Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7bc14c77-3dda-3d9d-8f60-1431767749c9.roa
File:                     7bc14c77-3dda-3d9d-8f60-1431767749c9.roa (raw, json)
Hash identifier:          PlKd18l8Ph3cZ2vPNVpwwp50d7o1rzdegudGwxhfgoU=
Subject key identifier:   C8:AF:FB:AE:8E:7D:56:2B:39:CB:9C:96:9B:42:FA:43:C6:89:B5:FD
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B6202283B774DC3A6B4B1DD80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7bc14c77-3dda-3d9d-8f60-1431767749c9.roa
Signing time:             Thu 02 Oct 2025 01:00:31 +0000
ROA not before:           Thu 02 Oct 2025 01:00:31 +0000
ROA not after:            Wed 31 Dec 2025 02:00:31 +0000
asID:                     30036
IP address blocks:        2604:2d80:4c00::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:62:02:28:3b:77:4d:c3:a6:b4:b1:dd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  2 01:00:31 2025 GMT
            Not After : Dec 31 02:00:31 2025 GMT
        Subject: CN=c7badb3c-f88e-42b6-b8b0-5fe135d97ed3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:4e:e7:dc:41:f2:40:11:80:50:71:c3:95:a4:
                    33:cb:2d:73:96:3e:2e:17:2a:0b:c6:f1:d8:73:e2:
                    e0:67:02:67:63:6a:44:2a:f8:3b:57:ad:a4:b8:bc:
                    ad:c5:f5:61:7a:12:01:df:9e:f4:74:cd:49:e9:da:
                    07:c8:b6:79:cc:88:91:05:f9:19:30:0b:6c:80:c6:
                    be:4b:35:34:ce:82:61:be:f8:88:9c:e0:0a:ea:aa:
                    15:c1:17:1f:60:77:8c:b8:14:a8:30:30:cf:be:ea:
                    b8:3b:3e:d1:1a:09:72:ed:85:b8:b9:ad:bf:23:98:
                    b2:79:96:b1:42:6f:4e:94:96:ad:e4:3b:df:f3:68:
                    85:55:7b:48:ec:95:24:e6:7c:bf:50:bd:cc:56:0d:
                    31:67:b4:25:00:48:b7:ae:69:02:e5:0c:ca:79:10:
                    04:dc:52:6b:b1:d3:d9:7d:06:78:c4:9c:b3:26:b9:
                    50:3d:5b:b8:41:68:28:86:c3:28:28:eb:9a:02:bc:
                    0b:aa:43:3e:2b:1b:ed:2d:98:ca:a7:65:7f:8a:e0:
                    67:0d:b0:6d:5b:1a:b0:03:fa:69:cd:b0:d8:ba:e8:
                    75:7b:b6:29:42:aa:6a:24:b4:98:8f:a6:f3:91:17:
                    44:d9:2f:aa:1d:78:8c:4f:1f:e0:d4:5f:0b:b9:fc:
                    19:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:AF:FB:AE:8E:7D:56:2B:39:CB:9C:96:9B:42:FA:43:C6:89:B5:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7bc14c77-3dda-3d9d-8f60-1431767749c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:4c00::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:eb:cf:6f:9f:53:5e:47:c4:95:4f:16:be:99:2b:81:42:11:
         3c:81:43:d0:8b:0e:07:12:3b:ac:e8:e0:de:d3:e5:ce:73:bf:
         88:31:e9:8b:37:07:92:51:06:95:4e:3e:95:a7:04:c5:e4:6c:
         33:0e:73:2e:3e:49:c7:1d:b8:fb:fc:aa:5f:1d:42:82:7f:4b:
         2d:1d:15:b8:7c:a2:f6:52:9d:1e:c9:f4:f0:e8:a6:79:4f:be:
         34:f4:05:97:e1:dd:b3:ac:8c:ea:62:25:7e:fe:f7:9f:1f:1f:
         cd:e9:fa:f0:9f:2c:8c:6f:d2:21:98:8b:bb:20:26:38:8d:da:
         3c:31:c9:62:ba:da:5d:cb:25:ed:d4:9c:bc:8e:28:87:58:7f:
         e9:1a:2a:58:bb:86:96:5a:92:9b:85:73:92:61:63:4a:b6:79:
         3d:dc:e3:3e:98:02:57:d1:71:5e:bc:44:ed:0c:bb:f2:c6:0b:
         49:d5:57:70:4e:53:96:76:1f:b8:29:58:0a:e8:97:3a:3b:8f:
         e3:c3:94:fd:fb:27:79:08:53:5b:32:c1:d4:63:59:aa:5b:60:
         56:4b:3a:ac:1b:01:a5:86:f4:cd:c2:fb:96:23:45:74:a3:27:
         ad:cd:20:27:45:41:2d:49:b5:14:32:e1:c7:1a:f6:08:46:80:
         ef:57:5e:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 02:53:52 2025 by rpki-client