Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/898a90de-f28f-3be2-bc2f-1b4b0127723c.roa
File:                     898a90de-f28f-3be2-bc2f-1b4b0127723c.roa (raw, json)
Hash identifier:          VNLzZtk0NjpMv9rVEJF3SfZUWPb/RdZaGNxJYgFebTQ=
Subject key identifier:   CE:18:99:F4:91:BB:A2:C5:05:FD:D6:31:D2:20:8A:CF:48:FE:FE:7E
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B6797EDF768162D5D016D1EA0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/898a90de-f28f-3be2-bc2f-1b4b0127723c.roa
Signing time:             Sat 04 Oct 2025 01:00:33 +0000
ROA not before:           Sat 04 Oct 2025 01:00:33 +0000
ROA not after:            Fri 02 Jan 2026 02:00:33 +0000
asID:                     30036
IP address blocks:        2604:2d80:9700::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:67:97:ed:f7:68:16:2d:5d:01:6d:1e:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  4 01:00:33 2025 GMT
            Not After : Jan  2 02:00:33 2026 GMT
        Subject: CN=72fab856-8fb9-4bd5-b713-58f82764780f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b8:f7:70:f6:c3:16:d1:c2:1d:33:e1:03:7d:
                    8e:ca:ef:ab:b5:ec:6c:65:e3:24:61:4a:b7:13:83:
                    36:ea:5b:9f:ee:d7:89:e2:e3:5f:aa:ca:96:64:a9:
                    1c:a3:c4:42:d8:5a:6d:7e:fa:33:cc:ec:ec:70:e1:
                    e1:27:61:be:11:69:4e:c8:1d:3e:04:2b:fd:39:94:
                    88:ed:c9:e8:43:46:1b:7f:bc:5b:dd:62:48:de:74:
                    40:43:31:3e:49:c2:a1:b3:52:49:90:39:7e:5c:76:
                    0b:2f:5c:59:cf:72:68:f5:36:5c:86:8c:a2:cd:8d:
                    44:e2:64:2b:07:83:0c:13:fe:e8:16:86:79:5e:42:
                    b6:f1:f5:15:95:ec:b5:15:34:c0:7a:67:46:14:05:
                    0c:11:44:87:c7:9e:e0:ab:6a:3b:a9:b8:ed:82:b1:
                    84:85:52:2a:67:30:cb:ad:5c:ed:bd:33:da:fc:8f:
                    71:7a:6f:78:e6:a7:83:d7:6c:c7:31:fd:6d:8a:86:
                    7f:2a:17:9f:14:9e:99:57:60:bf:a2:dc:92:2c:3e:
                    de:18:bc:d3:53:f7:e7:03:79:e1:04:e6:8d:8c:4a:
                    d9:40:41:e0:97:78:a8:de:25:65:79:99:5d:99:31:
                    78:82:95:10:ca:36:72:70:59:d0:f6:d6:b2:f3:c0:
                    5e:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:18:99:F4:91:BB:A2:C5:05:FD:D6:31:D2:20:8A:CF:48:FE:FE:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/898a90de-f28f-3be2-bc2f-1b4b0127723c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:9700::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:59:73:1a:78:8c:c9:2b:cf:03:e8:82:87:12:6e:72:2f:68:
         cd:93:14:7c:5d:69:cf:58:a7:ad:79:c6:7f:75:98:a7:dc:e7:
         dd:e9:cf:f1:ab:b3:a9:e5:62:71:79:2a:c9:20:01:0b:0d:c6:
         8d:2a:17:d0:ee:e7:25:2e:8f:08:15:71:c7:21:35:ad:6a:48:
         86:5e:6d:57:bd:a5:d0:e5:1d:e8:86:1e:f9:42:20:4c:3f:7b:
         21:c6:52:59:96:83:36:2d:d1:43:df:2f:7b:b9:d4:a6:45:88:
         65:ed:58:c6:83:ac:26:0f:0f:ff:41:db:2d:79:4d:fb:c9:fe:
         a0:d7:bd:ee:1d:02:22:b6:4a:86:71:82:5c:e0:6d:70:96:1f:
         98:9b:08:3d:e9:b6:68:25:62:59:8a:91:70:d2:75:b2:bb:4d:
         bc:29:f1:92:2a:9f:5c:43:db:95:64:4a:97:e8:86:37:09:53:
         d8:5a:6d:f5:90:2d:6a:9b:8c:e5:f3:d3:32:cc:67:4c:b8:86:
         40:5b:c3:be:23:84:6a:5b:10:47:3d:85:32:bf:56:29:0f:d3:
         44:ba:28:23:b3:c3:f5:c5:00:a6:dd:46:6e:76:68:31:59:3d:
         eb:8d:cb:ad:4c:41:b3:a5:95:38:c3:c2:91:7f:84:d4:43:e9:
         51:ff:82:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 02:45:58 2025 by rpki-client