Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/37110892-9cb7-3537-a6df-4fabe8462b17.roa
File:                     37110892-9cb7-3537-a6df-4fabe8462b17.roa (raw, json)
Hash identifier:          MW2NSUyl2VqKK5ltyep94aSFWxRefdvRCtDpeSA1Pz0=
Subject key identifier:   3B:6A:BD:39:7A:3E:CE:47:B0:A6:9E:60:3E:C9:BE:1A:22:C8:65:1D
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B6797F0B2BD6403BE1119DF00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/37110892-9cb7-3537-a6df-4fabe8462b17.roa
Signing time:             Sat 04 Oct 2025 01:00:33 +0000
ROA not before:           Sat 04 Oct 2025 01:00:33 +0000
ROA not after:            Fri 02 Jan 2026 02:00:33 +0000
asID:                     30036
IP address blocks:        2604:2d80:9400::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:67:97:f0:b2:bd:64:03:be:11:19:df:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  4 01:00:33 2025 GMT
            Not After : Jan  2 02:00:33 2026 GMT
        Subject: CN=c46f555c-69e5-4208-a39f-e4bd73d85628
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d8:6a:79:d5:46:39:42:ca:1b:7d:ab:56:e4:
                    97:2f:be:23:fb:fa:be:93:66:cf:39:9e:7f:48:d7:
                    3d:19:ce:82:3c:52:45:09:ca:12:7e:39:57:00:e2:
                    42:90:0c:ae:99:2b:18:28:76:c9:72:42:c9:d4:50:
                    f4:c5:79:6f:3d:35:93:a4:56:43:bb:63:52:ce:26:
                    3d:f4:b1:97:a5:4e:92:96:0b:d9:5a:04:7e:49:0d:
                    11:de:79:bf:d1:3a:67:9a:2c:88:3d:be:f8:00:97:
                    28:f5:e8:25:fe:93:1b:32:a5:62:2c:96:9c:e1:f6:
                    29:e5:09:4b:7b:47:95:57:5b:2b:7f:e8:b6:28:c6:
                    19:43:46:62:8f:a6:37:ee:94:27:21:24:d3:85:98:
                    fd:45:ca:d3:07:1c:fb:0c:44:e7:35:d1:4d:13:73:
                    02:16:a0:42:d8:d7:9c:20:20:c6:e5:1d:9b:bb:67:
                    9a:94:7c:87:b5:00:3e:26:9c:1a:b4:e4:2f:0c:3f:
                    62:c1:55:53:d2:ea:b7:3f:b4:c8:f1:57:f5:6a:23:
                    8b:f4:4c:98:09:d9:4f:5d:ab:cc:27:49:96:a8:23:
                    d8:28:f9:60:d3:88:d5:57:03:be:12:cc:ee:90:00:
                    59:c8:7c:18:d9:06:78:e6:ca:f8:97:2f:56:30:d4:
                    f2:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:6A:BD:39:7A:3E:CE:47:B0:A6:9E:60:3E:C9:BE:1A:22:C8:65:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/37110892-9cb7-3537-a6df-4fabe8462b17.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:9400::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:78:e1:ff:7f:fc:84:cb:e8:dd:94:a3:47:53:a7:7a:43:a1:
         f4:bf:2c:45:7a:dc:32:6e:44:f8:8a:d0:d0:4d:5f:5d:81:dd:
         72:b7:52:ed:a5:cc:c3:21:75:73:83:fd:9d:73:c5:ac:ae:ec:
         96:a6:92:d0:62:a8:b5:ed:c1:92:f9:b2:4c:d7:74:ea:2b:ac:
         ea:9a:53:1e:34:6e:bf:d5:87:31:81:01:03:43:9a:4e:e8:cb:
         50:5c:1b:c2:27:9f:d9:09:21:dc:8d:16:88:7c:9f:ae:c9:6b:
         d5:e6:95:57:24:c9:c6:08:70:5c:bd:8e:4e:14:0c:87:d5:5d:
         2e:03:0a:38:c7:f7:ff:bf:b9:53:78:bd:c2:89:7a:f3:53:d6:
         14:c4:4a:05:b0:de:bd:5f:be:8c:48:94:08:8f:14:ab:63:37:
         e2:5b:85:e1:9f:60:5f:a3:2f:88:1b:4a:5a:f5:98:ed:a8:23:
         be:83:ee:4f:60:71:18:04:a5:09:e3:92:54:81:ce:d1:23:f3:
         6a:06:e4:05:67:e4:53:fa:bc:27:ff:2a:b5:cb:ed:a1:0a:26:
         bb:5e:ef:27:c6:b5:01:ee:70:55:44:c2:bf:bc:7f:38:cb:e6:
         5a:c7:38:ea:16:28:3d:20:47:b0:2d:17:b7:99:5c:82:cf:a0:
         44:ed:95:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 02:50:09 2025 by rpki-client