Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/501fada4-a173-311e-aeeb-b587842c0207.roa
File:                     501fada4-a173-311e-aeeb-b587842c0207.roa (raw, json)
Hash identifier:          sCeQ+A1QW8zHFTqqp3GRy89fLnX2xAai50Wix6P9HjU=
Subject key identifier:   1E:3A:9E:85:97:59:0D:56:A4:42:E9:D2:31:0B:92:98:40:B0:36:8E
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B79CADBF0E0106B3B0810F880
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/501fada4-a173-311e-aeeb-b587842c0207.roa
Signing time:             Fri 10 Oct 2025 13:29:15 +0000
ROA not before:           Fri 10 Oct 2025 13:29:15 +0000
ROA not after:            Thu 08 Jan 2026 14:29:15 +0000
asID:                     19905
IP address blocks:        2604:2d80:d480::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:79:ca:db:f0:e0:10:6b:3b:08:10:f8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct 10 13:29:15 2025 GMT
            Not After : Jan  8 14:29:15 2026 GMT
        Subject: CN=53218ee7-cbba-4d7c-95cc-87f53190b999
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:8a:97:e8:dc:eb:44:26:9b:e1:f6:13:41:4c:
                    72:4d:c8:af:0b:04:90:2c:5b:54:13:b3:78:0c:1c:
                    c7:ba:92:66:5b:16:57:71:9d:ae:5a:bd:a5:07:0a:
                    cc:89:c5:d9:b1:5d:55:cf:3c:0f:99:73:eb:89:cd:
                    26:57:f3:8a:31:dc:9d:99:3c:17:04:2e:5e:35:00:
                    28:bd:83:b6:4c:7c:df:75:7a:1d:b2:83:66:3d:d0:
                    13:36:d0:ce:9c:a5:9c:4f:db:fd:d3:a3:26:b4:c9:
                    5e:84:c2:36:b0:d7:f3:61:2b:7f:51:00:34:0d:63:
                    22:2f:ac:1f:fd:55:61:91:2b:c4:52:08:6a:a2:fe:
                    0c:4e:6e:d3:ab:46:ed:6c:98:e9:8e:b3:d3:b3:ea:
                    a8:29:8b:d0:4a:16:f4:e8:cb:50:81:1d:bb:b5:1a:
                    01:f1:3f:62:a6:bb:26:98:ce:e9:7a:f2:5e:fb:cf:
                    e3:e6:17:26:28:c9:41:d7:ef:ea:e3:52:33:65:e8:
                    de:01:79:5e:62:c8:fd:3f:72:aa:56:64:14:1b:d4:
                    74:ef:64:f2:47:5c:b0:d2:2f:8e:fc:ca:64:b3:0a:
                    fb:51:da:6d:09:7c:69:b7:b1:88:bd:1c:4f:12:26:
                    14:f8:5c:f8:17:bd:7d:ab:58:5d:ef:65:f4:e6:81:
                    a1:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:3A:9E:85:97:59:0D:56:A4:42:E9:D2:31:0B:92:98:40:B0:36:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/501fada4-a173-311e-aeeb-b587842c0207.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:d480::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:a9:90:d2:9f:ec:68:3f:58:51:4f:13:5e:88:9a:67:f4:1b:
         f0:db:79:ed:e9:00:66:62:94:d1:e8:c5:42:a0:ef:5a:cc:95:
         05:43:16:08:f2:09:da:f9:15:eb:ba:6f:80:7a:d1:08:d5:6f:
         b9:65:95:83:a1:0e:73:51:af:34:65:ef:3c:49:c3:bc:ca:45:
         b4:de:9d:16:08:4b:71:e9:ea:36:6a:1c:aa:db:72:53:f2:46:
         6f:89:80:fa:15:40:d5:be:85:0d:6b:a1:d0:53:84:6d:7e:d6:
         9a:4c:31:ca:1e:20:20:14:53:f3:62:db:a4:ed:7f:fe:a3:1b:
         0d:3c:14:8c:4d:c1:b9:6c:05:19:e8:3a:8b:0b:22:fe:cb:12:
         9c:4e:23:60:2f:99:4c:42:1c:88:51:9d:d0:d3:02:c4:24:8a:
         57:46:e4:f5:b9:de:20:02:c6:4d:29:18:35:a7:a3:f7:76:bc:
         63:0e:7c:2e:c4:49:c3:0b:23:a3:6a:30:4e:54:4d:a0:8d:9f:
         64:48:60:0b:5f:fb:bf:3d:18:62:8f:77:6a:e1:bf:75:60:04:
         3e:3e:a7:2a:ba:eb:c3:86:34:d9:31:94:0a:60:8f:7b:e9:97:
         a0:e2:f9:10:b8:f9:45:41:7b:0e:63:1a:57:f3:b9:0e:15:72:
         9e:b1:6f:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 03:00:37 2025 by rpki-client