Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/96841f5c-929b-3663-be62-fbe048c2b744.roa
File:                     96841f5c-929b-3663-be62-fbe048c2b744.roa (raw, json)
Hash identifier:          ceOnlcY9OK22J7aTo5FSTk+UvPN1EWt46DwLl8O76Xg=
Subject key identifier:   81:5F:7A:D0:29:F0:BA:35:1F:EA:D5:7D:C7:04:1C:EB:CD:2E:B8:11
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B620230F3CAC19C198491F540
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/96841f5c-929b-3663-be62-fbe048c2b744.roa
Signing time:             Thu 02 Oct 2025 01:00:31 +0000
ROA not before:           Thu 02 Oct 2025 01:00:31 +0000
ROA not after:            Wed 31 Dec 2025 02:00:31 +0000
asID:                     30036
IP address blocks:        2604:2d80:e700::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:62:02:30:f3:ca:c1:9c:19:84:91:f5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  2 01:00:31 2025 GMT
            Not After : Dec 31 02:00:31 2025 GMT
        Subject: CN=2c5e141d-f617-4033-ac2b-aa020fcbafde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:1c:09:96:d3:1b:75:cd:2c:6e:24:ed:a1:7a:
                    5e:3e:81:a1:0d:d4:a3:73:05:e5:f0:4a:a3:6d:29:
                    56:9d:80:44:f9:ec:6f:27:2e:e4:73:fd:10:cc:c5:
                    c4:44:00:44:1b:53:88:43:b4:5a:c0:1d:b7:4c:7f:
                    bf:c0:28:1a:c9:82:41:dd:a2:45:8a:df:7c:cf:9b:
                    35:a5:4e:b2:0e:74:2a:b3:2b:8d:e1:27:28:ba:5d:
                    7d:57:94:93:c2:19:e7:19:1b:cc:c1:fe:e6:f7:15:
                    2d:af:cc:da:be:f9:e0:4d:d7:de:36:63:6a:8a:f9:
                    60:d4:39:f5:99:55:65:81:cf:60:6f:03:d3:56:bf:
                    2a:15:ec:61:5b:f2:b1:3e:a7:6d:15:93:99:b5:4a:
                    28:a8:71:ed:3b:81:01:a9:93:55:27:83:13:c2:a7:
                    fa:65:e3:2c:07:1d:25:ab:61:38:53:21:13:78:e0:
                    16:06:b6:1e:ff:c8:63:0e:b0:0e:bf:ba:57:c0:ea:
                    17:bc:c7:cf:0d:9d:ae:0c:83:40:13:87:4c:96:82:
                    51:5b:12:27:81:84:e5:8a:e1:9f:07:ef:45:b7:18:
                    0e:e3:09:cb:6e:fd:1f:04:71:00:0e:80:12:28:f6:
                    12:55:6b:f6:b6:85:d2:4f:46:9a:c1:22:60:4b:df:
                    8a:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:5F:7A:D0:29:F0:BA:35:1F:EA:D5:7D:C7:04:1C:EB:CD:2E:B8:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/96841f5c-929b-3663-be62-fbe048c2b744.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:e700::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:2f:88:52:18:d9:3d:63:b1:f0:07:c7:ca:ee:39:ea:d5:43:
         ce:c9:bc:26:cf:98:17:80:a8:aa:12:9d:07:98:7a:0f:0a:d7:
         db:68:5a:17:f6:b4:7f:bf:d3:9a:d7:1c:7f:d6:75:51:bb:77:
         17:46:00:46:f9:84:58:2f:ec:b1:8e:82:80:f4:74:12:6d:3c:
         25:cd:3d:6a:ff:2a:43:ce:a4:61:be:01:a1:79:05:dd:83:4a:
         2a:19:73:39:ff:29:e5:f4:34:c9:c3:36:ed:54:32:7d:b2:61:
         f3:e1:66:b2:ed:3d:35:54:12:d2:bc:0c:7d:31:38:0d:0f:2b:
         6d:a3:40:d4:d0:97:05:79:ed:23:d8:1b:49:df:ee:ee:2f:fd:
         0e:5d:52:f8:e2:59:19:0f:95:cd:e7:69:ac:ef:e6:75:65:2c:
         74:7c:26:1c:70:43:b0:d4:2b:5c:d8:b3:79:2a:8b:f7:68:45:
         52:6f:dc:e4:75:8c:0b:f7:68:2b:07:c9:54:32:cb:e9:6d:26:
         20:80:b8:ce:1c:da:e3:34:33:4a:5a:96:07:d0:50:44:4b:7f:
         29:e2:7a:b9:37:67:db:46:4d:49:98:b2:06:fc:da:07:47:6c:
         88:21:4e:25:9a:30:58:4f:c7:ed:3c:e4:d0:35:70:10:8b:81:
         79:28:f5:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 02:52:13 2025 by rpki-client