Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f76db314-5ecb-34cf-b1a0-1c99526b9a7e.roa
File:                     f76db314-5ecb-34cf-b1a0-1c99526b9a7e.roa (raw, json)
Hash identifier:          IEV53Qlyc3eR+MWNwP+w+iS3WOtHBH3kNnRZpM00O0Y=
Subject key identifier:   3C:30:CD:C3:BD:45:ED:C7:67:15:58:DB:2C:57:91:3B:70:2D:DC:19
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584BBB75A177A58F6F9221EE3680
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f76db314-5ecb-34cf-b1a0-1c99526b9a7e.roa
Signing time:             Mon 03 Nov 2025 02:00:31 +0000
ROA not before:           Mon 03 Nov 2025 02:00:31 +0000
ROA not after:            Sun 01 Feb 2026 02:00:31 +0000
asID:                     19905
IP address blocks:        2604:2d81:2100::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:bb:75:a1:77:a5:8f:6f:92:21:ee:36:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Nov  3 02:00:31 2025 GMT
            Not After : Feb  1 02:00:31 2026 GMT
        Subject: CN=e38e2e55-a368-4630-af13-8b55d4f44cfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f2:a1:87:b1:59:f7:df:73:dd:b9:39:b1:2a:
                    07:c6:d7:73:48:fe:7c:01:3f:78:41:da:b5:5f:64:
                    bc:67:d1:cb:d6:77:7d:6b:3c:cb:a4:55:60:bc:b2:
                    61:a0:59:13:f3:b2:86:24:81:59:f3:98:b5:fb:24:
                    b8:da:ec:54:e6:da:77:7a:da:be:49:59:0c:c6:53:
                    74:82:eb:5c:d0:fd:f6:7b:b6:08:8d:bb:7a:c6:45:
                    d4:19:2c:88:11:53:12:41:e4:28:79:b5:da:35:28:
                    09:3f:51:71:0e:27:c9:08:c1:a4:b0:9a:9d:0a:2d:
                    1f:99:71:63:72:f9:fb:56:43:7b:9e:ea:51:e1:04:
                    46:d8:78:37:8e:3f:66:33:78:84:be:2d:a5:aa:d4:
                    17:2b:0a:4b:0a:4b:dc:c3:a7:79:ea:c2:37:1d:a8:
                    29:65:23:a5:c2:16:ea:c7:8d:14:f9:c2:91:98:07:
                    ad:b5:46:e0:da:fe:2d:b2:fa:7d:70:3c:ba:d6:13:
                    bc:72:f2:63:f5:e4:5e:35:d2:db:58:44:20:01:53:
                    38:fe:3f:0a:9c:ac:c9:c7:b3:7a:24:eb:2f:ec:2e:
                    61:a6:c4:d2:d3:33:30:26:fe:57:b2:36:37:77:05:
                    af:99:8f:50:15:29:b5:cc:01:f7:13:07:2b:bf:a2:
                    d8:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:30:CD:C3:BD:45:ED:C7:67:15:58:DB:2C:57:91:3B:70:2D:DC:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f76db314-5ecb-34cf-b1a0-1c99526b9a7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d81:2100::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:6b:54:b2:2a:5f:8e:55:e2:28:4f:57:19:0f:63:06:64:bc:
         22:33:47:7f:a2:91:41:dd:37:15:15:94:f2:83:59:ec:ed:61:
         95:bb:89:df:c0:1a:c7:da:04:62:f7:89:8f:e3:73:3a:f6:2b:
         29:6a:fa:8b:b8:f2:bd:52:19:93:a0:a7:09:35:a4:85:ce:80:
         c4:f5:d7:f9:68:32:8a:40:c2:fe:04:cc:b4:21:78:20:f6:e6:
         8b:a9:7f:75:ec:d8:d1:f9:6d:95:ec:59:0b:02:00:e8:58:ad:
         9e:67:e9:b3:7b:cd:20:25:08:16:7b:33:3a:57:9a:f6:e7:5b:
         c2:d5:9a:40:04:01:22:d6:34:f2:c3:8b:68:44:90:66:de:89:
         e8:f6:62:4c:a7:68:6f:0f:c9:fd:25:da:97:5f:a6:1f:fe:c4:
         25:d9:06:82:44:8a:51:f5:c3:6d:74:8c:9f:98:ab:f7:1c:63:
         a4:6a:72:a9:af:10:af:1e:66:97:9b:87:b5:6b:d3:9e:e3:f1:
         9d:bf:ea:08:84:ab:96:65:19:72:21:ee:25:2d:95:0e:50:3f:
         38:e0:1b:51:2f:85:62:a9:99:02:97:5e:db:59:4f:b8:5f:37:
         f2:29:ea:1f:cd:ff:d7:3d:70:d9:cf:15:7b:a6:96:73:ea:0a:
         a3:c0:e8:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 16:54:12 2025 by rpki-client