Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2c086c93-996f-33d5-a43f-da04919abcd7.roa
File:                     2c086c93-996f-33d5-a43f-da04919abcd7.roa (raw, json)
Hash identifier:          rPOGnq5pVM+C0n1YyQK0iMnh5nJGMMJGdXK9cXyflMM=
Subject key identifier:   AF:2A:20:2A:33:0D:1E:B0:19:B6:74:D5:D0:73:D2:05:F5:A0:E2:4F
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B0CDC01FF058D1977A637B350
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2c086c93-996f-33d5-a43f-da04919abcd7.roa
Signing time:             Mon 01 Sep 2025 13:00:40 +0000
ROA not before:           Mon 01 Sep 2025 13:00:40 +0000
ROA not after:            Sun 30 Nov 2025 14:00:40 +0000
asID:                     30036
IP address blocks:        2604:2d80:dc00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0c:dc:01:ff:05:8d:19:77:a6:37:b3:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep  1 13:00:40 2025 GMT
            Not After : Nov 30 14:00:40 2025 GMT
        Subject: CN=ea921e3b-ef4c-45e8-8ba2-53ef57bbc470
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:72:a9:63:dc:da:be:31:a3:aa:ab:e5:cb:7e:
                    23:fe:8d:13:21:09:be:aa:1e:ec:31:51:b4:1b:25:
                    33:a3:e9:f9:1b:b8:75:b8:6d:de:e9:33:9d:21:8b:
                    de:78:93:83:3c:4e:cf:fe:80:e4:aa:ed:21:59:39:
                    ab:95:24:b4:ad:10:ac:74:13:d8:35:df:82:9a:d2:
                    66:11:20:90:50:d3:63:a7:bf:33:b2:c7:78:37:d0:
                    89:6f:1b:19:ce:67:43:43:1a:1f:ed:70:72:a8:72:
                    6d:0d:34:05:48:62:83:f5:1d:54:4d:82:cb:8f:2d:
                    e2:6c:5a:d0:fa:3b:a5:43:9e:88:62:d3:45:03:a7:
                    20:ac:c9:e9:20:30:19:39:a9:33:60:fb:3b:41:77:
                    d5:24:e6:1d:7d:d6:1d:c7:57:e6:f4:a2:34:f8:6f:
                    80:ab:63:58:d9:b5:fd:38:e3:e0:94:7b:63:89:56:
                    33:72:37:6f:9e:7e:68:42:c4:4d:82:11:5f:07:76:
                    cf:44:be:78:ff:e4:3b:bd:64:e5:67:b4:eb:66:d5:
                    0a:de:4b:2c:85:7e:a5:c9:59:35:bc:ca:72:4d:6d:
                    ea:77:f6:7b:c0:68:db:50:92:1e:0e:03:eb:e5:85:
                    57:8d:0a:c6:aa:2f:a5:e9:ff:57:f1:d9:5a:1d:b6:
                    eb:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:2A:20:2A:33:0D:1E:B0:19:B6:74:D5:D0:73:D2:05:F5:A0:E2:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2c086c93-996f-33d5-a43f-da04919abcd7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:dc00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:16:c8:b9:59:af:c9:21:cb:75:e6:aa:6c:b2:a4:36:4a:30:
         68:16:06:dd:0e:81:a6:44:97:fd:4e:8e:38:78:da:3d:6a:44:
         ac:26:a6:66:52:5b:8b:bc:15:8e:39:f5:3f:3f:5e:0d:a8:db:
         3a:2c:ff:1b:4a:5a:f7:8b:d9:f4:ec:47:62:ea:29:f3:67:71:
         0e:6b:c2:d9:49:a0:bf:1c:0f:2b:43:f3:0d:b8:0b:d3:63:ee:
         49:ba:d9:0c:e8:79:04:99:ab:88:41:3e:aa:ac:09:89:e0:ea:
         16:24:94:05:14:5c:ee:69:41:d5:6d:14:07:0c:f7:6b:00:bc:
         93:79:23:91:ea:54:75:a0:db:b4:b8:5a:08:5c:82:e0:29:93:
         64:e8:aa:b2:71:89:d0:80:f2:75:cc:02:24:9b:5a:2a:a2:77:
         3e:0b:09:06:b1:d9:b2:17:47:fc:a3:a9:db:60:bb:48:4b:e4:
         9b:4b:ad:e4:af:56:b0:f8:9f:2c:77:cb:d8:04:18:b4:18:d0:
         6c:92:99:0e:b6:3f:c9:00:43:4e:b9:03:27:0e:0d:d9:d2:27:
         e8:cd:fe:87:6f:ae:a7:2d:03:05:3d:3d:38:0f:07:da:a0:13:
         bf:12:81:38:04:36:45:71:b7:d2:32:6d:f3:f9:26:9d:83:d0:
         08:26:42:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 02:48:28 2025 by rpki-client