Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9e227505-13c8-31ec-804f-44786e326236.roa
File:                     9e227505-13c8-31ec-804f-44786e326236.roa (raw, json)
Hash identifier:          FopHGCadjK99sbKxyb0LMq2rn/8l7MF12S51Fb2P2vY=
Subject key identifier:   83:DE:C0:B7:D7:72:77:0F:7C:D6:9B:A5:E1:3F:15:22:F4:CB:F8:AF
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B64CE42E87151248A0AD9E380
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9e227505-13c8-31ec-804f-44786e326236.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     30036
IP address blocks:        2604:2d80:9080::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:42:e8:71:51:24:8a:0a:d9:e3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=b859a87c-64cd-4600-b0fa-6916546931eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:11:ac:39:d9:fb:90:e5:a7:11:15:fc:12:5c:
                    ca:c9:21:32:6b:c7:33:0b:b3:8e:fb:71:26:ed:71:
                    fe:7f:98:40:55:04:45:fa:b4:e0:1c:5d:8e:03:54:
                    1d:e1:e2:35:f5:9f:ec:12:48:0d:98:8c:e5:e8:ce:
                    31:3e:0c:e5:29:d7:82:b4:a6:61:76:69:5d:d9:c4:
                    38:e2:b1:7b:05:ea:f7:eb:17:eb:43:d0:a3:c5:cf:
                    ac:71:ec:1a:58:e5:77:29:b8:a7:46:ff:03:86:58:
                    31:8e:74:0d:8a:d4:2a:49:1e:08:82:24:7c:87:92:
                    8f:03:ee:50:c3:e6:22:1f:b2:6d:e7:13:16:7b:d0:
                    34:6e:1e:99:d2:10:c1:c9:03:b0:7f:d8:99:1a:a3:
                    9a:a9:d0:a6:d8:04:19:89:24:f0:c9:21:b3:86:d2:
                    92:1e:97:44:a0:21:e6:8f:4e:f7:e8:9d:6d:19:85:
                    1d:28:b4:19:e3:05:c6:5a:4c:85:fc:f8:55:f3:70:
                    3c:85:3d:75:91:b6:46:69:bb:c0:0c:07:f3:f9:e7:
                    a6:97:fd:d3:fa:30:d1:67:56:bb:ec:8e:cd:01:27:
                    51:b5:fa:99:5c:06:0f:c9:cb:01:af:9e:f2:7c:74:
                    6c:83:e7:b9:26:6f:79:11:82:4e:d5:9a:63:e5:fd:
                    1a:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:DE:C0:B7:D7:72:77:0F:7C:D6:9B:A5:E1:3F:15:22:F4:CB:F8:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9e227505-13c8-31ec-804f-44786e326236.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:9080::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:98:ed:e3:bd:b7:a5:15:2c:79:fb:a6:46:f3:27:6b:e0:09:
         0c:df:89:d1:13:bf:b2:97:ca:71:c0:d0:4a:40:ca:b3:11:1a:
         38:d8:5b:5f:22:dc:71:95:ee:b7:02:e5:52:2f:ea:0f:f1:0c:
         79:6c:d7:57:1f:6a:fb:d9:2a:2d:c4:16:8c:f3:ca:57:bf:a5:
         ea:ae:50:fe:a8:b6:4a:b6:29:bb:76:ae:e9:71:f2:5a:ea:a4:
         05:92:ad:dd:e9:16:bd:81:c8:e7:65:0d:ab:81:ff:38:b7:e6:
         73:06:0d:37:96:70:bf:72:33:02:c8:ba:13:a4:aa:a6:a8:c0:
         11:0f:1e:c2:c8:89:91:85:df:63:a3:cd:70:b2:15:74:ae:40:
         c2:49:e5:85:c6:16:77:4a:bc:0b:f6:a7:9b:e4:f2:8e:6f:73:
         f7:b8:4f:0a:1d:f8:95:1e:11:c3:ba:1c:e9:b6:20:3b:3f:f1:
         3e:5f:e2:70:70:71:19:99:d7:f8:94:02:d4:2c:da:48:73:2c:
         98:91:1c:90:32:23:16:d0:c5:11:31:07:75:4a:3d:9b:d7:74:
         a8:a4:7f:dc:3f:c9:a4:f2:0e:14:6b:05:23:d7:d4:68:89:2f:
         1d:2d:88:e3:91:19:06:b3:a7:f0:51:45:b9:39:75:39:3f:48:
         fe:85:92:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 02:56:07 2025 by rpki-client