Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/97e8e694-630f-3435-bbfc-604e8b2ce496.roa
File:                     97e8e694-630f-3435-bbfc-604e8b2ce496.roa (raw, json)
Hash identifier:          fReBHyE8bAAmV5VsjtDJ5J4CbGYHI1kugZfGah7Hb5k=
Subject key identifier:   1F:BB:3F:0B:9C:71:A5:18:90:6D:ED:5E:35:6B:61:78:95:6F:29:D6
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B56D722374050838471204600
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/97e8e694-630f-3435-bbfc-604e8b2ce496.roa
Signing time:             Sun 28 Sep 2025 01:00:33 +0000
ROA not before:           Sun 28 Sep 2025 01:00:33 +0000
ROA not after:            Sat 27 Dec 2025 02:00:33 +0000
asID:                     30036
IP address blocks:        2604:2d80:6f80::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:56:d7:22:37:40:50:83:84:71:20:46:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 28 01:00:33 2025 GMT
            Not After : Dec 27 02:00:33 2025 GMT
        Subject: CN=08475277-b4f6-479e-ad42-39cf0bad6913
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:f3:40:b2:30:42:18:83:a9:6e:61:a5:dc:7c:
                    9f:d6:34:21:fa:d6:a3:bc:be:ac:70:6c:09:3f:eb:
                    4c:8d:03:60:95:4f:b7:54:fb:ef:1f:9c:53:d7:08:
                    72:c0:78:83:0b:8b:b7:b8:af:f1:32:12:2a:ae:8c:
                    35:2e:7a:7e:85:c9:df:45:89:9e:6f:09:31:22:92:
                    d0:7c:7d:b1:d4:dc:36:19:da:6b:15:4b:b1:b2:bc:
                    9b:54:57:26:50:73:e4:99:d5:70:52:7f:3b:0b:98:
                    1b:83:59:ca:cb:fe:78:53:31:16:42:84:ff:b3:d4:
                    c2:75:c2:4b:d1:7b:f2:06:ed:08:57:04:71:09:f3:
                    10:1b:bd:f5:cf:8d:1e:9a:3f:86:10:f4:a9:70:b4:
                    9d:16:1a:82:50:f6:9b:4a:d9:59:21:4a:4d:d3:73:
                    f0:93:2d:c0:bd:02:78:b4:89:8a:af:dc:f8:c3:a8:
                    5f:ae:3e:74:bf:9a:8e:55:4e:9a:45:74:d7:00:9c:
                    d5:35:cb:37:e5:d5:3d:57:b4:0c:0a:e2:00:1d:69:
                    5f:56:fd:6c:c7:b8:27:fc:ce:da:6d:df:35:88:72:
                    0e:80:80:ef:9c:b7:68:6c:2b:55:42:75:c2:c3:ea:
                    be:eb:7f:ca:db:a6:71:56:0f:bc:7d:46:94:5d:18:
                    e8:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:BB:3F:0B:9C:71:A5:18:90:6D:ED:5E:35:6B:61:78:95:6F:29:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/97e8e694-630f-3435-bbfc-604e8b2ce496.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:6f80::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:58:73:d1:fc:7d:a1:6e:14:e2:c1:f8:c4:78:cc:3c:09:ef:
         96:78:7b:eb:1d:3b:73:17:c7:5f:ee:a0:34:eb:78:b5:eb:1c:
         ae:bb:09:a4:8a:f4:4d:00:83:6b:85:d5:a2:ca:8f:dd:ce:e1:
         a1:27:43:1a:b2:f4:ec:7b:9e:82:61:21:02:4c:ea:13:fb:60:
         8c:6f:d9:34:62:08:8f:69:be:eb:7a:48:47:9d:6c:67:c4:58:
         c6:f5:60:c3:02:30:1a:d9:db:99:d5:f4:47:8d:1a:f6:e4:ef:
         30:65:aa:ab:bd:52:43:23:36:6e:11:23:cb:98:b8:61:68:64:
         9a:0a:ba:b0:50:c8:5d:a7:cb:4d:87:b8:b2:c8:be:99:77:7c:
         5d:82:06:20:9f:c0:98:f3:2a:99:26:74:9a:51:0d:47:83:3d:
         37:6c:73:92:f4:bb:4c:95:48:24:51:dc:1d:e7:fb:72:6b:3a:
         9b:a2:94:af:7f:cf:ab:0a:c4:b2:92:f2:78:b5:68:e3:44:42:
         ec:8f:98:87:12:ba:e9:cd:6b:2d:19:a5:11:ba:9d:cd:d6:9a:
         e7:31:29:1f:74:05:5a:a2:9f:53:fa:1b:61:de:99:08:41:d2:
         8a:c1:89:b7:12:01:5e:6a:73:6f:14:97:3e:c5:c2:23:f3:d6:
         4d:aa:de:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 02:53:20 2025 by rpki-client