Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e125deca-71dc-3c9f-9a54-ffbf0a785086.roa
File:                     e125deca-71dc-3c9f-9a54-ffbf0a785086.roa (raw, json)
Hash identifier:          rIdAL2WsgdViOueHpCnZjj9fAg+YgnVCHF+ualpzeKs=
Subject key identifier:   BC:36:D0:8B:CE:C9:7A:ED:C7:0A:79:72:51:7A:DA:91:7C:11:2E:3D
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B64CCA2120BC0EC7AE9D22A80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e125deca-71dc-3c9f-9a54-ffbf0a785086.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     30036
IP address blocks:        2604:2d80:7480::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cc:a2:12:0b:c0:ec:7a:e9:d2:2a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=b38f2cf9-527a-40da-a771-f6615fd33313
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:3d:b9:30:ec:e1:81:cf:01:8f:fc:37:99:02:
                    be:e8:88:6d:0e:31:09:a7:06:05:97:db:76:58:40:
                    0b:79:c5:43:42:e0:e6:af:9e:1f:4a:c2:8a:e9:5e:
                    58:d5:09:27:ba:40:79:b3:41:b5:ad:fb:1b:aa:3a:
                    db:e1:35:f6:1e:5f:f7:c6:aa:87:4c:83:21:87:54:
                    c1:6f:a0:75:4e:24:53:57:2e:23:9a:41:10:c8:2b:
                    0f:fa:3d:72:e1:22:7f:d0:32:90:8c:db:86:fd:c7:
                    52:e8:d8:57:92:e7:3b:60:66:ef:48:cf:f2:46:99:
                    1b:a3:2d:09:c4:50:21:58:e9:8b:ac:52:cf:b9:18:
                    e1:a4:f0:77:9a:8c:9c:57:e7:b5:74:09:6d:b8:47:
                    98:35:e7:3e:cc:90:44:7a:b2:70:f7:87:93:5e:c3:
                    7a:a2:16:b2:09:55:c6:19:17:73:0e:61:b4:5d:ee:
                    30:02:fc:01:b9:4f:ae:21:16:b6:46:82:f8:16:50:
                    73:23:bb:87:6b:a9:6c:b4:95:c4:50:6f:c4:af:06:
                    97:e0:89:61:58:fd:54:c3:ed:42:09:2a:d1:5a:1e:
                    2f:c7:aa:90:97:da:d9:13:c3:94:83:64:91:ec:48:
                    f0:6f:bf:5b:9d:fb:46:55:69:22:68:ee:68:bb:00:
                    6c:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:36:D0:8B:CE:C9:7A:ED:C7:0A:79:72:51:7A:DA:91:7C:11:2E:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e125deca-71dc-3c9f-9a54-ffbf0a785086.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:7480::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:8c:61:34:a8:5c:40:fb:01:40:c2:cb:a3:9d:06:af:bb:c0:
         dc:fa:44:3d:ad:21:c6:a9:6b:5a:da:40:c3:86:d8:06:d9:7a:
         5c:f8:f4:70:ca:af:2c:95:2b:90:63:69:2d:0b:97:68:8c:f1:
         c8:9d:6f:85:29:c9:2c:21:d9:c2:fa:39:ff:7f:20:b4:a6:db:
         23:98:07:52:82:a7:7b:76:f1:85:0e:79:4c:53:ec:de:95:11:
         56:b4:a9:ab:bb:f1:ab:b8:d6:bb:39:fe:7a:f3:d6:82:04:67:
         84:fc:5a:98:06:84:93:0e:f2:cf:2c:14:bd:b5:eb:8d:b6:6b:
         76:b5:67:56:26:40:94:20:b9:9d:24:5b:23:a7:03:bd:98:17:
         6e:5e:0b:dc:48:84:b3:95:ec:c6:c5:4e:53:dd:9c:20:dc:11:
         67:c3:75:04:af:55:54:78:c5:66:1f:0f:d6:f7:46:ca:6b:8e:
         fd:15:2b:69:06:43:45:c5:3e:a6:36:47:4d:f5:10:6e:7d:34:
         84:4f:03:5e:e5:df:aa:c7:e8:48:cc:3a:3b:7c:fb:c9:ae:36:
         d6:c6:e6:27:ec:ce:1b:52:d1:91:c6:7c:7f:3a:3b:8a:f0:16:
         53:b1:8a:88:49:93:6e:e7:bf:7a:53:cd:18:06:79:48:b3:00:
         97:63:29:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 02:50:36 2025 by rpki-client