Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/76b314a2-1ada-3cc9-93bf-0713174d9917.roa
File:                     76b314a2-1ada-3cc9-93bf-0713174d9917.roa (raw, json)
Hash identifier:          0Kq5xxc/ruCsdDAFW3IDMdKm9NlXrmoupMO2IAaygik=
Subject key identifier:   C7:EC:5C:06:54:3D:20:57:A5:33:08:61:53:EF:14:9C:89:61:26:41
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B6631E9157E05A27E0CED3D02
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/76b314a2-1ada-3cc9-93bf-0713174d9917.roa
Signing time:             Fri 03 Oct 2025 13:00:40 +0000
ROA not before:           Fri 03 Oct 2025 13:00:40 +0000
ROA not after:            Thu 01 Jan 2026 14:00:40 +0000
asID:                     30036
IP address blocks:        2604:2d81:800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:66:31:e9:15:7e:05:a2:7e:0c:ed:3d:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  3 13:00:40 2025 GMT
            Not After : Jan  1 14:00:40 2026 GMT
        Subject: CN=270c3828-0a33-4945-8469-753f8b9402e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:ac:fa:82:af:21:25:35:d2:46:6e:26:2c:0f:
                    42:c1:09:14:d8:0e:3c:1f:b8:b1:64:3f:95:19:bf:
                    d5:80:6d:59:c1:36:4c:b4:11:36:4b:9d:f7:9b:8a:
                    e2:62:82:e7:75:ba:47:76:86:75:28:66:45:20:06:
                    c6:2e:44:82:dd:03:ea:ea:11:46:bd:09:64:28:b1:
                    4b:f1:01:5a:41:16:df:8b:23:37:ad:6b:96:5a:23:
                    fb:0e:62:62:7f:fb:a4:2e:f0:7c:bc:87:a7:7b:5a:
                    32:18:01:c7:3a:6b:27:04:b4:52:fd:e2:a3:bd:a5:
                    8f:73:35:f3:73:b4:15:8f:b1:53:1e:b8:f7:e9:37:
                    f4:fe:7f:9a:33:fd:7d:9e:6e:4b:c0:5f:04:b4:24:
                    e8:43:28:6b:5d:b8:e2:b2:7d:8c:c6:48:ad:c5:32:
                    56:e1:41:df:5d:07:be:fe:23:a0:bd:e2:36:8f:a7:
                    25:e2:22:d3:aa:45:02:ce:b4:01:31:c0:6a:05:4d:
                    9e:99:1c:b0:ed:99:4e:3c:1f:65:a9:70:e1:84:29:
                    98:64:a6:05:c3:da:a6:b9:b0:fa:ca:1c:2a:b1:b8:
                    d8:3b:b2:f5:03:89:4d:82:a3:66:a4:7c:2e:34:eb:
                    bc:c5:25:43:7c:0a:c2:fa:ba:f8:cd:0b:96:b0:75:
                    77:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:EC:5C:06:54:3D:20:57:A5:33:08:61:53:EF:14:9C:89:61:26:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/76b314a2-1ada-3cc9-93bf-0713174d9917.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d81:800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:59:97:ff:4f:9c:68:b1:b5:3f:c4:30:25:c1:48:fa:8f:59:
         ff:31:6b:75:9f:21:ec:a9:94:25:0e:4d:2b:9e:2b:dd:5c:d6:
         0b:19:9f:d2:02:3c:59:fa:03:89:09:95:7f:96:ee:8b:3f:e6:
         dd:9a:18:fa:d8:d9:5f:90:2b:7d:41:ba:d5:f5:55:d1:40:0b:
         8a:ba:69:1e:aa:4c:d5:de:33:58:60:93:ba:0e:c2:d6:fe:ba:
         fd:85:ad:61:91:f0:da:1f:ac:41:ab:30:07:f0:f6:32:a8:8b:
         66:6a:4d:4a:60:f8:95:fc:b8:01:e3:4f:d7:08:6d:f6:68:81:
         68:05:4e:13:66:b1:68:17:71:da:42:96:cc:45:3e:b3:ee:71:
         62:70:69:2f:94:5b:f0:30:57:99:df:ef:88:f9:a0:ba:9a:cd:
         1f:29:30:de:e4:88:6f:8f:ba:b8:b1:5c:41:fb:67:4a:2d:7f:
         81:04:90:9f:50:63:54:18:03:3c:ac:a6:5b:99:05:2c:7f:e9:
         bf:8a:9e:69:a5:16:93:33:d1:64:f2:8c:e8:d5:8a:d5:90:46:
         46:20:bc:85:c8:c8:93:fd:98:5c:e1:c4:61:c9:5a:6b:52:e4:
         cd:30:94:7d:42:29:04:08:ae:31:4d:9d:d5:3f:9e:1f:85:78:
         f3:5f:22:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 02:52:09 2025 by rpki-client