Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6d043f20-64a9-360c-9318-038cdf8c1d00.roa
File:                     6d043f20-64a9-360c-9318-038cdf8c1d00.roa (raw, json)
Hash identifier:          GBOV5LVXVMD+8ICch5oaEn5QA15nAP0bucu1fvF4+2s=
Subject key identifier:   A9:C6:8F:01:85:04:36:73:D1:8E:53:5B:F0:81:9E:AA:5F:E7:CF:BB
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B62021842E82432B9D42F2E80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6d043f20-64a9-360c-9318-038cdf8c1d00.roa
Signing time:             Thu 02 Oct 2025 01:00:31 +0000
ROA not before:           Thu 02 Oct 2025 01:00:31 +0000
ROA not after:            Wed 31 Dec 2025 02:00:31 +0000
asID:                     30036
IP address blocks:        2604:2d80:d600::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:62:02:18:42:e8:24:32:b9:d4:2f:2e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  2 01:00:31 2025 GMT
            Not After : Dec 31 02:00:31 2025 GMT
        Subject: CN=35bd809f-403e-4f30-a05f-a92e9eddc059
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:5e:36:d1:96:71:9f:be:49:0b:22:df:0b:a6:
                    65:46:93:00:67:e4:c2:d4:1a:d2:8b:c0:95:d0:e9:
                    e2:bd:e8:33:37:1e:d2:c6:66:84:5c:1d:6a:2f:48:
                    f4:9d:8c:52:13:7c:d5:13:e9:e9:b4:45:c6:03:30:
                    8b:4a:c8:5f:71:4a:e9:a0:e6:ea:0b:1b:18:b4:f1:
                    35:fc:92:f5:03:8f:44:4e:b7:0b:da:eb:0c:b6:1a:
                    4b:f0:f9:5d:e4:3d:ad:75:d5:f2:97:1c:f9:63:8c:
                    b0:6d:c8:42:fd:e2:22:d3:58:3b:58:c8:66:28:e9:
                    7c:1e:81:c6:0e:ba:0a:d8:4c:1b:42:18:c5:f3:44:
                    f5:33:0c:5c:f8:94:4e:4b:cd:8e:d8:9e:83:fd:8f:
                    31:dc:3b:0e:3a:7f:f3:0a:ab:d2:51:ec:5f:5e:ff:
                    d1:a0:02:d1:92:65:c3:d3:4f:20:84:b5:3a:a0:d9:
                    d7:a6:03:54:60:24:29:5f:84:0d:b3:42:54:3f:00:
                    35:fc:ca:23:27:2c:b2:fa:f9:65:3a:c6:f8:39:2e:
                    e8:18:cb:ba:7b:91:e8:37:aa:06:76:06:e1:10:2c:
                    e4:4d:75:e0:b6:62:2f:55:f3:48:e7:04:31:58:9c:
                    ca:47:e9:df:52:86:17:9f:bf:39:68:09:f9:59:5d:
                    9d:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:C6:8F:01:85:04:36:73:D1:8E:53:5B:F0:81:9E:AA:5F:E7:CF:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6d043f20-64a9-360c-9318-038cdf8c1d00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:d600::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:26:b0:dd:e2:6d:11:3b:e5:03:98:aa:71:88:24:d6:56:c1:
         cb:34:60:a1:61:cd:be:55:37:c8:7a:59:f7:25:a4:33:3e:f5:
         d4:50:58:9f:5d:5e:ba:d4:05:4a:29:f1:d5:34:63:c2:1e:4d:
         04:2b:d9:69:bb:af:bc:5e:1d:54:c6:a2:87:05:fb:0a:82:e4:
         16:16:12:1d:7f:e8:7c:51:e9:96:52:36:7a:ed:3a:21:5d:b1:
         34:15:af:b5:5b:22:b9:3b:7d:25:aa:db:78:88:79:ce:04:2c:
         d4:89:c3:06:9d:bc:f2:f2:db:13:ce:6a:e8:cd:5b:fb:79:35:
         db:11:75:0f:11:34:2f:1b:32:43:e0:d8:be:6e:54:a9:29:75:
         2e:d6:5f:2f:5e:e5:02:68:59:7f:32:37:7b:4e:2d:1f:cd:39:
         b6:e6:1c:69:32:7c:db:08:0e:92:4b:90:56:a2:5a:c6:0c:95:
         fb:13:fb:f1:39:8a:a7:40:df:20:62:80:1b:b4:71:88:19:0a:
         ac:88:b9:95:c9:80:4c:c5:89:93:7c:2c:25:4d:46:dd:ff:9b:
         81:77:97:9a:64:0e:ad:ee:f6:ef:4c:fd:ba:cb:91:1c:35:12:
         7b:b4:bd:18:36:1d:9c:b9:7f:98:24:9f:44:4d:14:11:f2:b2:
         2f:96:95:ac
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtiAhhC6CQyudQvLoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk
MzViZDgwOWYtNDAzZS00ZjMwLWEwNWYtYTkyZTllZGRjMDU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnF420ZZxn75JCyLfC6ZlRpMAZ+TC1BrSi8CV
0OnivegzNx7SxmaEXB1qL0j0nYxSE3zVE+nptEXGAzCLSshfcUrpoObqCxsYtPE1
/JL1A49ETrcL2usMthpL8Pld5D2tddXylxz5Y4ywbchC/eIi01g7WMhmKOl8HoHG
DroK2EwbQhjF80T1Mwxc+JROS82O2J6D/Y8x3DsOOn/zCqvSUexfXv/RoALRkmXD
008ghLU6oNnXpgNUYCQpX4QNs0JUPwA1/MojJyyy+vllOsb4OS7oGMu6e5HoN6oG
dgbhECzkTXXgtmIvVfNI5wQxWJzKR+nfUoYXn785aAn5WV2d1QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFKnGjwGFBDZz0Y5TW/CBnqpf58+7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNmQwNDNmMjAtNjRhOS0z
NjBjLTkzMTgtMDM4Y2RmOGMxZDAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgNYA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFYmsN3ibRE75QOYqnGIJNZWwcs0YKFhzb5VN8h6WfclpDM+9dRQ
WJ9dXrrUBUop8dU0Y8IeTQQr2Wm7r7xeHVTGoocF+wqC5BYWEh1/6HxR6ZZSNnrt
OiFdsTQVr7VbIrk7fSWq23iIec4ELNSJwwadvPLy2xPOaujNW/t5NdsRdQ8RNC8b
MkPg2L5uVKkpdS7WXy9e5QJoWX8yN3tOLR/NObbmHGkyfNsIDpJLkFaiWsYMlfsT
+/E5iqdA3yBigBu0cYgZCqyIuZXJgEzFiZN8LCVNRt3/m4F3l5pkDq3u9u9M/brL
kRw1Enu0vRg2HZy5f5gkn0RNFBHysi+Wlaw=
-----END CERTIFICATE-----
Generated at Sat Oct 11 02:43:12 2025 by rpki-client