Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8707eefb-e9e8-3532-bcb2-d1efeb2bbfd0.roa
File:                     8707eefb-e9e8-3532-bcb2-d1efeb2bbfd0.roa (raw, json)
Hash identifier:          WsdOXVZWVDazgh7jzvoxffzZIygPPyg1IovCCcMUQoU=
Subject key identifier:   57:16:CB:E5:26:4D:2E:20:76:DD:BE:25:B8:4E:F9:51:A1:E9:4E:ED
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B64CE3A33DEB9CD125A516C60
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8707eefb-e9e8-3532-bcb2-d1efeb2bbfd0.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     30036
IP address blocks:        2604:2d80:ed80::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:3a:33:de:b9:cd:12:5a:51:6c:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=1e43b57e-7a56-481e-bff8-2edfb4c2b225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:d9:a1:1f:1f:66:8e:f6:82:f1:9d:c4:c5:28:
                    33:30:96:fb:79:c6:64:57:87:80:53:78:e5:68:7c:
                    ad:ed:96:8e:b0:a5:78:5f:5b:e1:50:f2:ad:0e:d5:
                    a1:3c:38:7d:55:3b:c9:0f:88:1f:4c:6e:36:28:df:
                    cc:7a:59:59:ac:2c:c6:27:55:63:c5:b2:25:5b:47:
                    0b:be:94:9d:87:77:b8:15:2c:5d:2e:d2:3c:e3:2e:
                    b0:18:4b:6c:7c:5b:e1:00:7e:21:4f:6e:59:57:21:
                    bb:0a:0e:32:78:d3:fc:65:67:c7:f7:08:a3:eb:3a:
                    df:10:01:92:35:a0:49:92:69:78:fb:6f:53:01:bc:
                    ce:23:ef:ba:85:8b:63:22:4d:c3:91:c4:29:34:5b:
                    38:2a:e7:b2:16:de:33:14:95:b6:cd:f9:d1:52:e7:
                    e8:79:55:c1:ed:2e:27:70:92:dd:c2:46:3f:b0:83:
                    74:98:fd:21:99:f0:49:8c:59:7b:88:e3:d3:d1:e5:
                    bf:d6:59:f8:48:55:ff:bc:72:59:d4:6e:b8:57:9f:
                    c3:76:98:0c:1e:78:bd:8a:89:ac:05:ff:a6:0f:2b:
                    26:a9:04:73:02:49:03:04:18:54:ea:c1:75:b7:a2:
                    d2:bf:0a:2b:5a:7a:63:07:66:1f:d6:f2:f7:2f:04:
                    3c:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:16:CB:E5:26:4D:2E:20:76:DD:BE:25:B8:4E:F9:51:A1:E9:4E:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8707eefb-e9e8-3532-bcb2-d1efeb2bbfd0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:ed80::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:ae:cf:41:a1:6c:e8:4a:19:2a:7c:04:67:66:b6:5c:bb:c9:
         af:6a:ce:e8:d5:1d:77:87:21:fa:18:cc:32:ab:71:5b:94:af:
         00:4b:fe:5f:09:46:93:ca:81:9a:66:49:ea:e5:fd:8c:d5:79:
         71:16:77:ce:fc:af:78:ea:15:e2:c8:fc:5c:91:b4:b7:00:1a:
         55:f9:c6:9c:78:d7:4f:c1:b9:41:17:f4:f2:ef:64:09:63:ab:
         fd:a4:94:e5:22:da:59:09:58:99:be:d7:f9:74:4a:e8:a3:61:
         f1:bc:52:96:55:2d:47:30:3e:d4:35:2b:6a:27:d5:1b:fb:4f:
         89:87:45:06:56:1f:5d:1a:44:ef:42:c6:0a:19:d8:69:60:f2:
         30:8b:7b:5c:18:3c:af:b5:d4:23:84:52:11:b0:de:97:2b:37:
         9d:b0:39:4c:44:cd:fc:6b:eb:a9:dc:ec:17:d8:45:b5:16:c2:
         0b:3f:3f:44:d6:0f:6c:32:8e:95:a6:4c:f6:a0:26:57:86:7a:
         a1:b6:8d:fd:bd:e7:e8:3f:8f:3c:91:db:ee:2a:bb:ed:36:a0:
         a5:a6:86:3e:9a:a4:95:65:9a:b7:e7:94:4d:5d:f6:29:f0:76:
         aa:8b:0e:11:81:8c:7a:ac:9a:6e:de:17:90:70:6d:5a:3f:9e:
         53:a8:5f:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 02:43:26 2025 by rpki-client