Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f8b53973-dd8b-35e2-81f3-e0b86af82204.roa
File:                     f8b53973-dd8b-35e2-81f3-e0b86af82204.roa (raw, json)
Hash identifier:          WiXwn8cWg3LM2A+qCdOigi5uuQ5C3jT2byZZj+m1jxo=
Subject key identifier:   A0:C5:10:04:46:8D:14:8E:C1:DA:19:C9:D9:D0:52:A8:A5:11:00:A7
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B56D71DD7CA40744A18A42A40
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f8b53973-dd8b-35e2-81f3-e0b86af82204.roa
Signing time:             Sun 28 Sep 2025 01:00:33 +0000
ROA not before:           Sun 28 Sep 2025 01:00:33 +0000
ROA not after:            Sat 27 Dec 2025 02:00:33 +0000
asID:                     30036
IP address blocks:        2604:2d80:3500::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:56:d7:1d:d7:ca:40:74:4a:18:a4:2a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 28 01:00:33 2025 GMT
            Not After : Dec 27 02:00:33 2025 GMT
        Subject: CN=491d4cee-d28b-4dc1-8e25-53143a51493d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:22:99:61:3f:79:72:44:fb:8b:fb:a1:51:5a:
                    4b:02:27:46:87:43:db:22:6a:c3:a8:69:68:fb:5a:
                    67:85:c6:81:49:94:d0:29:09:90:cb:a9:80:ef:96:
                    24:01:f8:b8:71:79:1e:e8:03:9a:9a:c9:62:8e:a4:
                    90:e6:70:6e:bb:6c:ca:eb:c0:50:e2:ed:07:aa:ec:
                    eb:4f:0b:ea:ef:e7:3c:fd:72:29:51:21:5e:9e:c0:
                    c9:5b:d8:6c:2d:cd:25:38:28:18:de:1a:b7:69:ef:
                    6a:c2:6e:fd:e7:94:de:ee:5b:97:9a:cf:d0:23:01:
                    e3:fb:10:9b:2f:01:b5:88:ca:12:b9:e4:4b:0b:35:
                    2d:bb:5e:aa:d7:80:3d:ff:30:fd:d0:21:4a:d4:0e:
                    a6:2a:0d:4b:9e:11:44:88:b4:e1:7d:a1:9a:84:f6:
                    9f:8f:eb:9e:26:ab:1a:10:b4:98:c4:12:2e:71:fe:
                    1d:82:dc:99:47:c5:01:37:2d:0a:9b:19:6b:0c:87:
                    80:e9:37:19:fe:37:97:01:f6:40:54:26:bb:15:3d:
                    cd:6e:0d:13:f0:ec:d5:75:bb:fd:9f:d1:df:a7:fb:
                    34:2c:b6:52:a8:7c:a2:7f:9d:1c:e7:1f:4c:e2:83:
                    15:8d:5a:c4:4d:40:c4:89:73:df:38:91:92:0e:8b:
                    79:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:C5:10:04:46:8D:14:8E:C1:DA:19:C9:D9:D0:52:A8:A5:11:00:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f8b53973-dd8b-35e2-81f3-e0b86af82204.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:3500::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:9a:cb:53:56:b5:d8:00:73:4e:61:86:08:79:5d:cf:fc:3e:
         fb:a8:a5:4b:21:48:29:a8:46:93:17:4c:1d:6a:88:64:d8:12:
         5a:79:7f:f6:a1:a4:ea:64:94:1b:fc:3c:86:7f:99:13:9b:0b:
         e4:ea:c1:f1:3d:8a:3c:da:2f:c0:fe:4e:9b:d6:bf:c6:6c:2b:
         b2:4f:05:05:2b:4f:43:65:58:61:aa:59:b0:89:f5:22:90:73:
         e2:19:bc:bb:32:24:b8:9e:0e:b5:0f:5a:1f:68:83:ab:09:6c:
         1a:de:ab:ea:3e:63:af:61:1a:fd:cd:c6:cc:7e:d4:1b:8e:a5:
         5b:42:4f:73:4d:82:8e:dd:96:9b:52:c1:e5:80:95:88:2a:95:
         f7:fa:c8:39:dc:bf:d4:9a:7d:8b:07:08:6c:9f:16:1a:cc:d5:
         3e:b6:0b:a6:f5:5f:f2:a5:d3:3f:e2:31:43:6a:66:29:b4:c2:
         be:27:fd:53:7a:44:99:16:34:9e:d8:af:c5:2b:20:77:5b:e5:
         96:a2:b3:ab:3e:ea:0e:1a:fe:1a:ef:2b:7b:56:b4:0d:78:bd:
         3f:9c:6d:01:61:d1:c8:e0:5d:1a:b0:f3:57:f7:ae:b0:bd:5e:
         ab:b4:6d:5f:1a:fe:85:15:d8:d3:53:6e:c8:3e:a9:f3:3b:b8:
         3a:9c:0f:2e
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtW1x3XykB0ShikKkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDkyODAxMDAzM1oXDTI1MTIyNzAyMDAzM1owLzEtMCsGA1UEAxMk
NDkxZDRjZWUtZDI4Yi00ZGMxLThlMjUtNTMxNDNhNTE0OTNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyKZYT95ckT7i/uhUVpLAidGh0PbImrDqGlo
+1pnhcaBSZTQKQmQy6mA75YkAfi4cXke6AOamslijqSQ5nBuu2zK68BQ4u0Hquzr
Twvq7+c8/XIpUSFensDJW9hsLc0lOCgY3hq3ae9qwm7955Te7luXms/QIwHj+xCb
LwG1iMoSueRLCzUtu16q14A9/zD90CFK1A6mKg1LnhFEiLThfaGahPafj+ueJqsa
ELSYxBIucf4dgtyZR8UBNy0KmxlrDIeA6TcZ/jeXAfZAVCa7FT3Nbg0T8OzVdbv9
n9Hfp/s0LLZSqHyif50c5x9M4oMVjVrETUDEiXPfOJGSDot5SQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFKDFEARGjRSOwdoZydnQUqilEQCnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZjhiNTM5NzMtZGQ4Yi0z
NWUyLTgxZjMtZTBiODZhZjgyMjA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgDUA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGeay1NWtdgAc05hhgh5Xc/8PvuopUshSCmoRpMXTB1qiGTYElp5
f/ahpOpklBv8PIZ/mRObC+TqwfE9ijzaL8D+TpvWv8ZsK7JPBQUrT0NlWGGqWbCJ
9SKQc+IZvLsyJLieDrUPWh9og6sJbBreq+o+Y69hGv3Nxsx+1BuOpVtCT3NNgo7d
lptSweWAlYgqlff6yDncv9SafYsHCGyfFhrM1T62C6b1X/Kl0z/iMUNqZim0wr4n
/VN6RJkWNJ7Yr8UrIHdb5Zais6s+6g4a/hrvK3tWtA14vT+cbQFh0cjgXRqw81f3
rrC9Xqu0bV8a/oUV2NNTbsg+qfM7uDqcDy4=
-----END CERTIFICATE-----
Generated at Sat Oct 11 02:48:40 2025 by rpki-client