Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c36fa9d2-f562-3f50-ad7d-dbda54403c2d.roa
File:                     c36fa9d2-f562-3f50-ad7d-dbda54403c2d.roa (raw, json)
Hash identifier:          sg/eodR65eBP2EPy4HX/TC4Qq/EL9Ycil1tLmOc/lzI=
Subject key identifier:   A6:63:B5:E1:79:5E:72:8D:EF:4B:8A:25:A1:40:35:15:A9:3E:18:78
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B620237445E60BDF08B5BB200
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c36fa9d2-f562-3f50-ad7d-dbda54403c2d.roa
Signing time:             Thu 02 Oct 2025 01:00:31 +0000
ROA not before:           Thu 02 Oct 2025 01:00:31 +0000
ROA not after:            Wed 31 Dec 2025 02:00:31 +0000
asID:                     19905
IP address blocks:        2604:2d80:b280::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:62:02:37:44:5e:60:bd:f0:8b:5b:b2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  2 01:00:31 2025 GMT
            Not After : Dec 31 02:00:31 2025 GMT
        Subject: CN=c382a5f7-c08d-4e51-97cc-24918dcd0a7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:59:f5:25:a1:d4:b4:ca:ae:9e:7b:3d:99:ed:
                    31:8f:c5:de:9b:44:72:98:01:cc:15:1e:c1:9f:ef:
                    b0:4b:79:fd:63:f3:30:b3:6a:d2:76:ce:59:f1:ce:
                    f6:5b:de:0d:18:ed:8c:5a:b8:67:6d:ef:b0:71:97:
                    db:df:f9:c2:1d:00:98:99:e1:aa:95:05:49:e5:0b:
                    cf:30:fc:a9:93:4c:4d:2e:69:e8:c6:f8:3b:51:98:
                    a1:66:f6:13:56:3d:6b:3f:2a:a1:da:3e:02:e1:05:
                    a1:24:01:6b:0f:ab:a2:b6:8b:cf:31:22:ae:cd:24:
                    75:c1:45:d0:92:f2:6f:aa:7c:cc:ab:ae:b0:e9:bd:
                    71:f2:2e:ca:71:63:f3:ec:cd:52:67:4b:b6:a8:cf:
                    cf:c4:f7:ac:ab:82:d9:2b:d5:09:1c:94:2c:d5:ea:
                    8b:4b:0d:34:2b:27:90:74:34:55:88:60:0f:90:56:
                    5b:1f:13:20:dd:26:6a:99:a0:6f:45:c1:39:25:f3:
                    b3:87:b4:12:e3:96:6e:cc:cd:bd:96:76:01:9f:be:
                    42:96:3a:40:d4:e7:59:1e:66:83:72:99:be:16:bc:
                    4c:50:a1:f8:e1:c5:0d:da:82:78:eb:87:81:5f:81:
                    a2:22:99:ab:1f:8e:f2:75:fa:25:18:5a:4f:bc:63:
                    5f:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:63:B5:E1:79:5E:72:8D:EF:4B:8A:25:A1:40:35:15:A9:3E:18:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c36fa9d2-f562-3f50-ad7d-dbda54403c2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:b280::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:19:b7:a2:3a:16:44:33:07:63:87:e6:f2:16:ee:f5:8b:45:
         d8:1e:6a:6b:74:8c:e2:36:d8:e7:31:63:b5:65:23:4e:6e:d2:
         c8:26:fd:b2:4f:0f:8c:fd:05:40:fa:ab:f4:09:a1:67:9a:f0:
         1b:09:6e:70:ba:e0:12:34:a6:3d:d3:65:6f:c5:ce:8a:62:10:
         be:27:e0:26:29:24:a1:dd:e9:d9:a5:fd:18:05:2e:9b:9e:66:
         37:fa:8f:51:0d:15:73:7e:02:6b:17:27:9b:17:fc:37:01:37:
         47:2e:53:fa:cc:39:4f:37:fd:79:a3:f3:3f:ff:e2:16:98:63:
         89:7f:65:5c:78:44:32:00:e6:03:f4:f5:96:a0:be:52:68:59:
         40:13:1c:5d:11:8d:cf:60:8a:28:bd:06:ba:27:5a:0c:2a:83:
         62:10:95:f5:94:91:c3:b5:72:56:11:61:9f:8c:b4:c1:e6:44:
         f4:6b:b0:db:41:ec:b1:63:fb:c5:a9:48:b7:5b:1d:2a:8a:b7:
         01:7a:84:ed:c6:e0:52:b6:43:69:cf:00:56:93:3e:8d:13:2b:
         e6:c2:a3:60:b1:c1:cb:6e:c5:c3:06:4a:c7:c6:07:88:ba:85:
         b8:1d:d6:98:f5:fa:2a:67:89:79:bd:44:ec:5e:ea:93:06:45:
         13:88:9f:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 02:45:54 2025 by rpki-client