Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/53c7100e-a98c-3977-bf5d-e55b43fc049d.roa
File:                     53c7100e-a98c-3977-bf5d-e55b43fc049d.roa (raw, json)
Hash identifier:          0H74eDv70d/xMtHej7hICm2ilLd+aLgSfrahXiMyCjE=
Subject key identifier:   91:C6:70:CE:AE:A7:14:59:31:B7:B0:11:6F:BC:7F:20:31:FF:22:DD
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B782180B863513FA27D14E870
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/53c7100e-a98c-3977-bf5d-e55b43fc049d.roa
Signing time:             Thu 09 Oct 2025 23:12:12 +0000
ROA not before:           Thu 09 Oct 2025 23:12:12 +0000
ROA not after:            Thu 08 Jan 2026 00:12:12 +0000
asID:                     19905
IP address blocks:        2604:2d80:80::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:78:21:80:b8:63:51:3f:a2:7d:14:e8:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  9 23:12:12 2025 GMT
            Not After : Jan  8 00:12:12 2026 GMT
        Subject: CN=c53434e6-d4fd-44b6-88ce-ea7d1b1737a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:50:eb:38:91:f4:73:7f:50:a4:00:2d:dd:28:
                    35:80:6e:5b:c1:b2:8b:46:38:8e:52:e6:11:80:e6:
                    45:42:aa:16:31:ab:bd:70:76:32:a7:d4:a4:d8:fd:
                    5e:d0:55:97:01:d8:c4:d2:db:95:12:cf:b9:64:63:
                    e9:dc:a8:08:5b:be:33:e5:37:0e:11:c6:64:45:61:
                    5b:64:83:2c:77:2e:3d:95:82:1d:ab:bf:45:c1:de:
                    a8:f4:1f:55:dd:fe:8c:55:cb:5d:c5:c8:19:78:27:
                    db:85:1b:b5:dc:66:ef:b2:0b:da:0c:99:56:d6:d1:
                    cb:05:44:0a:fa:4b:41:ac:76:3e:79:f9:38:26:09:
                    45:d0:01:ba:3f:53:d4:b1:28:a6:07:83:48:6a:e4:
                    b9:fe:b3:c0:e4:17:94:cd:36:d1:61:1c:3c:69:69:
                    02:ba:88:10:f8:0e:f6:45:36:6d:03:a5:8a:6f:4c:
                    b7:bd:51:e6:92:5d:62:e8:a1:15:4b:bb:f6:fc:f8:
                    4b:46:41:83:7c:9b:59:08:d6:b0:fb:06:45:85:c5:
                    bb:b4:dc:ce:92:b3:30:e6:5e:0c:db:47:14:c9:c8:
                    51:2f:00:0e:26:8e:03:dc:76:1e:25:20:6b:d9:a2:
                    98:1d:55:0d:60:cc:0e:c7:32:4c:d5:d0:43:9d:f5:
                    57:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:C6:70:CE:AE:A7:14:59:31:B7:B0:11:6F:BC:7F:20:31:FF:22:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/53c7100e-a98c-3977-bf5d-e55b43fc049d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:80::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:b2:24:68:c1:4d:15:19:cf:d1:6d:28:61:97:d6:4c:b4:a2:
         8f:61:ad:96:41:41:d1:2c:3a:c3:7b:35:d5:f4:26:17:56:b7:
         13:82:25:88:2f:fa:a2:8a:94:77:86:56:27:af:61:89:a0:7a:
         35:04:50:bc:98:68:0b:e3:ef:41:1f:f0:96:78:11:80:41:aa:
         95:0b:6a:84:1e:9f:46:c7:eb:00:ab:ba:88:cb:f5:b5:92:23:
         7f:fd:1d:b5:40:44:0d:e5:3c:a2:1c:4e:ed:ba:a6:cd:87:22:
         92:92:7b:49:bc:8b:a5:53:f0:93:b7:25:ea:77:9c:8b:04:1c:
         e2:fc:07:1e:da:b0:f2:f0:e0:24:e1:a8:ff:fc:34:93:c2:6d:
         29:1f:ac:8c:8d:1a:85:05:5c:37:10:4d:15:5e:f8:8c:07:44:
         c4:31:fa:48:9f:00:78:53:96:e2:a7:45:51:a7:4e:69:66:fa:
         0a:75:64:5a:0f:8e:d6:b3:1c:7e:2a:0b:ee:d3:2d:28:7c:fa:
         8f:a7:33:69:69:a1:c4:fc:c6:ad:59:3a:43:87:13:c5:55:f3:
         57:91:0e:52:24:df:f2:d2:97:84:db:0a:33:e3:e7:99:5d:ad:
         6d:4d:55:fe:04:41:aa:ad:36:df:8e:f2:0b:f3:c7:b6:e3:e2:
         66:ba:64:4c
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEt4IYC4Y1E/on0U6HAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MTAwOTIzMTIxMloXDTI2MDEwODAwMTIxMlowLzEtMCsGA1UEAxMk
YzUzNDM0ZTYtZDRmZC00NGI2LTg4Y2UtZWE3ZDFiMTczN2E5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmlDrOJH0c39QpAAt3Sg1gG5bwbKLRjiOUuYR
gOZFQqoWMau9cHYyp9Sk2P1e0FWXAdjE0tuVEs+5ZGPp3KgIW74z5TcOEcZkRWFb
ZIMsdy49lYIdq79Fwd6o9B9V3f6MVctdxcgZeCfbhRu13GbvsgvaDJlW1tHLBUQK
+ktBrHY+efk4JglF0AG6P1PUsSimB4NIauS5/rPA5BeUzTbRYRw8aWkCuogQ+A72
RTZtA6WKb0y3vVHmkl1i6KEVS7v2/PhLRkGDfJtZCNaw+wZFhcW7tNzOkrMw5l4M
20cUychRLwAOJo4D3HYeJSBr2aKYHVUNYMwOxzJM1dBDnfVXrQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJHGcM6upxRZMbewEW+8fyAx/yLdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNTNjNzEwMGUtYTk4Yy0z
OTc3LWJmNWQtZTU1YjQzZmMwNDlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgACA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAuyJGjBTRUZz9FtKGGX1ky0oo9hrZZBQdEsOsN7NdX0JhdWtxOC
JYgv+qKKlHeGVievYYmgejUEULyYaAvj70Ef8JZ4EYBBqpULaoQen0bH6wCruojL
9bWSI3/9HbVARA3lPKIcTu26ps2HIpKSe0m8i6VT8JO3Jep3nIsEHOL8Bx7asPLw
4CThqP/8NJPCbSkfrIyNGoUFXDcQTRVe+IwHRMQx+kifAHhTluKnRVGnTmlm+gp1
ZFoPjtazHH4qC+7TLSh8+o+nM2lpocT8xq1ZOkOHE8VV81eRDlIk3/LSl4TbCjPj
55ldrW1NVf4EQaqtNt+O8gvzx7bj4ma6ZEw=
-----END CERTIFICATE-----
Generated at Sat Oct 11 03:00:44 2025 by rpki-client