Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/73b43347-6fb9-3488-a979-4768613d4993.roa
File:                     73b43347-6fb9-3488-a979-4768613d4993.roa (raw, json)
Hash identifier:          ZparKJafxzTIW7rJp7QIDVJxeYnV7EBg8dosJC9wKU0=
Subject key identifier:   0C:C3:CD:41:B3:83:CF:82:F3:52:9D:8E:8D:50:EF:8C:48:43:D8:73
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B2E5C5994F1861B4BA9B2B480
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/73b43347-6fb9-3488-a979-4768613d4993.roa
Signing time:             Sat 13 Sep 2025 13:00:41 +0000
ROA not before:           Sat 13 Sep 2025 13:00:41 +0000
ROA not after:            Fri 12 Dec 2025 14:00:41 +0000
asID:                     19905
IP address blocks:        2604:2d81:1400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2e:5c:59:94:f1:86:1b:4b:a9:b2:b4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 13 13:00:41 2025 GMT
            Not After : Dec 12 14:00:41 2025 GMT
        Subject: CN=cf24f865-977a-4125-a577-43bed9b7f5c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:7b:57:80:43:31:15:b5:b9:e8:4b:19:cf:19:
                    25:68:7e:ae:4b:d8:48:17:4a:10:49:74:03:f8:36:
                    8e:fc:51:81:89:85:12:8d:49:a7:8f:27:fb:40:ac:
                    5c:f1:63:9b:0d:26:e8:f0:87:5a:b9:de:44:93:7a:
                    7c:f3:8e:82:88:27:08:a6:f2:d7:af:23:11:35:26:
                    44:89:53:26:cb:4a:3f:2c:49:8e:dd:94:19:96:c7:
                    6f:d7:83:20:7e:e2:46:af:a5:8b:7a:05:43:85:4c:
                    ff:35:7d:e9:c0:88:8e:30:a8:65:87:79:a4:48:4c:
                    26:47:70:ac:a3:11:12:78:c9:5e:14:ae:c0:20:29:
                    7a:b3:9a:0d:03:38:d2:fc:a9:94:21:b5:9d:78:c0:
                    4f:c7:af:24:c1:5d:04:11:40:31:5b:dd:2f:67:df:
                    fb:1f:7a:ca:6a:b6:09:78:f9:be:45:e3:5a:7e:bd:
                    29:36:c1:88:85:57:7c:02:ce:1e:e6:90:7c:87:62:
                    e7:41:f6:1c:0d:03:09:d3:26:06:b3:43:73:66:6c:
                    74:df:9d:06:e4:8f:a3:fc:b7:c2:0a:bd:2c:ce:ba:
                    22:de:0f:98:81:c3:95:fb:8c:47:f7:0c:fb:4a:16:
                    d9:59:b4:a3:08:88:a9:3a:4a:c3:a5:b3:04:24:fb:
                    cc:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:C3:CD:41:B3:83:CF:82:F3:52:9D:8E:8D:50:EF:8C:48:43:D8:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/73b43347-6fb9-3488-a979-4768613d4993.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d81:1400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:ea:e2:bd:c6:93:b4:98:5e:90:d9:4f:ad:82:32:f3:74:33:
         8c:cb:5c:50:a5:99:e9:62:f2:2a:58:97:49:4d:6e:9e:69:dc:
         4d:45:5f:6b:54:6b:83:3c:e9:ca:a6:e7:4d:63:a5:ee:ed:af:
         48:5b:69:10:6a:a0:80:a8:de:b4:05:3f:a5:96:23:4d:ba:8f:
         7c:33:ba:a6:9f:cf:0d:4f:4f:fb:2a:b0:e6:84:df:7f:6e:a7:
         73:d2:24:70:e7:56:e8:3c:5b:ad:22:91:30:24:ee:a7:13:ac:
         a2:93:d1:0e:fa:32:0e:7e:c2:9e:3e:02:97:b3:7c:7f:d5:f1:
         a7:11:3a:0f:f0:42:00:be:5f:2e:63:a8:f3:bc:eb:75:ee:e5:
         80:27:e9:6d:d2:df:48:ed:cb:66:1b:54:b3:7d:fc:04:b3:7e:
         03:f9:9d:37:95:28:36:a1:73:1e:cd:f8:70:62:98:5c:9f:4c:
         71:8c:9b:ef:cc:24:25:e5:d5:fb:69:33:c5:97:d7:b7:55:ef:
         35:ab:b8:10:b3:e7:36:2e:29:fc:86:a7:19:87:29:8f:f9:6d:
         bd:45:32:04:e1:4c:e8:73:36:21:c1:cc:78:b5:03:68:be:89:
         0d:da:3d:d0:c2:87:1d:7a:71:0b:48:bb:61:75:c4:c0:c7:de:
         1a:de:a1:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 02:56:28 2025 by rpki-client