Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f161614a-9777-3973-a18f-0c63187faf19.roa
File:                     f161614a-9777-3973-a18f-0c63187faf19.roa (raw, json)
Hash identifier:          GDyTXJioODXF3IreQBoIVysXeMI4wBYkN2d9WNmrNsc=
Subject key identifier:   32:32:40:C7:48:E4:95:20:FD:F7:92:5A:BB:D6:4C:6D:34:57:F7:04
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B64CE4F38C5A030AB05A4CD00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f161614a-9777-3973-a18f-0c63187faf19.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     30036
IP address blocks:        2604:2d80:e980::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:4f:38:c5:a0:30:ab:05:a4:cd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=a08063af-e657-4c3f-b484-8bb7fffa7f97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:60:a3:17:14:62:f2:ac:cc:66:dd:3d:bd:82:
                    cd:84:4b:d1:52:94:67:30:2a:d5:df:8e:ef:c1:5e:
                    33:35:a4:17:24:c2:38:bd:72:0a:40:23:c2:42:ab:
                    7c:60:80:25:99:cb:3a:b2:c7:ff:ff:a7:19:10:e3:
                    7b:3f:a4:b5:66:1c:4f:bc:a4:2c:b5:33:39:68:c1:
                    6e:50:50:5e:da:fe:dc:6a:01:52:9d:cc:95:48:78:
                    1f:06:0a:48:72:64:db:f8:e5:63:ab:a4:f2:7f:57:
                    e4:76:f1:81:9c:2d:41:ab:91:9f:28:8d:eb:79:c1:
                    53:f6:81:a2:f8:57:d1:c4:f5:69:13:41:db:3e:b1:
                    46:e6:6b:ca:99:4b:35:22:f8:91:90:55:e0:a9:76:
                    0e:f4:c7:b4:15:ba:9f:5b:db:6c:b3:8a:5a:61:4f:
                    ca:53:b2:b6:83:51:f4:f4:1a:e4:a6:08:18:a2:9e:
                    2c:3a:d8:58:54:b0:c3:c5:18:e3:91:e6:98:76:c0:
                    c4:df:84:41:27:98:0b:1f:b7:8a:61:7e:0a:57:d1:
                    38:d8:50:3b:05:d0:e6:26:8f:ec:56:68:ae:80:28:
                    c6:f6:de:27:dc:c9:b5:89:b4:b3:91:ed:25:bf:f5:
                    e7:00:69:b3:72:ab:4b:a1:04:47:4c:4c:fa:08:60:
                    cf:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:32:40:C7:48:E4:95:20:FD:F7:92:5A:BB:D6:4C:6D:34:57:F7:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f161614a-9777-3973-a18f-0c63187faf19.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:e980::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:ba:06:5f:8f:9a:4b:50:0b:73:7e:39:ab:94:0a:fb:a1:cf:
         28:f2:c6:fe:8e:ce:6a:e0:cc:d0:1c:c3:a8:c5:02:fd:02:f5:
         57:eb:ba:83:06:b4:c8:ab:39:a6:4d:af:ea:e1:84:97:2e:72:
         92:33:a1:0f:f6:f8:be:cc:df:16:a6:63:cd:f8:2b:7c:64:0e:
         d5:4f:b3:4a:27:83:55:77:39:29:8c:7f:ca:c3:ad:d6:e4:13:
         59:ad:2b:ef:bc:25:76:68:77:66:b9:35:07:5d:47:51:ea:4a:
         f4:7b:1d:ea:c9:14:39:b3:0a:88:7b:f0:cb:4a:9d:e0:88:ec:
         b4:cd:cc:6d:a5:ef:67:12:e0:8a:07:a1:38:a7:47:2f:5c:2b:
         e4:61:4a:ab:8d:37:22:78:6e:aa:76:18:fa:ad:6c:c5:bc:83:
         ba:bc:5d:d4:11:2b:77:d2:21:72:7d:c1:ac:d5:28:ac:f1:7d:
         d9:07:f2:c9:fe:bf:fe:38:48:b2:5a:b4:94:a2:df:52:1c:06:
         9a:9d:3e:3d:e2:ff:08:8d:c0:a8:d3:bb:1c:56:b2:c1:df:0c:
         1a:a0:ad:9a:6c:6c:e0:75:db:e2:46:38:73:88:90:65:a2:eb:
         ee:1f:2e:7d:75:ef:9f:15:69:50:73:f6:b0:06:cc:1a:0f:d0:
         7d:23:87:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 02:53:30 2025 by rpki-client