Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/93f4cda1-eaf4-3325-b6a9-c2f12293c5e2.roa
File:                     93f4cda1-eaf4-3325-b6a9-c2f12293c5e2.roa (raw, json)
Hash identifier:          7bQp0SJBjxQOfp+OD/JuOddw/whVSaA70/cJ7y3YYJo=
Subject key identifier:   2E:29:BD:EC:9F:EE:ED:EA:67:08:DE:8D:96:34:8C:02:FD:B4:99:AD
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B68FC9852CCA8C682E8A4FC40
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/93f4cda1-eaf4-3325-b6a9-c2f12293c5e2.roa
Signing time:             Sat 04 Oct 2025 13:00:40 +0000
ROA not before:           Sat 04 Oct 2025 13:00:40 +0000
ROA not after:            Fri 02 Jan 2026 14:00:40 +0000
asID:                     30036
IP address blocks:        2604:2d81:c00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:68:fc:98:52:cc:a8:c6:82:e8:a4:fc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  4 13:00:40 2025 GMT
            Not After : Jan  2 14:00:40 2026 GMT
        Subject: CN=d6c6a3be-9bf7-4242-830c-4f16383c208e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:5b:c4:35:7b:71:b1:f0:c5:2b:15:8e:91:b1:
                    a8:e9:1b:60:41:75:80:c3:ee:05:4b:74:b2:90:e6:
                    85:c2:55:7f:fe:70:4b:2f:f9:9c:7c:09:6d:7e:6c:
                    61:b4:25:c8:23:76:c3:c5:e9:4c:86:99:9b:8b:a2:
                    f8:fc:b9:eb:37:16:f3:a7:50:46:9a:e4:c9:8b:4d:
                    fe:d7:c7:2f:3d:47:ef:da:3d:a6:3b:2a:1a:20:89:
                    39:f5:7e:73:9d:47:1c:af:20:ab:d0:dc:15:4f:42:
                    27:f8:ed:d4:85:f9:cd:96:f5:c9:2e:40:86:e3:27:
                    3f:77:d8:4a:39:b3:9d:a9:63:2b:c3:44:37:2c:23:
                    c0:4c:87:7b:91:c2:9b:c2:db:b1:b1:0a:ca:45:32:
                    96:02:9d:7f:0d:c0:b7:4e:71:dd:26:99:87:9a:e7:
                    58:73:d0:d7:ca:94:ab:24:3c:12:aa:d1:2f:5e:88:
                    38:d3:aa:f3:95:7e:7d:d3:97:e5:bb:27:71:4b:b0:
                    42:45:58:04:e1:89:c9:f3:b3:65:fd:08:17:3c:67:
                    6b:39:b5:75:0e:36:e7:f7:de:0a:63:72:8c:40:26:
                    09:83:14:29:ac:6e:2c:32:0e:3b:af:e4:03:70:86:
                    0b:34:a1:d2:e6:2a:2e:8a:7e:17:1f:ec:39:04:a4:
                    7a:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:29:BD:EC:9F:EE:ED:EA:67:08:DE:8D:96:34:8C:02:FD:B4:99:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/93f4cda1-eaf4-3325-b6a9-c2f12293c5e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d81:c00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:84:78:55:3a:3a:91:3b:2f:3d:e7:6e:6f:22:79:b1:40:36:
         11:35:2b:73:2b:a1:03:70:d7:92:e3:62:f5:fd:81:91:cc:5e:
         85:be:81:f8:99:f4:5b:8d:e6:67:4a:27:c0:25:6d:a4:4f:86:
         dc:e1:fe:d4:40:68:4f:7d:98:16:ce:54:03:e5:ff:fe:96:90:
         48:c7:38:14:bc:6e:36:b5:1f:a3:4e:b7:44:a2:19:74:00:82:
         9e:ea:93:be:f0:a8:a6:05:e5:87:4a:15:5f:4b:3d:c0:ce:62:
         2b:9a:9c:7e:56:3f:3b:7c:44:33:64:91:f8:53:b4:82:13:28:
         aa:a3:ff:40:c2:f5:aa:40:6a:73:e9:c9:90:00:73:4a:52:c0:
         3c:3f:e0:d2:79:b7:b0:b1:94:61:5f:b1:51:1f:eb:25:ef:df:
         da:e3:8f:43:10:83:f3:c2:4b:6c:44:a3:47:c8:dd:16:09:20:
         0d:cf:8b:a2:29:53:2f:74:18:02:1e:dd:05:ea:8e:50:63:2f:
         30:96:ac:1d:0e:f2:fb:90:8f:fd:ec:aa:c3:6c:8e:82:d6:bb:
         08:73:a4:84:f6:d4:44:bb:5a:f3:e1:29:89:9c:de:ec:1d:59:
         bf:7f:ca:d9:13:dc:ce:29:3d:9a:69:2c:04:ac:9e:54:0e:58:
         8d:30:cd:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 02:48:46 2025 by rpki-client