Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d78e30ee-3548-3b04-846f-95523a83ecee.roa
File:                     d78e30ee-3548-3b04-846f-95523a83ecee.roa (raw, json)
Hash identifier:          EpSLalcERBFu3L2cH6DhbyzleC1gYvRsODyj91Lv4Lg=
Subject key identifier:   73:BF:41:78:FB:81:1E:47:58:55:46:52:10:E1:8E:C8:36:BF:B1:19
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B64CE47DA41AE7AB4C36BFD80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d78e30ee-3548-3b04-846f-95523a83ecee.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     30036
IP address blocks:        2604:2d80:7780::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:47:da:41:ae:7a:b4:c3:6b:fd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=673ecd7a-35bf-4ce9-ab2c-e41b7eaa2ede
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:c6:d0:dd:48:a6:99:ae:81:ba:77:84:7b:07:
                    6b:4a:fe:69:a6:68:1d:c0:fc:4c:0b:9c:7e:5a:3b:
                    31:b2:0e:ba:d0:17:45:ad:90:18:83:fe:1e:d5:58:
                    59:ea:ce:e7:dd:40:fe:d3:d4:b5:95:19:e7:88:93:
                    51:75:82:af:48:f9:84:13:fc:a2:c8:cd:14:55:29:
                    1a:f2:6f:b8:0a:98:c0:59:86:dd:5b:fc:c4:06:8f:
                    fd:75:9e:80:33:3a:9b:c7:82:c5:01:bb:f2:92:29:
                    bb:10:58:b2:f5:fa:1c:8d:85:ae:fd:97:76:42:c7:
                    13:39:07:91:33:9e:0b:2c:dd:90:b3:92:5d:f4:7c:
                    c3:e1:3c:f3:3a:33:e9:9a:e2:37:65:94:30:1b:c1:
                    31:31:33:d3:99:bb:b3:a3:1d:89:28:5f:ae:2c:be:
                    b3:a6:a8:cb:58:78:a1:f4:d6:6a:c5:f4:d9:e2:55:
                    d4:0c:83:11:1e:ac:6b:76:1c:32:7e:2e:86:ac:56:
                    cf:ed:8a:7e:8a:8f:10:a4:21:cf:f5:3a:3d:7e:82:
                    cd:e0:59:cc:a6:90:59:eb:71:98:08:a3:35:ae:f3:
                    1b:a3:f0:8a:f7:5a:10:10:5e:40:32:17:8d:5b:c6:
                    66:92:74:07:9f:5d:6d:30:97:db:c9:11:19:f0:04:
                    6b:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:BF:41:78:FB:81:1E:47:58:55:46:52:10:E1:8E:C8:36:BF:B1:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d78e30ee-3548-3b04-846f-95523a83ecee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:7780::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:ec:f4:84:d9:d9:2c:7b:06:82:9f:e3:e9:6b:b1:d1:ce:fb:
         2e:aa:de:af:a8:72:f0:99:4c:a3:0f:1c:59:5b:e3:f8:23:2a:
         02:ad:22:d3:67:75:9f:ad:45:2c:c0:0b:ff:c5:a9:2a:8d:6c:
         67:a6:6b:f7:a9:6a:9f:2f:a6:01:78:b5:01:c5:c4:47:47:a8:
         53:47:f8:48:83:69:73:2c:dc:ab:de:de:d0:28:84:67:29:16:
         c5:33:7a:59:e8:e1:09:f3:15:3d:0a:e7:59:7c:e7:61:16:dc:
         94:8d:a2:a5:9f:78:ec:c6:3b:d5:ce:18:e8:df:71:6a:c2:26:
         9d:e6:4d:48:04:c5:37:a6:60:42:33:4b:80:ca:11:4d:79:53:
         68:85:13:e6:e5:13:51:03:fa:35:b2:c2:1d:a7:e5:2d:08:65:
         3f:a2:97:d0:56:a5:21:44:59:25:3e:ad:fb:15:84:cf:93:72:
         96:7a:45:15:15:86:bb:8b:61:2d:4c:7b:29:b5:8a:56:18:60:
         9e:99:87:63:3f:f1:75:4c:a7:a0:44:99:6f:37:94:be:18:90:
         78:67:66:9d:2c:55:3c:30:4a:ce:15:3a:00:2f:1c:d4:91:b6:
         3d:42:61:76:4b:bf:cf:12:90:ff:4e:87:03:f7:d7:65:ee:7f:
         09:09:5f:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 02:58:58 2025 by rpki-client