Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/85c94281-739b-39cf-b04d-5aca96590033.roa
File:                     85c94281-739b-39cf-b04d-5aca96590033.roa (raw, json)
Hash identifier:          zwWAPuxwyJ4gyb+oM3snvqv2mtzcqG+V9Amk94W3azc=
Subject key identifier:   5F:B4:5B:5F:E9:74:ED:EA:17:58:B2:AE:CC:3C:96:81:3D:60:C0:3F
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B56D73F1E62C39D04FF5EEB00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/85c94281-739b-39cf-b04d-5aca96590033.roa
Signing time:             Sun 28 Sep 2025 01:00:33 +0000
ROA not before:           Sun 28 Sep 2025 01:00:33 +0000
ROA not after:            Sat 27 Dec 2025 02:00:33 +0000
asID:                     30036
IP address blocks:        2604:2d80:6d00::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:56:d7:3f:1e:62:c3:9d:04:ff:5e:eb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 28 01:00:33 2025 GMT
            Not After : Dec 27 02:00:33 2025 GMT
        Subject: CN=d1f08bfd-7cfb-4936-918a-ca7bb653b154
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:83:87:e4:dd:17:54:02:f5:05:64:9e:85:90:
                    44:c2:6a:ee:8f:0a:29:2d:ed:55:07:0f:3e:6b:aa:
                    b4:95:df:90:34:b5:32:25:d4:a8:16:03:c2:3a:d0:
                    b4:11:ec:dd:88:2d:07:bf:b2:42:a3:79:28:13:2f:
                    e6:aa:f9:85:2a:d7:61:0e:20:7e:bc:36:d2:f5:89:
                    d0:af:56:2e:c8:ae:e6:d0:bd:2f:57:c4:50:08:b4:
                    79:a4:c0:5a:c2:07:1f:82:94:cc:18:c8:52:f4:8b:
                    13:f6:51:5a:0c:83:be:d1:8d:ca:de:15:71:93:a1:
                    ee:7c:16:cc:08:43:ac:3a:cc:d6:bb:f0:24:a8:44:
                    1b:3a:45:ab:df:5b:a3:bc:ef:bd:13:39:bb:e2:a7:
                    9b:d2:7b:d0:37:be:eb:06:eb:95:8c:2e:7e:78:bf:
                    27:f5:88:06:d9:e2:af:64:88:af:97:ab:c8:a4:7f:
                    8b:28:33:ab:ff:79:87:01:5d:c1:a8:df:18:c0:11:
                    54:4b:da:1a:45:c5:06:ed:40:e2:b6:72:51:8b:c8:
                    a7:22:1c:76:f4:99:ba:31:0f:bf:70:16:28:60:66:
                    b3:1d:88:47:59:d5:d7:36:1b:5d:8c:c3:6a:0a:0e:
                    27:af:ae:95:4a:59:e5:e9:55:fb:7e:51:56:4e:31:
                    b5:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:B4:5B:5F:E9:74:ED:EA:17:58:B2:AE:CC:3C:96:81:3D:60:C0:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/85c94281-739b-39cf-b04d-5aca96590033.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:6d00::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:1a:26:6b:bf:5b:3e:ba:ff:de:5d:af:07:5f:92:ad:9b:ec:
         ba:5f:ab:0b:62:af:0a:aa:b6:28:2e:1e:70:a1:d6:81:cb:54:
         5d:9c:c7:e4:9e:11:e8:49:52:33:3c:46:df:a1:7c:7e:58:ad:
         c5:73:f0:29:5f:ab:4a:88:fe:4a:86:de:38:95:5d:cf:85:9e:
         a8:d3:98:36:bb:09:bc:db:4c:2b:73:65:57:1e:1f:75:20:14:
         f7:76:9d:04:f0:ef:8a:f2:f2:05:7f:61:67:72:79:f8:75:29:
         af:67:9a:a3:e8:15:b9:91:20:bd:16:81:db:7b:a4:ee:86:62:
         34:e8:e8:28:7f:fd:a2:af:b5:d5:cb:11:02:f0:df:4e:cc:57:
         13:bc:88:f0:8b:47:02:3e:fd:a9:ce:9e:38:3f:1a:5b:d0:82:
         29:0d:fe:6a:71:09:3a:9a:69:6b:09:a2:31:8f:60:c0:2f:ea:
         ca:37:4b:43:de:9c:aa:fe:6c:c7:fb:67:40:ba:b7:96:87:32:
         33:56:d4:76:a8:0d:a0:07:c1:ed:91:69:13:df:57:35:61:53:
         c2:44:54:1f:f5:26:52:62:26:72:26:44:46:00:0d:37:c3:a1:
         1c:b1:01:b7:7a:f3:9f:ca:84:96:22:08:dc:04:87:a9:08:35:
         ee:21:0d:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 02:56:22 2025 by rpki-client