Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/81d1850b-d93c-3956-b06e-ef14445d7365.roa
File:                     81d1850b-d93c-3956-b06e-ef14445d7365.roa (raw, json)
Hash identifier:          OqkrqAo4Y8k0vLJZQZYXV4GAb4GlsLNV6rd9LpbvCoM=
Subject key identifier:   37:4A:27:0F:53:82:A3:AF:71:AD:A6:6A:AE:54:B1:3B:F1:49:33:91
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B6797F454FB31B73FD9C34B00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/81d1850b-d93c-3956-b06e-ef14445d7365.roa
Signing time:             Sat 04 Oct 2025 01:00:33 +0000
ROA not before:           Sat 04 Oct 2025 01:00:33 +0000
ROA not after:            Fri 02 Jan 2026 02:00:33 +0000
asID:                     30036
IP address blocks:        2604:2d80:f80::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:67:97:f4:54:fb:31:b7:3f:d9:c3:4b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  4 01:00:33 2025 GMT
            Not After : Jan  2 02:00:33 2026 GMT
        Subject: CN=a8a8dbb1-6dae-4726-9585-7a0783f71c68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:58:06:52:54:c8:52:47:e2:11:a9:87:1c:fd:
                    9f:74:ee:92:f6:ae:77:00:69:64:21:80:f3:b2:45:
                    0a:72:a4:11:14:22:94:5b:42:47:16:f4:eb:4d:a6:
                    0d:aa:b8:e9:f8:55:40:a2:84:fc:e0:00:da:6e:2a:
                    65:aa:06:26:4a:30:7e:d3:ee:0a:af:bd:a0:d6:aa:
                    e0:1d:8b:21:3e:82:de:fc:3b:43:c2:57:c0:c7:03:
                    60:97:a9:4c:74:32:bb:69:3e:c5:f0:69:31:20:87:
                    69:ee:a4:57:a6:ec:1e:f0:82:06:da:91:44:20:66:
                    f4:b5:03:f5:bb:b6:17:06:24:48:72:30:0d:37:18:
                    c7:6e:f0:99:ce:ba:77:30:96:3b:33:3a:22:9c:73:
                    f6:0f:80:39:6b:a3:58:ba:f2:7d:8b:af:23:70:03:
                    01:c8:66:98:4f:31:27:79:59:f9:65:19:e6:f0:ba:
                    8d:49:bc:bd:69:84:cd:d5:25:fc:cd:ef:35:db:37:
                    fb:b2:a9:ae:46:92:6b:0a:46:bf:ef:a3:bf:cc:f4:
                    b1:64:3f:32:49:06:2f:97:3a:d5:df:ec:be:06:05:
                    de:96:1e:2d:46:04:b0:87:0d:5d:49:c2:80:c6:14:
                    8a:67:e5:7c:78:17:f2:50:37:d3:fb:12:d9:83:20:
                    03:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:4A:27:0F:53:82:A3:AF:71:AD:A6:6A:AE:54:B1:3B:F1:49:33:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/81d1850b-d93c-3956-b06e-ef14445d7365.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:f80::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:1f:b2:39:df:85:69:38:2f:5a:4b:5a:c7:6b:69:32:81:66:
         5e:b4:ec:a7:44:28:ba:59:fa:ea:37:17:55:61:b0:05:be:f9:
         8b:c4:13:9f:20:36:59:88:14:d1:8c:ac:6d:1d:34:da:10:57:
         45:a0:24:60:48:c3:bb:06:d7:79:3f:85:cb:88:a9:dd:2f:a6:
         55:f3:42:c1:3a:a6:55:25:78:ed:d8:a3:65:d6:41:76:e7:e6:
         3e:36:b8:ac:d0:da:ba:fc:06:8d:24:8e:8c:02:70:48:18:27:
         da:01:a0:3e:4a:82:0c:2b:21:ea:a8:7e:2f:7b:19:16:50:54:
         e5:dd:85:33:e8:30:cd:ee:cf:88:f9:de:64:c4:c7:e2:a4:53:
         fd:f2:4f:44:af:31:be:64:74:4b:bf:e1:12:a4:d8:86:a5:c7:
         f9:8b:56:a0:2e:27:20:9c:36:51:3a:13:3d:09:6c:63:3a:a7:
         ec:5b:df:54:fe:ed:ad:93:b5:3b:85:ec:f0:63:e2:ec:b6:b2:
         2a:a0:c2:f0:18:86:3d:1e:23:4f:62:1d:d7:25:6c:a2:81:9a:
         92:b9:05:df:e9:a1:a8:82:e5:0d:89:ec:f5:14:2a:e2:54:ff:
         30:91:74:ab:84:da:ca:22:7e:f2:6e:66:d0:9b:9e:e6:05:fa:
         89:33:af:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 02:53:38 2025 by rpki-client