Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b26ac4b0-9f5a-36c2-9c45-63614fda5ab3.roa
File:                     b26ac4b0-9f5a-36c2-9c45-63614fda5ab3.roa (raw, json)
Hash identifier:          vpzeOPc1hWguBrYoO22nwf+/HSZOjEP8CPVWe5tM9Hk=
Subject key identifier:   86:48:83:02:68:29:A3:F9:3E:ED:75:09:DE:4C:2B:13:1B:24:87:2B
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B6201E2E8A76AD65FAC4B8270
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b26ac4b0-9f5a-36c2-9c45-63614fda5ab3.roa
Signing time:             Thu 02 Oct 2025 01:00:31 +0000
ROA not before:           Thu 02 Oct 2025 01:00:31 +0000
ROA not after:            Wed 31 Dec 2025 02:00:31 +0000
asID:                     30036
IP address blocks:        2604:2d80:5d00::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:62:01:e2:e8:a7:6a:d6:5f:ac:4b:82:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  2 01:00:31 2025 GMT
            Not After : Dec 31 02:00:31 2025 GMT
        Subject: CN=fa50b9bf-bc07-4616-9a9c-a8f1772ed7c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b2:f1:cf:f7:9d:58:29:cd:42:34:77:fe:67:
                    1d:82:90:e8:11:38:f0:96:2f:7b:4f:c8:9e:3c:6e:
                    e0:77:37:58:4c:2a:29:86:d3:c4:aa:1c:44:a5:56:
                    de:18:19:61:ec:47:6d:74:ca:f1:86:5d:e6:dc:08:
                    85:a4:a7:cb:45:ae:b7:d0:fb:7a:82:79:04:53:b9:
                    cb:3c:2a:ae:44:81:d8:a0:77:74:9b:b2:b9:33:65:
                    d7:40:6e:7c:40:bc:bd:5b:bc:80:69:4e:96:78:d4:
                    85:0d:7f:30:2e:bd:e4:15:b5:2a:97:d8:f7:42:de:
                    79:8b:44:e7:cd:f5:dd:e5:17:18:8e:58:e4:ba:45:
                    0c:71:a4:ba:09:c1:37:a6:5e:6a:a7:46:34:05:99:
                    57:c8:dc:62:1c:5c:4b:9d:b7:41:0a:7e:51:4c:f7:
                    a6:fd:c3:de:97:ca:bb:2a:82:f7:54:21:cf:1f:b0:
                    e9:5d:b4:2c:5e:65:13:d0:3d:07:c4:40:99:c5:f4:
                    99:17:d8:f1:ce:64:44:ea:88:3f:bc:16:5e:6d:74:
                    17:d0:e2:7e:87:b8:43:ae:8b:d6:87:06:42:ae:e4:
                    9f:cb:74:10:3f:06:0d:fb:62:e1:60:67:3a:06:6d:
                    e0:8d:b3:f9:85:70:6d:7e:b5:98:4c:aa:6a:9f:63:
                    84:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:48:83:02:68:29:A3:F9:3E:ED:75:09:DE:4C:2B:13:1B:24:87:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b26ac4b0-9f5a-36c2-9c45-63614fda5ab3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:5d00::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:2e:7c:91:26:06:4f:d4:7c:12:9b:2f:a6:d0:96:d8:5e:21:
         83:94:82:f9:a4:b9:0e:f8:b5:87:85:7f:ff:e1:10:80:af:4c:
         b3:35:61:88:69:5f:50:75:6f:b8:eb:fe:87:61:d7:f4:e5:1a:
         ba:dd:c3:52:05:14:df:f7:3e:24:af:80:82:c2:82:ea:7c:fd:
         74:34:46:7e:59:08:3a:24:ab:5f:f7:89:92:d7:0e:83:8c:79:
         6f:58:52:61:29:2e:2c:25:ec:fd:f5:ea:ee:2e:46:72:25:19:
         2d:61:20:98:0d:c3:0c:d9:cd:d3:1d:0f:f4:38:60:bf:a6:92:
         fe:3d:5d:ab:1c:4d:bc:ed:73:cd:be:5b:4e:a3:71:37:6d:6a:
         44:53:1e:2c:f9:5d:5f:70:8e:8f:20:d4:c6:20:cb:1f:04:ab:
         76:44:06:83:d2:37:64:ef:27:74:65:32:bd:e5:2f:c2:0d:1e:
         96:cd:fb:76:17:40:c0:3d:f4:ac:ac:9e:fe:0e:65:66:3d:73:
         9d:56:3d:e8:6e:3c:0e:8b:23:88:8b:f6:93:fa:ba:84:6c:e7:
         bd:9e:2e:88:87:d8:f3:33:64:a5:b4:a7:f6:8c:c0:2f:f2:46:
         9d:89:11:59:99:26:e7:bf:f0:c2:9d:1d:8e:b1:08:08:22:e8:
         bf:fb:7f:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 02:58:40 2025 by rpki-client