Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2284ac08-b2a8-3da7-8bde-a2317e860375.roa
File:                     2284ac08-b2a8-3da7-8bde-a2317e860375.roa (raw, json)
Hash identifier:          Vq50XfPIk0Zzp9mvJBCeKWAsx+U20P4idn7ijkMk46s=
Subject key identifier:   B6:11:D6:32:9E:A1:E9:9F:9E:3B:D4:87:F5:66:AA:79:5C:C3:E9:86
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B79CACC16B3B8CA1696CBEA80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2284ac08-b2a8-3da7-8bde-a2317e860375.roa
Signing time:             Fri 10 Oct 2025 13:29:07 +0000
ROA not before:           Fri 10 Oct 2025 13:29:07 +0000
ROA not after:            Thu 08 Jan 2026 14:29:07 +0000
asID:                     19905
IP address blocks:        2604:2d80:a480::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:79:ca:cc:16:b3:b8:ca:16:96:cb:ea:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct 10 13:29:07 2025 GMT
            Not After : Jan  8 14:29:07 2026 GMT
        Subject: CN=1230edfd-8847-45d5-b370-c78dddeb2c38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:d3:50:79:ce:93:d3:5b:b1:8c:e7:dd:32:e1:
                    45:64:94:2b:a8:02:fb:8b:ef:6e:1b:65:8c:94:0c:
                    0b:af:c6:44:a4:f0:7a:c2:2b:d7:3c:ce:14:1b:74:
                    72:6d:64:0e:76:1b:3e:e4:ad:60:96:70:8a:54:d8:
                    b3:dd:36:38:ff:1f:67:c8:40:13:3d:5a:6d:f0:14:
                    8f:79:6b:44:cf:67:4e:2c:cf:fe:99:50:a6:71:7b:
                    a2:11:87:cb:72:bb:7a:b5:a5:ed:6f:f2:d5:4f:78:
                    d9:0d:ee:19:b0:8e:b6:4a:a5:32:0e:c9:3e:63:40:
                    d5:6f:64:23:57:7b:a5:b5:99:91:1a:ec:5f:0a:93:
                    db:d7:cb:01:6d:2d:33:f6:7f:8f:52:5b:16:c1:68:
                    2b:e5:c6:b3:ff:9e:ba:bf:79:a0:85:a5:37:95:ac:
                    ac:63:8f:7f:f9:d2:7a:fd:a6:c5:f5:a6:75:72:0d:
                    9c:14:78:93:ad:7c:bf:ea:21:f9:2f:d6:a4:b8:48:
                    e0:a6:b8:18:3b:9b:c6:22:c1:57:f8:62:75:94:48:
                    54:08:76:e3:18:bf:7b:02:a9:d6:ed:ae:80:59:f3:
                    d8:73:c6:6a:51:ce:b3:06:7d:df:89:c6:fa:a3:f8:
                    ef:63:a5:a5:59:67:d1:73:5b:41:ce:1a:e3:cb:8b:
                    27:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:11:D6:32:9E:A1:E9:9F:9E:3B:D4:87:F5:66:AA:79:5C:C3:E9:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2284ac08-b2a8-3da7-8bde-a2317e860375.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:a480::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:76:4a:f0:0e:2b:39:32:da:e2:6e:84:f1:74:5b:43:64:85:
         cf:f2:42:16:3f:89:e4:eb:b6:9e:92:a1:8c:16:26:6d:96:fe:
         12:e5:f8:7d:24:26:36:86:eb:60:f4:43:8c:ac:d9:d4:33:2c:
         68:ef:fa:43:fd:ee:c4:af:93:10:04:e3:73:44:16:30:9d:f9:
         f6:8f:7e:da:5b:04:5e:a3:72:43:94:de:e2:9d:b0:02:54:56:
         d4:f2:6c:06:1e:73:b8:a5:6f:44:eb:9a:92:a1:3a:28:80:db:
         2e:b5:2a:45:1e:15:cd:94:cf:fe:c4:24:b3:a1:e4:d6:1e:36:
         64:89:94:75:a0:ff:cb:0a:30:db:7e:31:75:4e:4b:af:e2:b7:
         01:bb:ad:27:b0:c8:62:31:95:94:e4:8b:8d:a2:14:01:b1:3b:
         59:23:93:95:ac:0c:6b:82:fd:8b:df:c4:f7:d0:0d:94:0f:75:
         e2:6f:4b:a8:ce:79:42:25:7f:44:0a:a2:c2:0e:27:71:72:5a:
         d4:7a:c6:bd:94:ab:b1:85:88:0a:66:86:c5:50:7d:8a:49:14:
         a2:20:73:e4:15:32:bf:3d:c3:c2:2b:c0:95:bc:4d:1f:29:c8:
         65:3b:80:91:a3:59:f1:94:24:f4:4f:e6:4e:c1:2d:37:97:fc:
         c4:a3:0f:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 03:00:28 2025 by rpki-client