Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f5c12d51-458a-3f38-aed6-e9a12a4cfadd.roa
File:                     f5c12d51-458a-3f38-aed6-e9a12a4cfadd.roa (raw, json)
Hash identifier:          mUAl0bHT+umdq5BUgleAhzFGs5XRbGPOffObfq1ehBY=
Subject key identifier:   CD:52:A4:98:85:13:B6:83:27:56:BD:0A:A6:0B:F9:EF:09:B9:59:A2
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B64CE4BE5AEBB692885ABEF00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f5c12d51-458a-3f38-aed6-e9a12a4cfadd.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     30036
IP address blocks:        2604:2d80:1800::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:4b:e5:ae:bb:69:28:85:ab:ef:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=b9f802aa-45de-4feb-b12e-2bb1eb7be394
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:f3:ff:9b:3c:89:bb:6d:4d:1c:8f:4e:ff:25:
                    58:d7:ac:30:85:23:11:c7:29:4b:93:3a:e8:aa:8a:
                    08:f6:ea:26:c4:06:2c:6a:93:0b:25:11:cc:76:f1:
                    46:04:3a:26:fa:0e:df:8e:a5:aa:f9:ed:ed:96:f2:
                    b5:a3:81:95:54:1c:d8:85:c0:a3:95:52:bc:22:8b:
                    f6:15:03:17:9d:66:47:ee:17:a6:00:27:75:8e:cf:
                    3d:c0:82:db:a0:d7:79:fe:38:4d:8a:e4:ff:4b:84:
                    aa:cf:a2:71:d0:3b:c3:e3:73:b3:3d:cb:8d:09:f0:
                    37:7b:bb:89:f8:c8:02:d5:28:14:6c:93:e6:05:33:
                    f6:57:65:b2:de:f1:07:5c:17:8b:ca:76:d1:c4:e1:
                    66:47:1c:04:61:ac:cc:83:51:a0:48:58:0d:bc:fd:
                    f5:8c:76:50:c1:bd:ff:48:e8:fe:c4:ad:06:67:53:
                    e8:7b:ad:e4:81:93:59:cf:67:8b:0c:a5:b9:2a:95:
                    e2:1e:9c:6b:59:9d:3a:a8:c3:78:7c:f7:6b:71:2d:
                    5e:69:36:f1:35:4e:8b:7e:a6:ab:27:e2:25:bf:1f:
                    1e:25:7a:78:57:c3:c3:0d:59:86:28:ca:bb:fd:6c:
                    60:a0:df:85:e4:bf:fa:66:a4:0b:4d:61:26:0a:80:
                    92:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:52:A4:98:85:13:B6:83:27:56:BD:0A:A6:0B:F9:EF:09:B9:59:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f5c12d51-458a-3f38-aed6-e9a12a4cfadd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:1800::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:58:e0:ea:ac:29:28:cf:ab:ed:9e:84:7f:5c:28:40:c0:20:
         5c:a0:78:15:1c:01:a2:ff:8b:8d:f4:a3:f2:c7:22:93:16:b3:
         82:52:c8:9c:4f:4e:35:a7:f8:d9:92:77:9b:0c:59:29:08:57:
         ae:e6:56:03:57:6f:79:a4:5b:f7:b5:8c:75:90:a1:5b:13:ca:
         3f:23:84:a1:05:91:eb:df:23:70:e4:79:d0:ef:3b:fa:8b:4c:
         63:c2:0f:8a:f5:7a:cf:f9:e7:4c:74:49:81:70:82:bd:82:2a:
         50:2e:bb:1b:83:1b:2d:42:ee:97:06:74:14:42:76:09:22:b2:
         44:77:08:ab:c3:86:ff:38:0c:ca:b1:1c:3b:91:0a:42:f6:3c:
         67:ba:cc:de:f3:62:80:2a:61:76:45:6e:67:11:c1:a1:14:f4:
         95:07:2e:f2:d7:83:8e:91:56:b2:b7:c9:02:4d:39:31:53:5d:
         04:fc:16:22:45:71:5e:34:cd:02:38:f7:94:2d:52:34:6f:5d:
         9b:45:13:93:36:dc:1e:33:e1:d5:95:17:b4:e9:d7:23:63:34:
         94:b3:1d:c2:59:d6:fa:e9:86:b8:06:ef:0b:6f:87:fd:ba:1e:
         71:fe:9c:ec:bd:b9:86:4e:ea:4b:de:40:c9:1e:82:43:a6:af:
         71:2d:a8:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 02:58:59 2025 by rpki-client