Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/de81dd91-2a87-37fc-98bb-b7af2c10d236.roa
File:                     de81dd91-2a87-37fc-98bb-b7af2c10d236.roa (raw, json)
Hash identifier:          qBMfa5qFPjQL7jrO9TPoKfavAeqGgObKNGn3wlZuOqU=
Subject key identifier:   99:76:32:56:EA:E9:60:35:7C:9B:B5:4C:5E:65:92:43:9D:4A:20:1C
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B67974120084F4F51AC6BF7C0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/de81dd91-2a87-37fc-98bb-b7af2c10d236.roa
Signing time:             Sat 04 Oct 2025 01:00:33 +0000
ROA not before:           Sat 04 Oct 2025 01:00:33 +0000
ROA not after:            Fri 02 Jan 2026 02:00:33 +0000
asID:                     30036
IP address blocks:        2604:2d80:9a00::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:67:97:41:20:08:4f:4f:51:ac:6b:f7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  4 01:00:33 2025 GMT
            Not After : Jan  2 02:00:33 2026 GMT
        Subject: CN=966956fe-443d-4763-9919-2359cc652623
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:60:1b:f5:23:37:57:54:6a:2c:4c:39:ab:62:
                    73:e3:73:95:e2:af:c5:f3:b4:ac:bd:91:03:d7:5c:
                    8c:bc:a9:82:9b:20:40:df:fc:16:49:2b:72:db:35:
                    99:ec:80:5f:ba:a9:56:b3:c8:9c:8e:23:f6:cf:a9:
                    df:32:e3:15:ae:d0:c8:ff:64:49:77:fd:09:25:cf:
                    58:03:a9:2b:09:35:40:42:14:82:48:48:c8:12:2a:
                    fb:76:dc:a8:c9:94:03:5b:7b:9f:69:3d:4f:b6:6c:
                    bb:a3:c5:9d:15:c2:a6:ec:13:c4:dc:8d:22:b4:0a:
                    53:a7:3b:be:c3:e4:2c:32:41:9f:fd:3e:ca:ce:95:
                    e0:cc:f2:b5:71:55:9a:70:18:91:ac:0b:a8:a1:56:
                    a9:23:b2:8d:1f:7b:6c:66:05:4c:ec:10:7a:27:6e:
                    56:c8:09:c7:49:8e:4d:ed:af:8b:68:06:d3:a5:84:
                    2c:9c:c8:64:cd:0e:7d:7d:f1:91:4d:65:3b:60:cf:
                    1f:f0:c3:a6:56:46:ba:47:b9:39:a4:f0:83:f0:e7:
                    87:66:da:78:bf:0a:18:c1:5f:6d:4e:00:84:cd:fc:
                    fc:6e:e2:9e:e1:f9:27:5f:08:f3:12:88:98:e3:ae:
                    55:4c:53:33:d8:97:83:81:e4:69:f3:e5:dd:67:ad:
                    90:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:76:32:56:EA:E9:60:35:7C:9B:B5:4C:5E:65:92:43:9D:4A:20:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/de81dd91-2a87-37fc-98bb-b7af2c10d236.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:9a00::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:26:02:5e:90:4d:a2:46:ba:64:86:b8:8d:ac:e0:5d:c7:ef:
         82:94:9c:6f:2e:69:27:f9:91:2a:94:60:4a:92:b7:5f:e6:c2:
         31:94:73:06:d3:47:57:05:f3:6e:f5:a5:a0:79:9d:1e:37:ae:
         28:82:42:56:1e:9e:35:e3:02:5a:0d:7e:47:8b:44:4e:38:3d:
         ed:1c:75:df:14:81:55:af:68:b8:ae:89:60:41:be:fa:07:da:
         62:a1:21:3a:cb:a7:ff:d8:c8:56:2a:e8:60:27:07:b3:2d:5f:
         7f:12:6e:48:0b:83:75:70:3e:0d:20:21:b9:03:9a:d0:bb:b3:
         0e:64:73:19:11:f0:e2:91:00:20:f9:cc:e2:13:f2:77:37:d6:
         ba:dc:5b:87:55:c4:6f:cc:5f:35:a7:72:06:74:e7:59:45:3f:
         06:4e:28:10:49:d2:fa:27:ad:8b:82:ab:26:87:fd:22:a2:51:
         8f:e5:25:37:64:9b:df:43:94:49:04:de:20:88:4f:d1:82:7f:
         e2:8f:9e:f9:98:45:fa:5d:46:92:db:c4:7d:f6:b9:2f:33:42:
         a7:38:af:fb:53:6e:a4:40:a3:d9:75:19:43:bd:f1:8b:40:96:
         5e:69:1e:e9:22:01:bc:3e:e5:ae:3a:f2:af:1f:f7:99:2e:c5:
         c7:c4:d8:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 02:56:01 2025 by rpki-client