Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c2d0f9e2-1c83-3f6c-a3e4-00c7d672e625.roa
File:                     c2d0f9e2-1c83-3f6c-a3e4-00c7d672e625.roa (raw, json)
Hash identifier:          dGK4e0zKcYFrRmdQHKw81qnvlYkEv8TVzg/qgavNyec=
Subject key identifier:   67:D7:46:E3:A3:3D:FE:EA:65:18:D7:09:B3:E1:40:89:EB:6B:DA:72
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B6797F00B356A810FFD288A00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c2d0f9e2-1c83-3f6c-a3e4-00c7d672e625.roa
Signing time:             Sat 04 Oct 2025 01:00:33 +0000
ROA not before:           Sat 04 Oct 2025 01:00:33 +0000
ROA not after:            Fri 02 Jan 2026 02:00:33 +0000
asID:                     30036
IP address blocks:        2604:2d80:9580::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:67:97:f0:0b:35:6a:81:0f:fd:28:8a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  4 01:00:33 2025 GMT
            Not After : Jan  2 02:00:33 2026 GMT
        Subject: CN=6d3b3924-6789-44db-bb8b-b88ba0d5f736
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:7d:9a:19:22:e7:7c:25:1c:90:c3:ba:58:d0:
                    e1:ad:b9:2c:15:13:a7:51:48:f2:c4:cf:62:e6:92:
                    dd:2a:49:8c:ce:45:c4:ef:9c:5e:c8:f3:13:ce:a7:
                    0e:04:2c:2b:0f:df:ec:d7:27:ba:cc:8d:69:29:f2:
                    c7:45:9d:e9:b0:4b:92:bc:1c:f0:fe:1d:bd:af:f3:
                    6d:cc:9b:59:0c:dd:53:9e:74:bf:2a:a1:8c:0f:9b:
                    35:1c:65:53:cc:d8:39:1d:04:7c:89:83:69:14:e7:
                    95:a7:52:50:18:31:01:7c:fa:4e:2b:59:a1:1b:40:
                    61:0c:2c:74:42:54:18:70:61:d6:44:bf:bb:86:b6:
                    ff:ae:7f:c9:87:22:38:53:97:a5:3a:0b:db:70:5e:
                    6a:e3:e9:d8:ba:46:52:16:60:96:ae:24:b2:db:9e:
                    cb:78:36:de:6a:9c:90:91:45:de:3c:d3:00:9b:fb:
                    5c:a4:87:dc:87:f9:a4:0b:d9:bf:d8:4d:43:f2:48:
                    8e:f7:58:19:93:1f:cc:01:ad:45:75:88:fe:b9:2b:
                    15:be:5b:9e:52:a8:51:28:c6:ef:cb:fe:c9:ff:57:
                    48:4d:9b:fe:30:e7:07:a6:d7:51:b8:6f:99:60:7d:
                    60:54:73:f9:fe:62:a4:c4:47:9d:5c:eb:a5:26:ee:
                    f4:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:D7:46:E3:A3:3D:FE:EA:65:18:D7:09:B3:E1:40:89:EB:6B:DA:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c2d0f9e2-1c83-3f6c-a3e4-00c7d672e625.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:9580::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:29:97:be:9e:af:cd:45:bb:a0:fc:51:47:5e:1e:db:dc:29:
         2e:b3:ec:50:4f:a4:1d:b8:da:9a:be:7e:8b:e5:df:85:b7:74:
         34:92:36:0b:ad:b9:af:47:fa:db:15:3c:9f:8a:ba:87:be:1f:
         be:b2:74:da:f3:5a:7b:35:24:11:3c:d2:e6:e7:c5:74:09:b6:
         83:67:c0:8e:bd:84:8b:52:c6:85:49:55:6d:72:13:62:ed:50:
         95:dd:43:cf:14:3b:4f:1c:fd:45:1c:6a:91:33:0b:d6:67:22:
         a2:92:f4:49:80:62:ca:54:0c:64:b3:ad:80:fc:1e:4d:c3:11:
         dc:d7:9f:b4:95:ac:0f:55:ac:92:62:0a:6c:9f:d6:d1:85:12:
         cb:11:59:d2:16:c5:92:00:d7:39:56:f1:f9:6e:a1:8e:93:d9:
         4c:54:f0:b2:f9:28:e3:c0:e8:fb:7e:ed:bd:f8:58:1a:13:ca:
         ac:3c:4e:6f:53:b1:a4:95:7d:01:5e:7a:dd:72:90:cd:92:be:
         1a:f2:16:ac:cf:8d:ff:8d:78:14:1b:6f:fa:ad:78:03:79:3a:
         0d:86:fc:27:95:8b:d4:80:f2:89:8c:da:ab:8b:8d:93:4e:1f:
         5a:9a:c0:61:43:57:fe:f7:d7:8a:29:3c:38:ea:ff:57:cc:ab:
         13:75:9f:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 02:45:57 2025 by rpki-client