Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/caa19d09-9dea-3935-a123-6522e01dd1d3.roa
File:                     caa19d09-9dea-3935-a123-6522e01dd1d3.roa (raw, json)
Hash identifier:          oRCBdjcNfDOSDXEZqXY0JygFQUhx81SYh6Vnov/Nx2c=
Subject key identifier:   9E:F4:4F:DB:EA:7F:BD:69:D0:74:6B:51:F1:38:D3:22:0D:0B:22:06
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B6797EE5A9C2661CA48C83F00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/caa19d09-9dea-3935-a123-6522e01dd1d3.roa
Signing time:             Sat 04 Oct 2025 01:00:33 +0000
ROA not before:           Sat 04 Oct 2025 01:00:33 +0000
ROA not after:            Fri 02 Jan 2026 02:00:33 +0000
asID:                     30036
IP address blocks:        2604:2d80:9880::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:67:97:ee:5a:9c:26:61:ca:48:c8:3f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  4 01:00:33 2025 GMT
            Not After : Jan  2 02:00:33 2026 GMT
        Subject: CN=042e6c3e-4182-4bf4-8599-249821e48e4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:34:3e:d4:56:09:a1:57:31:3f:ff:c2:7f:b2:
                    f6:1e:70:ea:1e:9d:74:19:dc:b4:02:20:fc:7c:15:
                    94:3f:41:98:9e:6b:b3:90:ac:3a:fd:7d:42:02:5f:
                    5f:a7:89:f0:ce:06:76:7e:d9:ed:b6:f3:a2:bd:86:
                    ca:07:42:1f:0a:d1:22:82:13:10:e4:a6:43:d7:26:
                    19:6f:83:c6:4c:89:fd:7f:4e:d6:63:dd:27:df:87:
                    5b:03:32:8e:19:cb:0f:32:49:bc:c1:88:b4:2b:2d:
                    96:7a:2b:1a:1a:06:68:04:5c:48:dc:b5:38:4e:50:
                    7b:00:3d:37:5e:30:e6:1b:ad:2a:38:cd:09:4b:87:
                    cc:18:0e:02:23:06:b2:8e:12:fe:f1:c3:7e:6e:6f:
                    a8:a6:2b:80:b4:34:63:1c:fb:3b:9b:c5:0d:0d:9a:
                    a2:27:e5:63:df:6b:62:69:6f:e4:c8:0d:0d:6e:ba:
                    7f:21:5b:32:37:9d:fb:51:29:1a:6f:df:27:41:38:
                    e7:98:d3:7e:53:dd:48:d5:46:ca:4d:e9:bd:de:5c:
                    01:01:b5:59:27:73:51:d3:6a:12:40:b8:f2:de:dd:
                    86:1d:34:e8:e4:d2:0a:96:ff:02:94:6c:4c:e9:5d:
                    98:97:09:ff:0a:e9:e7:72:86:56:bd:24:16:3f:fb:
                    60:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:F4:4F:DB:EA:7F:BD:69:D0:74:6B:51:F1:38:D3:22:0D:0B:22:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/caa19d09-9dea-3935-a123-6522e01dd1d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:9880::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:2d:ce:4c:91:21:78:bb:15:43:7c:a0:3f:84:6a:44:d4:ff:
         ac:49:06:3a:37:64:cc:e2:58:33:28:c2:dd:6a:1d:e3:12:f6:
         08:15:2b:a1:8c:1b:73:79:ee:7f:5b:10:74:c1:2a:9e:18:ec:
         3d:2a:9b:70:b6:77:71:0a:3f:9f:35:0f:a5:29:7c:f3:22:39:
         78:87:fb:6c:2d:cf:ba:33:92:dc:6c:c1:dd:e4:e9:a0:fc:e4:
         a8:48:32:ec:b3:04:70:61:0f:64:64:df:db:19:62:e6:2b:78:
         7c:26:ca:1a:fb:a5:c2:21:ca:5a:53:ce:af:c7:e6:97:10:a3:
         e9:0f:77:fb:cf:48:67:9e:ef:87:a1:85:75:70:01:d7:ee:13:
         52:f7:20:1b:bb:3f:46:ce:14:06:e9:d3:62:8f:9e:74:6a:1d:
         0f:bf:18:53:bd:b3:ce:c5:0d:6f:d4:6e:c1:c5:9f:24:b2:0a:
         91:fa:5a:c4:05:43:f1:24:2e:91:5c:13:55:fe:9a:d0:f1:5c:
         09:79:21:3d:aa:d2:a0:59:5b:3c:91:a1:55:9a:52:94:e8:f6:
         0c:60:d9:e0:b1:3e:cf:f9:80:2d:62:47:39:a4:5f:d2:7d:69:
         12:6c:21:2f:a7:ed:8a:8a:39:eb:44:36:43:cf:ff:82:97:c0:
         0d:68:97:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 02:58:36 2025 by rpki-client