Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cb76e5e5-90cd-3772-b590-6b1405a26307.roa
File:                     cb76e5e5-90cd-3772-b590-6b1405a26307.roa (raw, json)
Hash identifier:          HtjWuL7NnYlK76IumBczroTeUIOK62IOYZVpeWhoTO8=
Subject key identifier:   36:FB:27:95:6A:EC:C6:47:C6:94:1E:77:E2:05:21:9C:D1:49:D3:63
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B56D748092E9E1F1DCBAC6800
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cb76e5e5-90cd-3772-b590-6b1405a26307.roa
Signing time:             Sun 28 Sep 2025 01:00:33 +0000
ROA not before:           Sun 28 Sep 2025 01:00:33 +0000
ROA not after:            Sat 27 Dec 2025 02:00:33 +0000
asID:                     30036
IP address blocks:        2604:2d80:7f80::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:56:d7:48:09:2e:9e:1f:1d:cb:ac:68:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 28 01:00:33 2025 GMT
            Not After : Dec 27 02:00:33 2025 GMT
        Subject: CN=9339494b-cb76-4ec7-a402-8a29cf4f577b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:1e:a0:f1:7d:17:b6:2f:4a:08:65:7a:0a:0a:
                    10:d2:07:c3:63:c0:91:87:39:9e:36:44:20:09:14:
                    27:06:34:96:5f:ed:68:d6:c3:a9:13:12:71:74:75:
                    25:d7:04:91:e0:49:36:d1:56:3e:f4:a4:68:5a:68:
                    5a:e5:3d:41:81:e9:40:06:f6:66:db:52:49:62:d8:
                    2f:f6:b5:c3:12:2d:dd:0c:8e:a8:bc:eb:59:bc:ec:
                    2d:54:42:fb:46:97:5d:a9:59:5a:26:08:51:a3:95:
                    bd:c6:b6:37:e7:1b:d2:0e:72:9a:52:85:8c:45:ac:
                    42:f7:9b:3a:77:03:af:19:97:49:9f:44:fb:0c:5b:
                    06:ad:6a:90:7e:b3:ef:20:59:e2:5d:2f:9e:c5:c7:
                    5c:4d:f6:4a:70:40:5c:6a:af:5c:1f:23:30:7a:e8:
                    48:92:08:7a:80:f9:b4:75:e6:d6:d4:29:09:94:2d:
                    a9:19:72:71:c1:a1:7d:36:63:56:bf:78:d7:87:5d:
                    40:9a:ff:9a:60:73:7e:c4:bf:da:71:74:db:2d:97:
                    8a:18:67:f9:5b:75:8d:12:db:b7:bc:c7:b1:f2:f0:
                    42:75:18:e6:0d:bc:28:42:f3:f1:f6:5b:57:86:bb:
                    98:69:7c:99:45:33:5d:40:13:91:bf:61:82:f2:9a:
                    fa:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:FB:27:95:6A:EC:C6:47:C6:94:1E:77:E2:05:21:9C:D1:49:D3:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cb76e5e5-90cd-3772-b590-6b1405a26307.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:7f80::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:ca:0a:4e:7a:a9:af:22:c4:f2:ac:25:6d:29:2b:b3:11:73:
         71:41:19:1b:bd:7c:69:cf:a7:e0:ae:23:34:06:e3:a5:ea:52:
         0e:1a:13:a6:85:b2:53:42:ef:5e:b4:21:99:8d:6a:58:79:63:
         7b:32:47:a0:9e:07:b9:ce:bf:bb:1d:cb:f4:d6:00:30:2d:31:
         b0:8b:65:74:3d:e6:f8:2d:31:b0:22:5a:fc:8c:10:da:65:06:
         61:40:45:d6:5a:8c:cd:27:cb:86:74:21:4e:7b:39:83:0a:ac:
         7e:f5:f0:db:65:b3:24:d7:52:d6:99:a5:3d:59:e4:cb:84:bc:
         8f:8f:b2:0f:d3:00:ae:65:c3:84:8b:78:de:f9:11:ab:30:60:
         84:7c:69:21:04:c8:cd:00:ae:64:56:0d:91:c0:72:5b:74:88:
         36:f4:09:ba:f2:19:17:d1:c2:6c:cf:84:ca:71:d8:5d:f7:95:
         ac:67:c2:77:92:fc:30:01:56:2a:69:5f:f6:7d:38:69:a0:9c:
         d9:91:e2:9c:8b:8a:27:83:56:77:04:4e:65:65:8e:92:ce:ef:
         26:fd:11:7a:f9:92:97:78:21:a2:d8:e8:d2:7c:fb:4d:55:ab:
         88:cb:a3:d2:8d:6b:10:be:62:a0:13:5e:5f:ba:35:d5:28:b4:
         8b:5a:7f:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 02:53:51 2025 by rpki-client