Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e84b311a-4ce4-3516-884a-5bf515549f40.roa
File:                     e84b311a-4ce4-3516-884a-5bf515549f40.roa (raw, json)
Hash identifier:          bvFj1RcE4tQnL4lBW6Fvr0Qo6idpk1w8xQJWfZBksvw=
Subject key identifier:   F3:9B:DD:7A:4B:80:2A:85:9A:AC:08:6F:10:43:9D:3D:65:6D:D4:8D
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B6797EBD7ADED2F875D63F5E0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e84b311a-4ce4-3516-884a-5bf515549f40.roa
Signing time:             Sat 04 Oct 2025 01:00:33 +0000
ROA not before:           Sat 04 Oct 2025 01:00:33 +0000
ROA not after:            Fri 02 Jan 2026 02:00:33 +0000
asID:                     30036
IP address blocks:        2604:2d80:2080::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:67:97:eb:d7:ad:ed:2f:87:5d:63:f5:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  4 01:00:33 2025 GMT
            Not After : Jan  2 02:00:33 2026 GMT
        Subject: CN=1091d9bd-f613-4cf8-b51c-ee69941ea456
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d7:e9:6b:46:d6:0f:43:64:25:ef:9d:ef:55:
                    c6:99:5b:cd:5d:7a:50:b5:2c:e6:4e:e8:6f:e9:2d:
                    89:41:f9:15:88:10:19:55:1e:8e:61:6d:68:53:67:
                    49:c5:24:53:83:26:03:07:68:92:67:93:d2:06:be:
                    0c:92:56:85:1c:28:53:86:62:7d:a0:cf:a2:7e:b5:
                    f6:b6:b8:66:2d:23:ef:e9:e1:b9:cc:6b:02:eb:c8:
                    cd:b6:70:f6:b8:ab:4f:66:dc:eb:dd:26:ce:b0:06:
                    2e:2f:f0:e5:f6:8d:59:ce:72:a1:94:da:6a:eb:ee:
                    7c:73:1a:99:47:6c:0b:7a:ff:3b:59:b9:e1:7b:e7:
                    20:45:fc:80:03:dd:1a:68:48:9f:ee:56:be:35:0d:
                    25:b3:b5:de:86:94:58:ff:2d:25:52:51:dd:34:ab:
                    6d:53:c5:eb:2a:ef:d6:98:5b:55:74:09:1e:be:60:
                    fc:27:42:37:b9:4d:b6:11:13:89:24:e9:18:8d:1f:
                    66:7a:f6:a2:ee:ee:ad:86:84:0c:b3:90:fe:e5:3c:
                    4a:53:a6:5d:12:50:44:1f:a1:03:7e:9a:04:c8:54:
                    4c:bc:ff:f1:e0:bf:d1:1f:90:f4:5b:ed:c3:f8:23:
                    50:c7:a4:83:54:7c:5c:40:37:1e:d8:40:07:75:c1:
                    9f:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:9B:DD:7A:4B:80:2A:85:9A:AC:08:6F:10:43:9D:3D:65:6D:D4:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e84b311a-4ce4-3516-884a-5bf515549f40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:2080::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:e3:04:52:57:96:96:54:81:03:8a:76:a0:2d:b1:9b:b0:21:
         f2:63:95:2c:05:ca:0e:8b:b3:ad:0b:9a:83:57:f7:1c:8e:d0:
         37:47:14:67:c9:f2:11:4b:8c:8e:b9:ee:37:5e:2a:d4:6d:07:
         ee:31:cf:43:84:16:70:68:4a:16:91:65:83:87:21:25:37:bf:
         24:5e:95:8f:e5:e5:62:8a:8b:cc:52:a7:cf:bb:84:f2:f1:9a:
         37:b7:7c:ce:ed:44:96:64:9d:d8:b8:e4:47:2d:c9:d8:45:79:
         49:2e:82:38:9c:48:c8:af:18:59:86:c1:3b:88:dd:f1:26:d6:
         29:b6:12:5e:96:9e:0c:64:e7:e0:a3:f8:e1:4a:fa:96:e4:a3:
         98:b2:e1:c9:c8:d9:22:9f:80:a5:d8:36:9f:26:31:a1:3d:97:
         a5:f7:c0:53:08:c8:6c:1f:9d:83:d9:a5:8a:56:f5:8f:ec:8f:
         8c:5d:dc:f0:50:6c:d7:04:a5:b1:bd:b8:15:25:52:6e:1a:3f:
         bf:66:b7:90:15:1b:50:d1:10:a2:0e:a4:3b:b5:6f:bc:b3:00:
         00:b0:fb:7f:5b:ec:a8:3d:db:79:01:eb:ff:ae:a7:f8:84:57:
         53:2f:98:f0:f2:f4:1d:cf:e6:56:02:a4:dc:09:7d:c7:1a:3c:
         01:1b:65:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 02:51:59 2025 by rpki-client