Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3df22dcc-a3fe-3584-8c49-d7b2c30708b7.roa
File:                     3df22dcc-a3fe-3584-8c49-d7b2c30708b7.roa (raw, json)
Hash identifier:          yLgX6mj7+kQdxogZk4iGbjVQs2EtXFFrp28h/c0jQ84=
Subject key identifier:   95:30:AB:75:24:82:E7:CE:B9:A8:75:7E:B7:32:11:2D:F8:77:2B:6B
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B52C2614D985CAC5C320CD300
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3df22dcc-a3fe-3584-8c49-d7b2c30708b7.roa
Signing time:             Fri 26 Sep 2025 13:55:38 +0000
ROA not before:           Fri 26 Sep 2025 13:55:38 +0000
ROA not after:            Thu 25 Dec 2025 14:55:38 +0000
asID:                     19905
IP address blocks:        2604:2d80:f780::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:52:c2:61:4d:98:5c:ac:5c:32:0c:d3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 26 13:55:38 2025 GMT
            Not After : Dec 25 14:55:38 2025 GMT
        Subject: CN=cfb6c9fb-7a4c-4a3f-8237-14f72154dcb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:07:fc:aa:90:65:2b:1d:d7:fd:53:00:f0:34:
                    44:c9:6e:fe:64:09:7b:3e:85:66:de:28:43:1e:2c:
                    db:bb:08:69:49:b7:ec:90:02:96:34:05:79:56:87:
                    37:58:b9:1f:77:f3:90:1d:89:e3:7b:fb:50:fd:41:
                    d0:8a:90:65:8c:c7:e4:b8:c9:3d:a9:67:47:67:35:
                    06:81:f2:2f:a4:94:1a:37:8e:f7:85:7d:23:b5:06:
                    e3:d4:79:1e:09:29:ae:f9:06:30:8a:ff:4b:6f:22:
                    04:e4:65:79:a6:06:df:88:e2:b2:af:ee:0c:70:f5:
                    3f:ab:4b:7d:10:91:dd:ea:ad:38:08:b5:36:65:15:
                    a6:20:b3:4a:a5:2e:bf:c1:d7:4c:1b:bb:78:95:a9:
                    39:1a:3b:5b:9a:7a:61:13:3c:49:6b:6f:a0:d9:21:
                    75:b2:1f:ad:57:1d:e3:a6:ef:78:d5:c2:cb:68:1f:
                    39:65:c9:d5:60:9a:0b:21:27:63:a5:72:39:03:96:
                    b4:32:26:d0:b8:10:e4:ad:3f:2e:a1:85:b0:7a:68:
                    83:74:e5:53:a7:c9:ec:6d:5e:7f:c9:47:45:9b:27:
                    d7:98:e1:93:d1:19:94:ee:e9:20:ea:ca:ac:a1:65:
                    ee:f5:fa:1b:16:7c:b7:ee:9c:2d:12:0c:71:d5:bd:
                    1b:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:30:AB:75:24:82:E7:CE:B9:A8:75:7E:B7:32:11:2D:F8:77:2B:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3df22dcc-a3fe-3584-8c49-d7b2c30708b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:f780::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:9d:85:47:f9:1a:d3:f9:f4:9a:ac:ec:67:15:2b:3c:6b:b3:
         1d:fa:83:6b:1f:a4:9c:b3:24:a9:a7:51:df:0a:0a:a8:ff:51:
         c5:03:9a:ab:d4:d5:4d:0b:50:e0:fd:30:98:0b:9c:1b:e1:d7:
         3d:68:73:5f:4f:cc:2d:6c:8b:e4:06:24:ea:29:68:62:d9:dd:
         51:1b:7d:0c:fe:71:e5:dc:e5:1c:84:31:14:fc:03:55:04:15:
         e7:a9:d6:28:7c:5d:c8:45:48:3e:d5:bf:8e:71:ed:86:3a:70:
         25:3e:58:bd:5e:91:22:e5:80:de:67:c2:d1:a0:0f:b6:2f:b5:
         3e:e1:87:38:af:d1:a8:a7:8c:25:7f:2a:3b:c2:a1:b9:e2:d5:
         12:08:2b:84:46:49:bf:dd:b3:69:51:d5:0c:80:7c:65:be:80:
         9f:76:c5:26:5f:5d:20:18:13:2b:6f:14:8a:9f:cc:78:1b:f8:
         85:be:4c:32:35:6e:2a:8a:07:ae:07:b9:58:35:8d:0b:0c:44:
         0f:2c:8a:43:80:8c:d0:00:d6:dc:f0:5b:fc:79:c6:38:0c:cf:
         6a:b6:0b:4d:ce:86:a2:ff:f0:ce:39:0c:64:e0:ea:c0:98:36:
         89:bf:73:18:59:6c:7d:f1:49:db:0b:2b:f5:df:61:9c:42:08:
         fe:6b:fe:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 03:00:32 2025 by rpki-client