Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8e9c21a1-2418-3014-9814-f57735c1d343.roa
File:                     8e9c21a1-2418-3014-9814-f57735c1d343.roa (raw, json)
Hash identifier:          7owmT8QxWv+Hs64z/8PIp47yWdcbCMwUQ3LEZB3y/R8=
Subject key identifier:   7A:A8:24:7E:F0:3C:69:A8:E7:7D:C6:95:86:F0:69:48:29:70:8F:9B
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B7C8769CAEBC97E8E26756100
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8e9c21a1-2418-3014-9814-f57735c1d343.roa
Signing time:             Sat 11 Oct 2025 13:00:38 +0000
ROA not before:           Sat 11 Oct 2025 13:00:38 +0000
ROA not after:            Fri 09 Jan 2026 14:00:38 +0000
asID:                     19905
IP address blocks:        2604:2d81:780::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7c:87:69:ca:eb:c9:7e:8e:26:75:61:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct 11 13:00:38 2025 GMT
            Not After : Jan  9 14:00:38 2026 GMT
        Subject: CN=9df599c9-9ec1-42ed-9341-b0c42f215877
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e9:59:87:45:68:6c:88:80:85:70:33:85:65:
                    78:d9:71:84:a7:40:48:6e:21:92:61:a8:ed:32:6c:
                    fc:e1:6d:8f:93:54:c2:22:ee:8d:29:06:9e:6c:36:
                    49:a0:d6:c3:59:94:24:a8:31:82:69:71:ab:72:ce:
                    fa:98:9a:6a:e0:25:08:31:8b:bb:82:e1:c4:64:58:
                    fd:b1:51:3f:d7:7f:43:46:90:c8:7f:11:01:29:fe:
                    46:3e:73:1f:1b:3e:4a:09:d9:bd:25:5d:42:2f:02:
                    ae:a2:be:1c:40:1d:5f:84:46:85:2e:16:9e:16:19:
                    2e:44:4c:4f:10:3d:3f:8a:a6:97:b3:7a:2e:cb:c1:
                    08:b6:35:5f:b2:76:a9:c2:38:11:77:c3:23:2f:ab:
                    68:15:d9:19:2a:4d:e9:22:d9:33:be:14:b5:00:b1:
                    ce:8e:28:d3:01:ba:53:8c:3f:9a:e5:d7:2d:84:12:
                    7a:13:09:93:bd:57:ca:15:36:bf:52:25:bd:f3:72:
                    f1:fe:83:41:60:22:9d:d7:d7:0b:87:9c:dd:56:0c:
                    d5:3d:44:82:04:82:25:98:2f:5c:c3:f5:d8:72:55:
                    00:fd:7b:f2:66:1a:24:5b:e3:f2:dd:a9:fe:a1:1c:
                    2c:0a:db:73:89:2f:c4:89:73:48:f6:77:c6:bf:bb:
                    0a:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:A8:24:7E:F0:3C:69:A8:E7:7D:C6:95:86:F0:69:48:29:70:8F:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8e9c21a1-2418-3014-9814-f57735c1d343.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d81:780::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:88:42:9a:82:14:e0:c9:fd:50:6d:75:a3:f2:30:b9:e8:80:
         d9:08:2d:53:41:ea:2f:46:98:82:56:6d:ce:6c:4b:2b:51:19:
         78:05:c6:30:65:92:d0:f5:46:b6:e0:f1:39:3c:c4:cc:4f:3a:
         e9:0b:6b:89:5b:83:8c:6f:1c:c1:db:11:28:7a:82:41:8a:40:
         35:40:70:6f:94:7c:fc:7e:e4:97:0f:93:13:71:82:0e:ea:c1:
         01:7e:23:84:3e:fa:59:13:d3:a2:42:fa:a0:3e:e9:45:0a:a1:
         fa:37:5c:89:2e:a4:6d:fe:4a:c9:ef:62:55:31:97:ff:fa:99:
         c8:ce:b8:28:27:a8:4f:47:ff:48:65:e3:a2:90:98:b0:31:9d:
         e1:8c:77:a6:09:19:27:a9:a5:d3:cc:48:e5:6e:a9:5e:cc:03:
         25:77:ae:98:06:1e:c6:3e:80:46:11:05:ba:2f:f1:57:87:ab:
         ac:e0:78:c7:63:e1:82:d0:9b:2e:35:16:09:26:2a:d2:53:47:
         67:aa:5d:7d:f4:54:c1:69:ef:6e:7a:31:86:8e:3a:41:bb:93:
         41:31:de:c3:46:27:39:bb:6b:53:b4:12:63:50:66:8a:a0:80:
         67:32:72:04:92:72:3e:11:4f:07:09:fc:72:a0:c6:ac:fe:0a:
         fc:09:ed:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:14:11 2025 by rpki-client