Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8764322b-3065-3ddd-8460-26da2459a9ed.roa
File:                     8764322b-3065-3ddd-8460-26da2459a9ed.roa (raw, json)
Hash identifier:          NheJL+TXr4WTFh/J6Va7u9sOEBjYwPVlS0ymlSdaBR0=
Subject key identifier:   DB:38:81:D8:BF:3E:89:6F:D5:7C:7D:86:75:B9:29:D9:64:33:EE:73
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B64CE525A0358E3838AA23400
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8764322b-3065-3ddd-8460-26da2459a9ed.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     30036
IP address blocks:        2604:2d80:5480::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:52:5a:03:58:e3:83:8a:a2:34:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=2154b008-6e86-4dff-95f1-c78f46a2f67c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a7:aa:1b:dc:6d:c8:88:69:0b:a3:15:f4:27:
                    79:2d:65:f4:74:6f:6f:84:61:df:45:8a:a4:47:f3:
                    fc:57:b9:44:ce:f3:e6:49:e3:45:79:56:9f:ce:35:
                    f5:77:05:bc:27:02:bd:51:11:47:1b:d4:2f:52:53:
                    8d:41:2c:8c:c5:e9:34:e9:11:fe:b9:0d:e0:e1:d6:
                    e5:1a:c7:96:0b:56:a0:2c:e6:09:d3:55:0e:93:92:
                    11:dd:b7:09:a3:10:90:05:1a:67:da:ce:35:51:98:
                    9c:b7:1d:f2:92:f7:d8:17:d5:d2:c3:eb:da:06:8f:
                    59:a6:16:c2:d7:95:37:fd:08:c0:fa:e3:79:77:bf:
                    85:61:95:ae:22:be:1a:84:e8:79:d0:bf:58:d9:8b:
                    d8:dd:a4:32:8e:25:a3:2f:7a:06:38:53:5e:ed:9a:
                    ed:6e:71:84:0c:27:e1:c3:04:96:95:cb:b0:90:fb:
                    6a:2d:f0:dc:bc:be:f8:01:81:2d:aa:0f:50:55:8a:
                    72:59:8c:ae:a5:52:5d:cf:7e:f8:a6:d9:07:8e:46:
                    2e:e5:e9:b5:2e:27:6d:c4:72:0c:a8:7c:40:ab:61:
                    be:17:7f:77:fb:2e:a5:de:2f:75:8b:45:30:2d:08:
                    95:97:a5:93:9e:02:17:27:36:f4:62:68:d4:50:8d:
                    c7:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:38:81:D8:BF:3E:89:6F:D5:7C:7D:86:75:B9:29:D9:64:33:EE:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8764322b-3065-3ddd-8460-26da2459a9ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:5480::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:81:5a:8a:ae:ae:a3:13:3a:43:f4:dc:b1:87:85:c8:21:bb:
         e2:ee:09:85:5c:b9:a6:53:da:e8:ab:b3:50:dc:00:42:ed:7e:
         0e:87:2b:29:ca:04:99:b6:63:51:d3:0d:3f:87:bd:2e:1d:21:
         ba:79:fd:b4:8e:55:87:c7:11:1a:a3:01:8e:f6:dc:8e:9d:91:
         75:7c:06:29:27:19:3b:90:02:41:a9:3e:6f:49:d8:b5:e8:21:
         9b:61:b7:23:81:83:7d:cc:67:f0:62:87:fc:5b:d6:a3:39:57:
         a0:c1:24:1f:21:cf:07:c7:16:0e:4f:69:28:41:b0:cc:e2:ae:
         d8:07:ee:a8:8c:a9:de:e5:93:c5:17:19:19:86:77:6b:89:6f:
         33:58:8d:b0:fa:ee:61:fa:ff:94:fa:64:e3:26:a5:44:80:6f:
         f6:5e:80:ef:d2:eb:b6:41:ae:5b:01:76:9d:4e:40:2d:15:52:
         f9:c5:b2:f4:5f:26:c3:a8:b2:e9:af:5e:fe:da:65:c6:db:aa:
         4d:54:34:d4:e4:f9:b7:c2:e7:1c:26:7a:c1:5a:3a:e9:77:c6:
         bf:cb:0d:1c:53:a1:4e:26:98:3c:28:15:9d:ca:34:51:08:e5:
         b9:dd:96:8a:53:92:aa:45:37:53:b7:35:a9:1b:32:2c:e2:1a:
         dc:80:19:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 02:55:57 2025 by rpki-client