Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f96f681e-dc41-3979-b763-e08b8c1570dd.roa
File:                     f96f681e-dc41-3979-b763-e08b8c1570dd.roa (raw, json)
Hash identifier:          Jz1JoFn/lGeK5LhKseOeEeXxlVvbU+cQPLQndtqmEAk=
Subject key identifier:   F0:3D:D7:1A:29:F8:5B:28:31:8A:21:9F:9F:D1:02:DD:2C:2B:B9:03
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B477C74C5F5C33091295EA840
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f96f681e-dc41-3979-b763-e08b8c1570dd.roa
Signing time:             Mon 22 Sep 2025 13:00:42 +0000
ROA not before:           Mon 22 Sep 2025 13:00:42 +0000
ROA not after:            Sun 21 Dec 2025 14:00:42 +0000
asID:                     30036
IP address blocks:        2604:2d81:700::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:47:7c:74:c5:f5:c3:30:91:29:5e:a8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 22 13:00:42 2025 GMT
            Not After : Dec 21 14:00:42 2025 GMT
        Subject: CN=6dd3bce1-ef94-4b48-b09c-120e7caf0421
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:ad:0f:6a:d7:3c:66:5a:88:c9:72:50:e5:04:
                    d1:7f:2f:db:f9:c2:ad:ea:34:b2:b4:c9:5b:46:4c:
                    b8:e1:e8:3b:dd:12:5c:55:3c:44:a4:b7:9b:9d:e5:
                    6c:c0:31:24:35:fe:cf:c4:59:91:5b:60:35:76:e6:
                    84:2f:a3:78:23:9f:4b:24:8c:4e:41:6e:18:74:e8:
                    2f:31:50:19:fc:ce:54:c8:07:4d:02:84:2f:d8:ef:
                    3b:9d:a5:61:0e:2a:e7:54:61:a6:0e:8f:f9:9d:42:
                    8b:d2:e7:a0:0d:74:07:80:33:63:ab:fe:9a:1f:04:
                    00:d4:8d:76:30:5a:f7:8a:56:db:84:45:54:eb:5e:
                    91:09:17:f5:48:41:0c:af:73:23:c4:55:98:55:cd:
                    96:51:3a:ea:11:b8:38:81:71:e5:0b:5e:70:0c:72:
                    57:f1:47:72:89:2f:8e:07:54:c3:29:1f:b1:b9:17:
                    c4:ca:64:92:d5:5f:94:1c:a0:de:0b:25:01:af:30:
                    e3:98:63:a2:45:7f:7d:c9:cc:b5:72:fa:a1:73:ea:
                    80:7a:89:f9:98:ce:98:7e:71:85:aa:6f:d2:ee:95:
                    23:1c:63:e5:a0:87:79:07:c1:d7:64:15:34:68:d9:
                    51:cd:f0:6e:02:bc:f9:a5:2d:08:7d:79:5e:0c:e2:
                    28:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:3D:D7:1A:29:F8:5B:28:31:8A:21:9F:9F:D1:02:DD:2C:2B:B9:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f96f681e-dc41-3979-b763-e08b8c1570dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d81:700::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:4f:7d:25:58:64:1f:17:57:4e:da:29:8b:9e:b4:51:39:ae:
         e2:74:5a:f9:98:b3:f8:a9:44:68:a9:9b:dd:da:31:73:13:ca:
         e2:d7:7d:3e:a1:ad:4a:85:c3:5c:bb:25:ee:cd:35:9e:4f:c2:
         57:11:6e:60:da:da:c9:91:07:55:25:f6:63:97:ac:eb:63:40:
         c7:e9:00:62:5f:4a:7d:52:3a:0e:2d:a6:d1:60:8c:04:52:db:
         10:11:b7:4a:cf:9b:f6:0c:be:5c:d7:ca:51:a1:db:60:f2:82:
         e0:e2:b8:95:ad:30:c3:06:af:7a:c2:7f:5d:fd:4e:e5:3c:d0:
         89:6b:ff:dd:9b:07:d1:e2:2e:df:27:e0:ed:ac:bb:f3:de:5e:
         41:23:fe:ef:dc:a1:d5:61:18:9c:01:e0:e1:0b:31:b5:31:ee:
         54:11:a6:bc:1c:99:9b:26:62:7e:b5:eb:ea:fc:37:ad:9c:4b:
         1c:e8:bf:c7:aa:6f:21:73:e9:cf:6a:ac:60:0e:38:85:38:21:
         95:a2:1e:b6:74:eb:4e:72:43:8e:2d:f2:df:e2:e0:74:cd:0a:
         47:8d:04:6d:d0:a2:02:4b:27:92:94:ea:23:4d:40:6a:1a:97:
         a0:c6:b6:79:14:65:42:8d:c0:10:a8:cc:aa:f6:88:e6:27:11:
         b8:96:bd:13
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtHfHTF9cMwkSleqEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDkyMjEzMDA0MloXDTI1MTIyMTE0MDA0MlowLzEtMCsGA1UEAxMk
NmRkM2JjZTEtZWY5NC00YjQ4LWIwOWMtMTIwZTdjYWYwNDIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhK0Patc8ZlqIyXJQ5QTRfy/b+cKt6jSytMlb
Rky44eg73RJcVTxEpLebneVswDEkNf7PxFmRW2A1duaEL6N4I59LJIxOQW4YdOgv
MVAZ/M5UyAdNAoQv2O87naVhDirnVGGmDo/5nUKL0uegDXQHgDNjq/6aHwQA1I12
MFr3ilbbhEVU616RCRf1SEEMr3MjxFWYVc2WUTrqEbg4gXHlC15wDHJX8UdyiS+O
B1TDKR+xuRfEymSS1V+UHKDeCyUBrzDjmGOiRX99ycy1cvqhc+qAeon5mM6YfnGF
qm/S7pUjHGPloId5B8HXZBU0aNlRzfBuArz5pS0IfXleDOIoSQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFPA91xop+FsoMYohn5/RAt0sK7kDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZjk2ZjY4MWUtZGM0MS0z
OTc5LWI3NjMtZTA4YjhjMTU3MGRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgQcA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAlPfSVYZB8XV07aKYuetFE5ruJ0WvmYs/ipRGipm93aMXMTyuLX
fT6hrUqFw1y7Je7NNZ5PwlcRbmDa2smRB1Ul9mOXrOtjQMfpAGJfSn1SOg4tptFg
jARS2xARt0rPm/YMvlzXylGh22DyguDiuJWtMMMGr3rCf139TuU80Ilr/92bB9Hi
Lt8n4O2su/PeXkEj/u/codVhGJwB4OELMbUx7lQRprwcmZsmYn616+r8N62cSxzo
v8eqbyFz6c9qrGAOOIU4IZWiHrZ0605yQ44t8t/i4HTNCkeNBG3QogJLJ5KU6iNN
QGoal6DGtnkUZUKNwBCozKr2iOYnEbiWvRM=
-----END CERTIFICATE-----
Generated at Sat Oct 11 02:50:14 2025 by rpki-client