Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/798dfb5a-1430-3782-912d-11ebfece5576.roa
File:                     798dfb5a-1430-3782-912d-11ebfece5576.roa (raw, json)
Hash identifier:          rfva+G1dwWGdCInFKCMjbJ7iyhDNQWSaZnCFifJzg6M=
Subject key identifier:   7F:54:E4:6C:4B:D3:58:07:4B:BB:2C:8F:AB:7A:40:8C:94:A7:62:F3
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B66B628A182621B8546A2D6E0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/798dfb5a-1430-3782-912d-11ebfece5576.roa
Signing time:             Fri 03 Oct 2025 17:27:11 +0000
ROA not before:           Fri 03 Oct 2025 17:27:11 +0000
ROA not after:            Thu 01 Jan 2026 18:27:11 +0000
asID:                     19905
IP address blocks:        2604:2d80:5180::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:66:b6:28:a1:82:62:1b:85:46:a2:d6:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  3 17:27:11 2025 GMT
            Not After : Jan  1 18:27:11 2026 GMT
        Subject: CN=5f0060ef-9c43-466a-85b3-cbce7e3218ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:eb:1e:ca:fc:d4:22:7c:40:04:2d:4f:92:9d:
                    bf:74:4c:79:10:f6:1f:20:e0:ab:eb:3b:e5:2d:b0:
                    7e:3a:be:de:e8:bb:3b:7a:6a:d9:e4:8e:41:60:dc:
                    51:a3:ab:80:b9:f6:a4:84:69:4d:83:0e:af:bf:8f:
                    fa:0d:fa:18:c6:83:12:40:77:fc:3b:25:b7:93:d9:
                    db:41:dc:24:d6:91:5a:9f:79:71:c0:a0:e6:a3:b7:
                    b1:18:d2:25:d7:8e:57:3b:e3:20:45:84:33:d2:0b:
                    2a:65:bb:7d:4c:bf:f2:2a:41:31:33:f9:02:f3:0b:
                    10:b5:cc:c3:51:c3:96:da:3d:16:47:47:ae:b1:0d:
                    1d:e6:e0:d0:76:e8:75:37:f6:6b:6d:bd:bd:00:4d:
                    7c:39:cd:a7:d9:52:32:6e:ca:b2:ef:95:82:5e:1a:
                    cd:c6:4f:5a:eb:2c:90:68:37:ea:b7:d0:bb:b8:4c:
                    73:48:09:6b:cb:ff:36:ec:22:2b:76:86:7d:37:30:
                    e2:0e:97:09:5d:58:21:55:8b:d4:17:90:4c:6f:b4:
                    96:e7:18:c8:b7:36:62:a9:09:31:a9:a5:8d:b5:ce:
                    7e:d0:d1:3a:18:10:4e:50:e5:59:c2:38:41:25:d8:
                    6c:3d:2c:80:11:53:82:b8:2e:fd:e3:ed:35:15:52:
                    af:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:54:E4:6C:4B:D3:58:07:4B:BB:2C:8F:AB:7A:40:8C:94:A7:62:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/798dfb5a-1430-3782-912d-11ebfece5576.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:5180::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:8a:aa:f4:68:aa:6d:60:bc:dc:a0:d6:72:9a:61:7a:79:5f:
         98:11:e0:d7:01:6a:31:3e:29:3c:fe:9a:a9:18:1f:f2:ef:e0:
         04:51:5d:b5:23:8f:3f:c3:81:4a:cb:53:f4:12:ad:ab:8f:e0:
         05:b6:74:c8:03:d2:59:d5:c6:68:9d:ab:c8:9d:c0:ca:0d:21:
         65:83:5b:cd:28:78:93:c5:06:79:48:8e:ec:a8:23:7d:5d:6b:
         dc:1d:c3:cb:4b:ce:c9:ff:80:f5:7c:29:6f:58:51:ed:8f:f3:
         6c:fd:e8:a8:52:ee:28:f0:b7:e2:f7:21:72:69:ad:d1:bd:82:
         0f:0c:3b:28:cb:be:da:0c:74:9f:fc:f3:25:43:07:1b:9a:cb:
         2c:f2:c0:88:c5:18:d0:7a:0b:c1:0b:1c:19:eb:51:cd:fb:31:
         1f:94:8f:cd:22:7a:20:2d:23:46:f0:80:ad:5d:1a:90:23:0a:
         7e:40:56:64:b3:7f:da:81:9d:a7:c0:d0:ea:fb:cd:b0:70:13:
         53:b5:72:38:96:f6:c4:27:f3:e8:7b:f8:63:55:e1:04:1c:d8:
         cf:8c:65:90:5d:ab:4a:0f:ad:53:4b:0e:45:3a:86:1e:dc:44:
         68:85:b5:34:1a:c6:34:9d:6e:74:55:28:26:cd:80:10:51:21:
         70:d6:04:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 02:45:30 2025 by rpki-client