Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e5fb91a1-427c-353d-bdca-3042d4dc4afa.roa
File:                     e5fb91a1-427c-353d-bdca-3042d4dc4afa.roa (raw, json)
Hash identifier:          /ZkKpBXsSbCUAuOX/xJFkxEBjxbnRrbEiLxptB6d25I=
Subject key identifier:   11:0D:29:38:C8:46:22:E0:BF:B1:60:1A:C7:33:73:95:DC:BF:CA:50
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B1636A4C86CDD9A9B6EEBC500
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e5fb91a1-427c-353d-bdca-3042d4dc4afa.roa
Signing time:             Thu 04 Sep 2025 21:25:35 +0000
ROA not before:           Thu 04 Sep 2025 21:25:35 +0000
ROA not after:            Wed 03 Dec 2025 22:25:35 +0000
asID:                     30036
IP address blocks:        2604:2d81:3000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:16:36:a4:c8:6c:dd:9a:9b:6e:eb:c5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep  4 21:25:35 2025 GMT
            Not After : Dec  3 22:25:35 2025 GMT
        Subject: CN=cfcbff24-c5ab-4954-8441-b75664d41453
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:4a:a6:89:08:ed:a0:50:bc:ba:bf:f2:98:9d:
                    e7:e9:95:28:86:65:9a:a7:fc:53:67:73:12:eb:45:
                    de:9f:d6:03:b7:35:8f:7e:eb:f7:7d:c7:89:99:db:
                    34:03:e3:92:d4:e1:95:43:a8:a8:13:0b:17:82:b3:
                    e1:25:8e:ea:b4:3d:34:47:05:b5:85:2f:c4:33:db:
                    3f:7c:e6:ca:a2:ec:e9:30:a7:1b:21:00:87:61:c4:
                    ab:20:b6:84:a7:b6:8f:06:16:57:b1:e8:37:dc:b9:
                    d1:e4:d1:aa:dc:bc:39:2c:9c:b8:9e:1a:16:f6:78:
                    d2:ef:f7:41:41:76:ac:59:f1:34:19:1e:50:a3:0c:
                    d1:8a:f6:f0:15:a6:ef:cc:94:fb:f4:a5:42:8a:1a:
                    5c:5c:6b:e0:05:43:35:ca:06:54:25:de:84:c0:57:
                    56:91:31:71:d6:e1:ee:98:f7:f8:54:bc:53:9f:bd:
                    10:cf:08:38:18:f3:30:a6:ed:e7:76:28:4a:55:09:
                    b0:7a:b3:dd:dd:29:f0:20:f2:b3:7e:b9:ca:88:c0:
                    75:29:72:b2:80:01:de:39:03:0d:74:7f:44:31:92:
                    9a:07:84:75:5e:96:16:de:1f:a4:13:a2:99:27:81:
                    8c:7a:f4:d4:e5:b9:b0:a9:aa:7f:db:37:e2:be:39:
                    b1:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:0D:29:38:C8:46:22:E0:BF:B1:60:1A:C7:33:73:95:DC:BF:CA:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e5fb91a1-427c-353d-bdca-3042d4dc4afa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d81:3000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:a0:41:c5:2d:0f:ba:58:96:97:c9:52:3a:ac:fb:17:f2:18:
         b5:6b:b8:50:34:6f:3b:83:1a:c3:5a:3b:42:e6:dc:fc:e7:57:
         48:7b:f7:b8:28:39:7e:f8:9c:e0:95:94:19:fe:62:1d:22:5d:
         98:a3:29:32:25:3f:bd:e5:5d:6d:29:f8:dd:3b:77:70:b9:6b:
         56:be:6a:05:e7:b5:dc:09:cd:d6:7b:34:b9:bc:56:ee:11:1d:
         d2:ff:70:a1:ac:dc:50:6f:ee:bd:6e:33:41:d2:b1:64:1d:98:
         58:e7:d2:e4:5e:02:5d:0e:c1:52:1c:b3:bc:ac:bc:0d:ac:08:
         ad:2a:96:7f:af:3b:6f:e1:2b:b2:11:04:36:f9:62:99:3f:3f:
         05:72:5d:61:84:51:1c:5f:c8:20:a9:f4:8b:5c:60:a6:ee:54:
         49:a2:b0:a6:12:91:18:5c:33:f3:0b:18:3b:9c:bc:21:94:b0:
         72:36:06:41:43:05:12:c1:2b:1d:21:cc:66:11:b1:f6:7c:6d:
         63:a3:c4:27:24:d4:fd:9c:ee:5f:01:aa:23:d7:21:f7:e4:99:
         a9:53:4b:d3:a7:f7:6e:20:dd:0a:2c:62:5e:cb:c2:70:cf:bb:
         38:c8:fe:62:71:a7:3e:aa:fe:ae:ea:22:3c:92:92:17:ad:24:
         35:c1:0c:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 03:00:22 2025 by rpki-client