Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8c91bfd4-5d83-3587-81dd-459336e83ac5.roa
File:                     8c91bfd4-5d83-3587-81dd-459336e83ac5.roa (raw, json)
Hash identifier:          N8Oax7WKvxUsaTI1//bwPnYzXQ2e4sFqXxMoYcXtsH4=
Subject key identifier:   89:94:E6:AD:22:9B:21:B7:5D:A0:6E:3A:C0:5F:58:E1:AF:8A:10:07
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B8836603F555B7F06D7100100
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8c91bfd4-5d83-3587-81dd-459336e83ac5.roa
Signing time:             Wed 15 Oct 2025 17:27:12 +0000
ROA not before:           Wed 15 Oct 2025 17:27:12 +0000
ROA not after:            Tue 13 Jan 2026 18:27:12 +0000
asID:                     30036
IP address blocks:        2604:2d81:2d80::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:88:36:60:3f:55:5b:7f:06:d7:10:01:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct 15 17:27:12 2025 GMT
            Not After : Jan 13 18:27:12 2026 GMT
        Subject: CN=e9ad9660-755d-48d1-855f-fe1cbe512656
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:24:fe:16:d9:af:8b:8e:c0:e6:86:89:a0:9e:
                    6f:0d:4b:e5:fd:ad:1a:11:8e:57:49:59:95:b8:b3:
                    e5:6f:f9:b0:6a:8d:a9:58:4a:e4:29:d0:9c:c9:dd:
                    dd:6c:46:90:da:71:88:60:03:33:63:f5:6d:cc:80:
                    f3:77:4d:26:e1:8c:65:21:de:92:a4:13:01:14:67:
                    4d:a9:fb:74:92:5d:db:e5:25:04:11:f5:0a:5d:c9:
                    a6:d3:ba:8c:b6:6a:33:df:99:f8:0f:5a:33:46:b2:
                    08:f2:d6:b0:b5:d1:ce:67:e7:8e:9f:9f:c4:95:16:
                    93:e1:e8:17:5c:cb:81:c4:58:e1:52:00:e3:1d:49:
                    96:45:78:94:22:a0:c9:5e:d3:aa:bb:4f:af:5e:1d:
                    62:38:3c:ef:dc:7b:ed:12:81:b7:c0:24:85:ae:9f:
                    67:bd:2a:26:f5:a2:21:fa:12:cb:d1:c4:04:0b:b0:
                    0f:6f:11:3d:c6:50:da:b8:c6:10:e4:6f:a6:6d:0c:
                    87:f0:57:47:15:4b:42:41:e5:84:3c:6f:f2:67:68:
                    e7:02:b1:68:00:99:33:c6:5c:03:b9:3f:a3:da:5f:
                    ab:13:25:42:56:32:db:d5:e9:54:b6:81:3d:74:c0:
                    57:bc:9c:48:1b:a6:da:50:8d:93:5e:c9:b7:37:b3:
                    a7:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:94:E6:AD:22:9B:21:B7:5D:A0:6E:3A:C0:5F:58:E1:AF:8A:10:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8c91bfd4-5d83-3587-81dd-459336e83ac5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d81:2d80::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:9a:bd:3d:7d:68:7d:7a:de:e6:65:c6:61:86:7c:3c:5d:56:
         f5:24:6e:91:6e:35:6b:34:e1:f6:f0:70:76:c0:5f:ef:f8:d6:
         94:0f:cb:89:85:ee:0d:10:97:60:fc:3a:b1:dc:42:d8:2c:07:
         77:50:19:de:0f:30:0d:2c:f0:a1:40:cf:c2:c9:03:83:72:3a:
         6e:11:c5:03:10:f3:57:ef:12:12:73:86:34:a5:6c:02:e0:6d:
         64:1d:8e:83:9f:a2:3e:74:15:11:27:7f:3a:dc:07:57:7c:59:
         49:03:07:35:f5:4c:9a:95:7a:b4:81:1a:31:cb:cc:e8:8c:9c:
         d8:e0:f7:1e:af:70:20:4d:5b:bc:7b:03:04:14:e1:86:e2:c0:
         fe:5a:5f:86:5a:37:f3:bc:d7:51:b5:3d:da:1c:59:4a:37:f0:
         e9:8c:fa:47:99:8e:02:5d:ae:f1:a8:c7:f4:a9:de:59:c2:88:
         32:38:69:19:f2:4a:c2:6b:80:3c:9e:ba:6b:e4:b6:a8:14:99:
         9a:cc:be:4a:24:c2:cf:43:a0:d3:a4:35:0a:65:d9:85:69:40:
         28:eb:25:b5:c7:50:29:76:fd:57:58:70:f1:3c:4e:5f:9a:79:
         72:58:7a:41:72:3e:92:9f:54:fe:73:15:4d:d1:4a:94:27:d0:
         9d:83:f2:97
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuINmA/VVt/BtcQAQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MTAxNTE3MjcxMloXDTI2MDExMzE4MjcxMlowLzEtMCsGA1UEAxMk
ZTlhZDk2NjAtNzU1ZC00OGQxLTg1NWYtZmUxY2JlNTEyNjU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ST+Ftmvi47A5oaJoJ5vDUvl/a0aEY5XSVmV
uLPlb/mwao2pWErkKdCcyd3dbEaQ2nGIYAMzY/VtzIDzd00m4YxlId6SpBMBFGdN
qft0kl3b5SUEEfUKXcmm07qMtmoz35n4D1ozRrII8tawtdHOZ+eOn5/ElRaT4egX
XMuBxFjhUgDjHUmWRXiUIqDJXtOqu0+vXh1iODzv3HvtEoG3wCSFrp9nvSom9aIh
+hLL0cQEC7APbxE9xlDauMYQ5G+mbQyH8FdHFUtCQeWEPG/yZ2jnArFoAJkzxlwD
uT+j2l+rEyVCVjLb1elUtoE9dMBXvJxIG6baUI2TXsm3N7OnIQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFImU5q0imyG3XaBuOsBfWOGvihAHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOGM5MWJmZDQtNWQ4My0z
NTg3LTgxZGQtNDU5MzM2ZTgzYWM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgS2A
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADSavT19aH163uZlxmGGfDxdVvUkbpFuNWs04fbwcHbAX+/41pQP
y4mF7g0Ql2D8OrHcQtgsB3dQGd4PMA0s8KFAz8LJA4NyOm4RxQMQ81fvEhJzhjSl
bALgbWQdjoOfoj50FREnfzrcB1d8WUkDBzX1TJqVerSBGjHLzOiMnNjg9x6vcCBN
W7x7AwQU4YbiwP5aX4ZaN/O811G1PdocWUo38OmM+keZjgJdrvGox/Sp3lnCiDI4
aRnySsJrgDyeumvktqgUmZrMvkokws9DoNOkNQpl2YVpQCjrJbXHUCl2/VdYcPE8
Tl+aeXJYekFyPpKfVP5zFU3RSpQn0J2D8pc=
-----END CERTIFICATE-----
Generated at Mon Oct 20 05:10:54 2025 by rpki-client