Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/eed981f7-2389-395e-bc72-5703530dc47c.roa
File:                     eed981f7-2389-395e-bc72-5703530dc47c.roa (raw, json)
Hash identifier:          tvHTtiUV6XaG4E2mTP40yjFicNO458M3twcHxF21i+I=
Subject key identifier:   47:28:67:CD:17:A6:98:6E:A6:1E:DD:96:4E:88:32:72:57:5D:E6:16
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B6797F26D1AE2471677AECD00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/eed981f7-2389-395e-bc72-5703530dc47c.roa
Signing time:             Sat 04 Oct 2025 01:00:33 +0000
ROA not before:           Sat 04 Oct 2025 01:00:33 +0000
ROA not after:            Fri 02 Jan 2026 02:00:33 +0000
asID:                     30036
IP address blocks:        2604:2d80:d280::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:67:97:f2:6d:1a:e2:47:16:77:ae:cd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  4 01:00:33 2025 GMT
            Not After : Jan  2 02:00:33 2026 GMT
        Subject: CN=3bd99961-c096-41dd-a01e-06caedc7769a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:6c:e3:24:12:e3:07:60:73:c5:5f:42:96:b7:
                    16:14:4c:c9:18:50:1e:dc:b9:e5:a6:c1:e3:3f:a4:
                    ba:50:6d:c6:77:a5:35:5a:59:29:30:88:1c:e5:7d:
                    c3:97:de:df:21:09:22:a6:7b:02:33:32:24:1a:4e:
                    5a:8b:dd:be:ce:70:b1:96:f1:3b:0b:87:73:09:d7:
                    f5:e9:d0:27:6a:00:95:48:e7:f6:26:ec:9a:ca:e1:
                    dc:3f:df:2d:3d:11:25:a3:8b:db:a3:5b:c0:60:d6:
                    91:d1:73:81:a2:21:27:55:88:b7:7b:5b:ee:9f:e0:
                    e7:27:39:79:55:fb:bd:21:bd:db:6e:98:0b:29:c0:
                    56:9a:4e:48:db:6d:9e:d2:6c:67:b1:ce:bd:15:f0:
                    af:21:23:4d:fa:50:ba:9d:42:ea:50:a6:8d:e6:32:
                    c9:69:b4:53:7f:10:b8:c3:f2:22:f6:b1:d0:c4:bc:
                    87:1a:cf:f5:ed:20:a4:6e:b9:c7:ff:97:a1:dc:be:
                    ba:2f:6c:d8:76:e4:ff:c9:f4:55:a1:ac:85:e2:45:
                    d8:21:c9:ba:21:e3:88:05:19:78:42:60:88:de:db:
                    2a:aa:24:d8:e9:30:5f:4a:d2:f5:c5:ac:26:d8:3c:
                    dd:b0:dc:49:9a:af:e7:71:6a:19:06:13:03:0f:6d:
                    30:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:28:67:CD:17:A6:98:6E:A6:1E:DD:96:4E:88:32:72:57:5D:E6:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/eed981f7-2389-395e-bc72-5703530dc47c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:d280::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:7c:5a:48:42:9f:10:1d:fe:71:3b:28:44:e4:24:1d:b5:03:
         75:69:cb:3f:71:ce:1f:78:11:10:6b:81:51:3c:1c:06:92:ab:
         fc:32:17:fa:6a:98:f7:4c:dd:7f:ef:49:d2:97:d3:8e:a8:eb:
         5b:b5:73:5e:a8:73:92:ed:76:20:67:56:32:9a:31:fc:ba:2e:
         e4:5b:9b:43:66:89:bb:82:8c:de:b6:9d:71:6d:64:77:6c:5a:
         f7:77:f1:7f:1e:78:a3:76:71:3a:c6:c4:d7:b6:bc:18:c6:2d:
         c7:6e:5c:7f:4f:2f:6c:30:82:ed:f1:0a:bd:98:c2:bc:41:98:
         59:2b:af:b9:72:cd:db:30:89:4e:51:b3:b3:90:e0:6a:06:68:
         24:57:c4:0c:47:fd:5f:00:9c:f5:74:6f:b2:09:1c:d4:b2:29:
         cf:0c:17:ca:c8:e4:c7:63:b3:fe:ee:09:73:80:b2:dc:a8:5d:
         ac:28:fb:14:8e:12:f1:26:c6:56:96:02:1c:68:bc:f5:a1:0b:
         6e:e1:f7:85:2d:22:60:d1:04:b6:e9:e3:46:80:cf:ea:6f:b3:
         c1:99:d5:71:1b:86:8f:44:54:09:3f:ae:0f:c7:cf:03:d8:78:
         72:60:7c:e9:31:4e:74:a3:f8:5d:f8:4d:91:1a:d9:8f:14:62:
         47:57:0e:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 02:48:23 2025 by rpki-client