Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/019358f5-4e4a-3b0b-9e51-6a6cef0a442a.roa
File:                     019358f5-4e4a-3b0b-9e51-6a6cef0a442a.roa (raw, json)
Hash identifier:          Jf7lyisgyctHPbqkg4Q3RPQpHw35FbbZfWRdQeFP09I=
Subject key identifier:   E6:F4:31:59:F9:F7:F5:30:EA:D3:66:70:36:6B:D6:7C:09:0F:81:6D
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B87B216C450B62C013C3DCD80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/019358f5-4e4a-3b0b-9e51-6a6cef0a442a.roa
Signing time:             Wed 15 Oct 2025 13:00:38 +0000
ROA not before:           Wed 15 Oct 2025 13:00:38 +0000
ROA not after:            Tue 13 Jan 2026 14:00:38 +0000
asID:                     30036
IP address blocks:        2604:2d80:e900::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:87:b2:16:c4:50:b6:2c:01:3c:3d:cd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct 15 13:00:38 2025 GMT
            Not After : Jan 13 14:00:38 2026 GMT
        Subject: CN=15cb2e41-4ce5-4cb2-93c3-04aa924d88ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:6d:85:77:9a:16:4f:51:f4:02:b9:8a:05:5c:
                    73:d1:e1:40:1a:d0:2b:2b:a7:3f:91:f8:ff:1c:24:
                    8c:be:9a:18:91:aa:17:9d:42:3b:8e:07:00:10:26:
                    ca:e9:ea:99:36:19:ab:bc:6f:87:4d:a4:95:f0:07:
                    fc:dc:b6:7a:8b:a6:6d:52:4d:41:76:23:3d:9e:93:
                    9e:ed:90:4a:14:28:d3:41:4c:eb:7b:dc:22:18:dd:
                    06:38:6d:6a:2c:8d:07:3a:24:9f:f7:56:5d:5e:8e:
                    a1:5d:15:36:0b:24:53:1b:a7:c1:95:29:43:bd:97:
                    1e:56:1e:4d:50:f9:43:ea:ea:1d:bd:b6:0f:3f:ac:
                    53:5b:c2:10:f3:a1:da:88:ef:31:39:41:d4:77:54:
                    7a:69:99:bc:af:6c:e3:e4:75:89:34:bd:17:8e:ee:
                    2b:8c:c8:9a:be:28:6e:51:ce:c8:a8:5d:58:d4:ae:
                    01:70:35:12:6d:ae:56:55:66:e3:eb:89:0f:9d:7e:
                    ea:2a:e1:11:cf:76:33:0a:b5:9a:da:80:0f:e6:bc:
                    3d:72:db:74:48:8d:08:d8:3c:3d:a0:c7:fb:d3:96:
                    62:3c:fe:16:a3:f0:64:df:c4:6a:41:52:41:70:e6:
                    47:d3:9b:06:38:1d:8f:a9:d5:43:75:b9:87:6e:45:
                    50:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:F4:31:59:F9:F7:F5:30:EA:D3:66:70:36:6B:D6:7C:09:0F:81:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/019358f5-4e4a-3b0b-9e51-6a6cef0a442a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:e900::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:ad:22:d1:f8:a5:ed:7c:af:14:f6:0a:9c:ce:3b:e2:94:4a:
         27:3f:95:e3:23:f8:ec:4e:27:88:67:77:5e:2d:98:8a:58:1a:
         a6:7f:20:89:75:aa:70:b0:b8:a4:1a:15:f9:a8:93:9f:6d:76:
         8e:06:94:49:4e:f4:ea:0e:b9:f9:1e:f5:d9:20:60:90:05:dd:
         fc:60:1c:f9:c2:0f:c2:c7:9a:a4:28:5f:b1:c7:40:67:fd:60:
         df:9b:8b:fe:32:b3:c5:af:29:7b:3f:d7:49:31:d4:2a:51:2d:
         09:a0:a6:20:84:2b:fd:4d:41:ab:84:b5:f7:66:04:de:6b:f1:
         00:58:4d:8a:64:ef:e8:4b:73:0b:5e:7c:28:b9:02:f2:50:4f:
         d3:90:3d:b5:5a:48:64:f7:f0:7f:69:44:a1:6f:91:9e:95:fe:
         93:98:fa:92:f1:63:c5:4f:cf:79:e1:b9:4d:25:3b:2a:a4:56:
         25:50:01:57:90:bc:47:87:52:6a:d4:75:78:d1:87:ca:e8:cf:
         09:d2:06:63:52:c3:38:9e:be:14:be:46:c3:da:9f:92:13:e6:
         80:72:c5:33:91:1e:30:c7:03:25:09:ef:83:62:b2:99:e2:8d:
         c6:6c:66:7c:96:7d:38:1a:0e:b4:53:39:94:95:37:9d:7c:27:
         69:d0:e4:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:19:00 2025 by rpki-client