Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bff728f5-fe2f-3c9a-b5d8-2569fc9b2151.roa
File:                     bff728f5-fe2f-3c9a-b5d8-2569fc9b2151.roa (raw, json)
Hash identifier:          5fXgXkvAYt0xQn0yC7TccCihKdXAd9MYT2QLUcMAQ4A=
Subject key identifier:   81:48:BB:E0:90:C1:2E:14:10:48:25:6E:71:A3:5A:4E:FD:18:35:F8
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B64CC9A997F2941516812E780
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bff728f5-fe2f-3c9a-b5d8-2569fc9b2151.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     30036
IP address blocks:        2604:2d80:7880::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cc:9a:99:7f:29:41:51:68:12:e7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=adf9d29e-92c4-473b-9665-91371d0b0e20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:29:dd:88:cf:67:02:24:7e:04:72:90:b8:53:
                    d5:4c:a3:1f:aa:86:a7:f2:56:19:b2:54:14:68:f9:
                    99:d0:12:03:fa:35:d1:e0:d6:ce:53:78:65:a0:9b:
                    ff:d0:d8:30:86:99:ee:35:c8:f7:09:7f:bb:b5:dd:
                    bc:5e:6e:ab:71:70:ea:ba:41:21:ef:66:b8:65:1c:
                    22:00:8b:ab:d1:c8:4d:1c:8e:e1:2d:2c:78:67:65:
                    c5:74:bd:64:af:92:d4:49:40:7e:31:a2:e5:57:fe:
                    3d:32:56:dd:73:61:22:ba:9f:25:36:78:84:5f:7a:
                    0a:b4:19:ed:09:d7:09:c0:da:9a:b7:38:66:16:fc:
                    fd:76:7e:0f:2e:94:fd:66:8f:08:05:de:11:29:3f:
                    29:d1:55:56:ae:41:27:68:cb:1f:c2:7a:c6:17:92:
                    c4:fe:1e:6c:84:46:04:0f:3c:79:11:49:aa:1a:a9:
                    85:e7:f9:45:30:6b:8a:4d:be:a9:0f:b5:5f:a7:13:
                    28:d5:31:96:74:df:f4:9c:4c:ae:52:7a:c9:34:f3:
                    7a:d8:84:6c:9f:a0:10:22:ec:53:a2:8d:2a:ca:3d:
                    98:89:e1:a9:0e:c9:08:59:ff:f7:89:f4:63:ed:b8:
                    e5:12:fe:fb:04:70:ff:ae:ff:74:47:a8:6c:33:a7:
                    2b:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:48:BB:E0:90:C1:2E:14:10:48:25:6E:71:A3:5A:4E:FD:18:35:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bff728f5-fe2f-3c9a-b5d8-2569fc9b2151.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:7880::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:3f:04:6e:3b:5a:b6:c1:b3:38:c9:02:5e:af:bd:93:d4:9c:
         80:16:48:c1:e6:82:f7:b7:2a:46:74:c0:a4:39:52:1f:06:dd:
         45:6b:d4:df:64:e5:5e:0a:40:f0:79:0c:4e:54:19:c3:33:27:
         54:92:d6:3f:f2:76:f5:28:40:a8:4f:1b:cb:b7:8a:46:aa:12:
         91:68:07:53:20:67:b0:7f:fb:53:ca:ec:07:3f:32:c8:28:fc:
         ec:5f:a3:ff:6e:7e:10:9b:eb:2a:b4:96:c2:16:a3:d6:22:19:
         40:03:8d:e9:60:9b:e8:5c:58:9e:db:f3:ff:33:09:31:da:7b:
         48:fe:ab:9e:51:1b:e7:55:ea:96:3d:d1:fd:9d:81:e2:65:d4:
         d1:32:e2:c4:62:77:79:a3:b2:a7:66:a6:56:47:d8:21:de:08:
         36:9c:31:4b:46:cc:57:ad:6c:87:20:66:c5:06:33:2b:bf:01:
         9a:cd:1d:81:19:28:4e:94:05:64:3b:d1:01:8a:c3:b4:6d:ac:
         93:f2:2f:bd:2c:7f:3c:e7:cd:8c:b2:9e:ea:f0:1b:c0:57:49:
         2d:54:a7:35:59:d9:32:f4:bf:1c:e3:98:12:cb:1c:5b:37:f0:
         2b:26:fa:18:cd:72:a8:1a:f4:3b:92:30:d5:2c:fb:92:d2:da:
         c7:c2:1f:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 02:48:47 2025 by rpki-client