Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2d9e0001-4453-32f7-9672-5f03e81e875f.roa
File:                     2d9e0001-4453-32f7-9672-5f03e81e875f.roa (raw, json)
Hash identifier:          3A8iIepvWWbi6lRQTHXsebYdiYmmYfvpJtuY2YvFAns=
Subject key identifier:   C7:27:55:EE:97:F0:80:77:84:62:60:12:3F:04:32:0C:10:F7:03:56
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B679734331095D9608FFD7680
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2d9e0001-4453-32f7-9672-5f03e81e875f.roa
Signing time:             Sat 04 Oct 2025 01:00:33 +0000
ROA not before:           Sat 04 Oct 2025 01:00:33 +0000
ROA not after:            Fri 02 Jan 2026 02:00:33 +0000
asID:                     30036
IP address blocks:        2604:2d80:2900::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:67:97:34:33:10:95:d9:60:8f:fd:76:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  4 01:00:33 2025 GMT
            Not After : Jan  2 02:00:33 2026 GMT
        Subject: CN=74560726-b9b8-4991-af0f-2cb0512155e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:00:48:77:a7:b9:26:18:16:83:52:f6:1b:60:
                    3f:99:f6:9d:7b:f0:f6:1c:98:04:5b:6d:ea:63:c7:
                    df:2f:08:c6:3a:db:00:6a:82:d4:c4:89:64:2a:01:
                    b7:5f:01:da:58:54:ee:3a:14:ad:03:7a:84:b8:e5:
                    08:db:b5:22:f1:49:11:d8:68:a5:84:c8:ef:87:19:
                    ef:63:5a:b3:54:67:0d:bd:a9:f8:ae:31:af:24:92:
                    61:a5:c1:97:06:a4:77:78:ad:e1:2c:75:7a:e0:d1:
                    07:94:41:ea:77:1e:b6:50:8c:72:42:64:af:98:40:
                    28:7f:94:65:da:92:61:af:fa:71:9c:80:a7:8c:fd:
                    be:14:7e:84:ca:af:9f:b0:6f:12:92:15:3e:23:39:
                    82:c7:0a:0c:d3:48:9f:bc:78:70:df:b0:b4:7f:b5:
                    22:a4:11:15:1b:16:52:9d:ec:83:c6:2b:36:a8:b1:
                    a9:55:ec:96:47:ca:b8:40:74:8d:15:00:8e:ff:58:
                    6a:de:f9:76:55:21:67:9a:43:b1:5c:8c:43:75:8e:
                    ec:ef:53:a3:ee:f7:e6:8d:95:74:3b:70:99:73:95:
                    d0:bd:17:8f:1e:50:1e:67:10:f8:c3:72:00:16:65:
                    71:93:aa:29:17:d8:8f:7c:d0:a8:16:0b:5b:1a:a8:
                    97:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:27:55:EE:97:F0:80:77:84:62:60:12:3F:04:32:0C:10:F7:03:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2d9e0001-4453-32f7-9672-5f03e81e875f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:2900::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:d9:71:cd:b3:28:3c:20:06:04:1b:e2:95:2e:62:b5:c6:03:
         de:67:10:f6:85:f8:ac:41:59:ac:18:e8:b9:09:ce:d7:b4:8a:
         ba:cf:d2:8a:f3:5d:bf:1a:01:55:b5:07:b9:7c:1b:dd:33:8c:
         5f:8c:3b:2f:36:4b:6e:a1:78:55:56:1d:0e:31:9a:9e:22:9b:
         a6:04:ec:5a:55:9c:55:8c:b1:d1:aa:10:d1:e7:ad:03:cf:1d:
         c1:3e:32:cc:e8:2b:f4:36:f2:e2:66:6b:de:04:fd:5c:f3:e0:
         1a:f1:1c:62:21:3d:e5:4a:50:e8:73:b3:b3:d4:17:81:3a:d5:
         93:f8:e0:3e:ab:4b:0e:db:4b:1a:da:90:bb:1d:aa:6d:d4:c5:
         f1:b5:c2:58:ff:e0:59:3f:40:e9:0c:69:5a:4d:4e:c3:ca:06:
         57:d6:3f:68:06:39:90:22:93:1d:18:99:83:93:62:0e:1b:3e:
         5b:51:1a:87:55:ac:1d:63:23:5a:a3:ab:93:c4:c2:fc:a9:00:
         5f:fb:63:7e:2e:b0:0d:ec:11:ff:77:2e:b8:7b:41:31:5d:77:
         6e:56:ad:0e:a6:82:81:15:fc:32:c1:d7:20:82:93:14:1a:f6:
         06:b8:7f:6f:41:6a:a8:df:66:20:a7:d6:29:0e:7b:91:cd:0e:
         74:f8:5e:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 02:52:13 2025 by rpki-client