Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e3f71a01-a40d-3dd8-bd40-2639f6ad6ea2.roa
File:                     e3f71a01-a40d-3dd8-bd40-2639f6ad6ea2.roa (raw, json)
Hash identifier:          UFBmatDwn6laisGRNF5obiT1G4wIW22Doq56YaS86zk=
Subject key identifier:   4A:A1:89:4D:38:B1:F8:98:65:F4:F0:88:14:71:5C:C4:39:15:68:14
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584BB45D43524BB01AEBC526F900
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e3f71a01-a40d-3dd8-bd40-2639f6ad6ea2.roa
Signing time:             Fri 31 Oct 2025 13:00:39 +0000
ROA not before:           Fri 31 Oct 2025 13:00:39 +0000
ROA not after:            Thu 29 Jan 2026 14:00:39 +0000
asID:                     30036
IP address blocks:        2604:2d80:7400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b4:5d:43:52:4b:b0:1a:eb:c5:26:f9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct 31 13:00:39 2025 GMT
            Not After : Jan 29 14:00:39 2026 GMT
        Subject: CN=1c70aef1-45b9-459e-ae25-1d86318fc55f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:b0:fd:b4:6f:06:5b:00:fa:50:c0:8f:fd:2a:
                    7c:57:d6:3f:c7:63:0d:94:93:fe:9c:90:8c:8b:91:
                    93:00:ed:71:a0:d6:b8:41:e0:34:bc:f6:c6:21:b7:
                    62:c6:76:c9:21:a8:23:99:a6:59:94:a3:e3:97:da:
                    dc:e4:e0:06:d0:97:3e:79:eb:d4:cc:39:0c:71:2f:
                    f9:ea:53:de:5e:8e:6a:57:40:f9:b7:a6:f6:4c:98:
                    a7:63:ba:bf:3b:79:c6:60:7b:22:19:fc:47:ef:94:
                    3d:a2:be:42:4c:c9:37:38:05:f3:79:d7:10:2b:df:
                    01:04:11:dd:da:3a:68:7f:f3:1c:f9:5c:c3:03:bb:
                    77:ef:43:bf:0b:3e:6a:76:7d:11:17:41:97:ab:44:
                    8d:22:25:7a:98:b2:d6:2c:ef:6d:68:03:d8:42:52:
                    42:7c:60:d1:ee:26:40:7d:09:c1:fb:06:d8:be:44:
                    d6:c1:8b:36:4e:4f:e5:51:53:7c:a4:fe:1e:80:0b:
                    76:26:aa:7b:50:9c:ed:d5:fe:2c:84:1e:34:f1:f5:
                    ba:b1:8b:ca:f6:8b:14:93:20:fb:f5:be:c4:c3:d9:
                    13:c1:fa:fa:16:e3:eb:00:8b:b1:63:43:16:59:5b:
                    03:f8:a9:df:60:1c:56:31:bb:80:37:e2:65:c9:1f:
                    0f:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:A1:89:4D:38:B1:F8:98:65:F4:F0:88:14:71:5C:C4:39:15:68:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e3f71a01-a40d-3dd8-bd40-2639f6ad6ea2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:7400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:b4:74:af:ba:09:51:dd:41:8d:51:88:f3:73:e2:53:15:03:
         b4:dc:89:fa:00:35:5d:dc:0a:13:a1:6e:da:a4:da:cc:4d:5e:
         c6:62:c1:61:e4:91:5e:ad:6b:50:26:92:f0:b4:91:df:37:88:
         cc:bf:26:70:68:80:52:1f:fa:aa:e3:db:56:33:52:26:9c:0c:
         6d:38:49:0f:fe:69:ee:05:25:c5:ec:f1:62:1c:21:ef:7c:16:
         1b:31:06:cb:52:4b:15:57:e0:a1:88:00:a5:46:ea:09:a2:89:
         f5:9e:88:d8:9a:2e:ba:c6:a4:32:db:ae:8b:51:fd:1e:fe:16:
         fc:ce:a8:f9:95:f3:ac:dc:fb:21:fa:19:e7:f6:54:3f:e7:b0:
         65:e5:f7:f0:d7:d0:34:92:fb:48:b8:fa:1d:ca:60:24:72:e3:
         15:c5:b5:7b:eb:30:bf:00:f8:9d:c0:63:bd:f0:3a:54:d7:77:
         73:31:64:20:de:70:5b:9d:8e:af:2c:13:4e:e2:ef:1f:cb:29:
         e4:c1:c8:28:53:60:0c:9c:53:d1:ef:8c:64:29:a0:9b:05:49:
         57:1b:1e:70:fd:3e:3b:fd:71:d7:c9:73:f4:0f:89:a9:b0:d5:
         81:5b:ba:91:6a:a3:37:90:fb:c0:6b:ae:d0:2d:d8:12:16:79:
         6a:d7:40:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:34:48 2025 by rpki-client