHvuecE5FMUAIdm7FDO2z/GxR4RqSC
q9+zlqwlZoUv2y2lNoZ9l1r1vjxWo7QBtSiMQ8CgqvQAk27UlU7VIDe5u6s0V2HG
k8neoao6tKhO+n6TIo4E5DqYrmA894a62BCqWf1G9SjHrDotoClBgW+BiLIfD8ur
8Z1cGkvcp06I8vdLbt3N7sQT1MyzG5fe/QiDn9FyushhAM5WnQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFA2Z/keWKWihJlJwBJQR314SVkBEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMTg5M2VlYjctNDBkMS0z
Nzg4LWEyOWMtNDM1MDMzODQyMDYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgFyA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGFav/YLWWX99s9rHA0K6JzE3KNwabpO6jmaDjF2InfAwYhgWhMz
lAn8oUSdM2hCq2lAMTLAJoOvjmMgM2O9zhgqkKHv7NKKvLD5dU1brqidB39b4UU/
4CxcMyz20yxn7e/stqkEppv/3rhztKBDWepPJrYpnM89GtsexAtwV4L/6g5P7uQp
hZSSjjLN+IlvRuDe4QrO2COJj21AlxiSuu5TBXBLE34ofFSlohrj4MKQJnjYy6/j
b2o2ZoRzYsME1/0Dh+1ZnBL/VhkU8GC31a3Ro11HiXH55DFMx1633AD4tQVPdo32
oTxB8S3SJz/KgXXUyZWG+8Lhm1c18YVMdhk=
-----END CERTIFICATE-----
Generated at Sat Oct 11 02:56:15 2025 by rpki-client