Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ddbb9c8c-3a14-3297-adce-9528c9513c44.roa
File:                     ddbb9c8c-3a14-3297-adce-9528c9513c44.roa (raw, json)
Hash identifier:          C/3EYqLXrfqIBlZ4WCWAaXK2S5f0Ib3PgdUbItfFr5w=
Subject key identifier:   5E:D4:D4:4D:10:FF:F9:22:16:65:07:7D:91:34:4D:B7:69:EC:72:5D
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B0CDC2A7587E6838D90F26980
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ddbb9c8c-3a14-3297-adce-9528c9513c44.roa
Signing time:             Mon 01 Sep 2025 13:00:40 +0000
ROA not before:           Mon 01 Sep 2025 13:00:40 +0000
ROA not after:            Sun 30 Nov 2025 14:00:40 +0000
asID:                     30036
IP address blocks:        2604:2d80:7c00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0c:dc:2a:75:87:e6:83:8d:90:f2:69:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep  1 13:00:40 2025 GMT
            Not After : Nov 30 14:00:40 2025 GMT
        Subject: CN=f0711b6c-fe6b-473d-92dc-b2d8f07dfa3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:6a:fe:64:b5:07:3f:6b:fc:c5:18:2b:79:d0:
                    86:5f:c1:bd:38:8d:58:d8:70:e9:ed:85:be:32:85:
                    f0:ba:f1:63:90:3c:66:86:72:b7:cc:38:e9:37:0f:
                    33:f0:25:11:0c:fe:af:32:11:35:2e:c7:40:e6:ce:
                    3e:14:47:bb:cc:9b:e9:8c:65:03:ea:d8:e3:c5:97:
                    a5:03:de:ec:f1:9a:a9:72:fb:d9:47:35:d5:36:50:
                    39:4d:74:52:4b:04:76:3d:bb:fa:24:4f:83:c5:93:
                    ec:b4:f1:89:cd:f3:aa:3c:24:90:ec:f6:13:f0:59:
                    da:3e:73:f6:7e:53:ce:c4:cc:6b:ac:48:1e:ca:b6:
                    26:5a:73:53:67:72:7b:02:e2:66:bf:b1:99:d3:66:
                    2d:89:d5:ad:c3:c2:c4:ce:25:1d:64:0a:02:c1:ee:
                    3c:89:85:31:9f:4e:20:a3:35:a0:3e:76:4b:75:d6:
                    16:2c:51:78:64:32:1f:57:03:23:3a:d4:5f:6f:a9:
                    fb:ce:ee:83:16:a2:92:84:b7:af:07:98:0f:92:58:
                    14:c7:df:9e:41:4a:b4:a7:7b:68:7a:3f:28:2b:fb:
                    86:5d:ae:5a:a5:81:27:9d:97:83:da:7f:2f:29:37:
                    a4:e4:de:03:5c:a1:8b:47:85:cb:5e:89:99:60:fb:
                    b6:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:D4:D4:4D:10:FF:F9:22:16:65:07:7D:91:34:4D:B7:69:EC:72:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ddbb9c8c-3a14-3297-adce-9528c9513c44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:7c00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:17:e6:57:2d:4f:2c:fc:21:53:24:2e:28:e5:75:51:e7:71:
         04:7b:fc:6c:67:09:fd:77:55:99:bc:92:b9:c5:e0:87:66:c6:
         7e:bb:18:22:0b:c6:0d:9e:19:a2:c0:07:7a:ac:87:79:1d:10:
         63:7d:de:58:bb:6d:38:af:74:36:5e:2f:b9:0b:29:81:60:40:
         89:7a:61:29:3f:7a:16:3e:37:7e:ca:25:2d:44:96:98:63:fd:
         c2:79:fa:07:76:d5:a2:b3:ec:05:cf:28:26:24:d3:4a:39:b9:
         5e:cd:6b:74:29:8c:ed:2b:28:0a:50:a0:c1:c0:cf:68:03:21:
         d9:ad:d7:18:f3:b1:fc:1d:b2:1f:21:b1:de:0d:66:3d:a7:41:
         e2:d8:e3:d4:e6:d8:7f:5f:da:69:6d:a4:12:f3:a9:8b:40:01:
         e8:c8:e2:1a:22:57:60:a0:73:7a:f8:ad:2d:5b:64:a0:44:5e:
         1b:d9:38:6e:5f:7d:73:f0:b5:4d:4f:e4:3e:98:20:de:d0:d3:
         cf:39:5e:0c:86:28:bd:4f:a7:81:6d:e6:85:f2:8f:62:ee:53:
         3e:c3:9f:47:2f:ea:e8:6e:41:a7:83:a1:0e:a3:fc:af:33:00:
         a7:b1:ec:bb:ee:8e:3c:d7:1f:00:4f:5d:47:ce:1b:13:a0:35:
         56:05:73:02
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEsM3Cp1h+aDjZDyaYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDkwMTEzMDA0MFoXDTI1MTEzMDE0MDA0MFowLzEtMCsGA1UEAxMk
ZjA3MTFiNmMtZmU2Yi00NzNkLTkyZGMtYjJkOGYwN2RmYTNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWr+ZLUHP2v8xRgredCGX8G9OI1Y2HDp7YW+
MoXwuvFjkDxmhnK3zDjpNw8z8CURDP6vMhE1LsdA5s4+FEe7zJvpjGUD6tjjxZel
A97s8ZqpcvvZRzXVNlA5TXRSSwR2Pbv6JE+DxZPstPGJzfOqPCSQ7PYT8FnaPnP2
flPOxMxrrEgeyrYmWnNTZ3J7AuJmv7GZ02YtidWtw8LEziUdZAoCwe48iYUxn04g
ozWgPnZLddYWLFF4ZDIfVwMjOtRfb6n7zu6DFqKShLevB5gPklgUx9+eQUq0p3to
ej8oK/uGXa5apYEnnZeD2n8vKTek5N4DXKGLR4XLXomZYPu2OwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFF7U1E0Q//kiFmUHfZE0Tbdp7HJdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZGRiYjljOGMtM2ExNC0z
Mjk3LWFkY2UtOTUyOGM5NTEzYzQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQtgHww
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAWRfmVy1PLPwhUyQuKOV1UedxBHv8bGcJ/XdVmbySucXgh2bGfrsY
IgvGDZ4ZosAHeqyHeR0QY33eWLttOK90Nl4vuQspgWBAiXphKT96Fj43fsolLUSW
mGP9wnn6B3bVorPsBc8oJiTTSjm5Xs1rdCmM7SsoClCgwcDPaAMh2a3XGPOx/B2y
HyGx3g1mPadB4tjj1ObYf1/aaW2kEvOpi0AB6MjiGiJXYKBzevitLVtkoEReG9k4
bl99c/C1TU/kPpgg3tDTzzleDIYovU+ngW3mhfKPYu5TPsOfRy/q6G5Bp4OhDqP8
rzMAp7Hsu+6OPNcfAE9dR84bE6A1VgVzAg==
-----END CERTIFICATE-----
Generated at Sat Oct 11 02:42:43 2025 by rpki-client