Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e6cab730-cab7-3562-abf1-bde2a425fd0a.roa
File:                     e6cab730-cab7-3562-abf1-bde2a425fd0a.roa (raw, json)
Hash identifier:          CMKJt0J5ESAFkG08hz+3w0yhL8nAdeHZW+nQoLoXYIQ=
Subject key identifier:   A6:07:8E:B1:7F:CA:5E:DB:BC:7D:61:27:65:67:56:35:6F:08:D6:9D
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B9E07D07E52F8663636AF2320
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e6cab730-cab7-3562-abf1-bde2a425fd0a.roa
Signing time:             Thu 23 Oct 2025 13:00:38 +0000
ROA not before:           Thu 23 Oct 2025 13:00:38 +0000
ROA not after:            Wed 21 Jan 2026 14:00:38 +0000
asID:                     30036
IP address blocks:        2604:2d81:1d80::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:9e:07:d0:7e:52:f8:66:36:36:af:23:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct 23 13:00:38 2025 GMT
            Not After : Jan 21 14:00:38 2026 GMT
        Subject: CN=79bce23e-2916-46fe-9832-736330bdb4db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f1:a3:fb:65:a4:eb:bb:c2:68:7a:64:6e:7d:
                    56:d9:01:8a:c2:7d:57:ff:ef:9d:6a:9f:7b:1c:bd:
                    84:77:80:04:0c:5c:9a:c2:ec:92:fe:db:81:da:dc:
                    b7:62:de:a5:9f:0a:53:ab:f5:67:2f:8b:c3:33:4a:
                    ff:75:36:05:c1:15:21:93:d2:e4:c4:cf:66:91:0f:
                    6c:df:b3:32:8d:95:58:42:ca:9a:7d:f1:88:0e:15:
                    98:46:1a:fe:b1:5c:45:e7:63:a5:70:78:f5:ec:c3:
                    f9:08:79:77:a9:c6:9e:f7:81:83:3c:86:17:61:fe:
                    54:a9:22:07:5a:fe:77:03:28:91:b8:c6:06:dd:b5:
                    93:67:76:9e:22:ce:a0:80:36:97:10:f2:c8:77:f2:
                    8a:7f:6e:03:87:c5:6b:e0:67:6b:fc:4a:2b:ed:6b:
                    07:d3:ea:11:c8:b1:91:e7:d1:0f:0b:47:3d:62:26:
                    bd:55:28:21:42:fa:4c:76:72:92:ea:91:77:35:4d:
                    b8:3b:5e:b6:fb:3b:56:d9:1f:5b:12:42:31:18:ba:
                    40:c3:2b:7c:e0:54:9f:1b:0e:5b:7f:56:f0:67:84:
                    67:16:91:db:42:e9:18:36:88:e5:b2:6c:c6:6d:50:
                    e8:9e:09:ad:e5:13:a2:d5:73:da:8d:8c:0f:62:dc:
                    b8:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:07:8E:B1:7F:CA:5E:DB:BC:7D:61:27:65:67:56:35:6F:08:D6:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e6cab730-cab7-3562-abf1-bde2a425fd0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d81:1d80::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:37:2f:cb:d9:57:62:be:1f:70:e4:c3:dc:6b:9e:bb:de:de:
         9c:f9:ba:c5:20:14:f4:a9:ac:71:19:23:3d:63:d9:64:38:ef:
         71:c5:2f:52:77:91:eb:d2:1d:c4:55:fe:5d:ec:ce:72:c8:db:
         15:b8:59:92:3a:3d:69:38:78:bc:67:a3:48:96:82:af:39:50:
         e7:41:c4:12:89:e8:a0:03:e4:3c:96:79:a6:7c:f6:ca:06:27:
         08:5c:89:7c:45:7c:28:10:f2:13:41:37:e2:af:f2:9a:db:a3:
         7a:bc:70:77:14:c1:90:29:67:79:74:b7:89:59:da:de:f8:24:
         1f:cc:75:56:82:33:f4:d4:7d:0c:37:8d:11:c8:10:1a:ea:f7:
         23:e1:42:05:3a:1b:5d:08:f9:c7:15:ad:32:12:1f:36:9a:ae:
         ee:80:41:79:aa:29:30:54:ea:15:ed:c5:0b:d6:da:1d:54:a7:
         3c:75:49:0d:db:f2:8b:12:42:b0:2d:6f:3d:79:7b:e8:01:7e:
         bb:a8:e5:ae:5a:bb:dd:ac:cb:02:1d:5f:f0:d2:60:8d:bd:7d:
         6e:fb:b5:8e:e6:3c:61:01:8f:9b:49:25:17:36:73:0f:1f:3a:
         59:06:8a:5b:a1:50:62:03:bd:6b:7c:11:9b:a7:76:7c:25:87:
         7e:51:fa:7f
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEueB9B+UvhmNjavIyAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk
NzliY2UyM2UtMjkxNi00NmZlLTk4MzItNzM2MzMwYmRiNGRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/Gj+2Wk67vCaHpkbn1W2QGKwn1X/++dap97
HL2Ed4AEDFyawuyS/tuB2ty3Yt6lnwpTq/VnL4vDM0r/dTYFwRUhk9LkxM9mkQ9s
37MyjZVYQsqaffGIDhWYRhr+sVxF52OlcHj17MP5CHl3qcae94GDPIYXYf5UqSIH
Wv53AyiRuMYG3bWTZ3aeIs6ggDaXEPLId/KKf24Dh8Vr4Gdr/Eor7WsH0+oRyLGR
59EPC0c9Yia9VSghQvpMdnKS6pF3NU24O162+ztW2R9bEkIxGLpAwyt84FSfGw5b
f1bwZ4RnFpHbQukYNojlsmzGbVDongmt5ROi1XPajYwPYty4jwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFKYHjrF/yl7bvH1hJ2VnVjVvCNadMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZTZjYWI3MzAtY2FiNy0z
NTYyLWFiZjEtYmRlMmE0MjVmZDBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgR2A
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACA3L8vZV2K+H3Dkw9xrnrve3pz5usUgFPSprHEZIz1j2WQ473HF
L1J3kevSHcRV/l3sznLI2xW4WZI6PWk4eLxno0iWgq85UOdBxBKJ6KAD5DyWeaZ8
9soGJwhciXxFfCgQ8hNBN+Kv8prbo3q8cHcUwZApZ3l0t4lZ2t74JB/MdVaCM/TU
fQw3jRHIEBrq9yPhQgU6G10I+ccVrTISHzaaru6AQXmqKTBU6hXtxQvW2h1Upzx1
SQ3b8osSQrAtbz15e+gBfruo5a5au92sywIdX/DSYI29fW77tY7mPGEBj5tJJRc2
cw8fOlkGiluhUGIDvWt8EZundnwlh35R+n8=
-----END CERTIFICATE-----
Generated at Wed Nov 5 03:02:34 2025 by rpki-client