Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9566cf39-f779-3c2f-b70e-2e14de576061.roa
File:                     9566cf39-f779-3c2f-b70e-2e14de576061.roa (raw, json)
Hash identifier:          /ZwDK0CyJVwF77eRBVCnYMHgp4v6qAdKE6/KrQuTix0=
Subject key identifier:   C8:72:EE:91:C1:BC:57:D9:4B:E8:FF:CC:97:4C:2F:0E:9D:2B:54:F6
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B821E20A17422ACCF391A2300
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9566cf39-f779-3c2f-b70e-2e14de576061.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     30036
IP address blocks:        2604:2d80::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1e:20:a1:74:22:ac:cf:39:1a:23:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=f2a925b9-d51f-4322-90d1-c1aa352837b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:9e:17:05:71:37:e3:bd:a7:07:ed:2d:f8:1d:
                    c6:5c:c2:27:b1:8f:ea:d5:4f:9b:7d:73:b9:73:0c:
                    08:43:42:22:bb:e6:c4:d0:4e:91:6a:75:7c:3b:f7:
                    34:7a:85:7e:6b:42:7d:61:7f:71:21:28:0b:e2:7a:
                    47:a3:38:8d:aa:f6:96:2a:97:11:60:06:88:c1:95:
                    9a:49:d3:7c:7f:d8:ea:93:bf:50:07:ca:4c:11:4d:
                    4d:22:03:7f:07:89:c8:e8:f3:9d:ba:e2:2d:ac:d4:
                    ac:76:6a:84:81:a8:5b:f9:0d:b5:17:54:33:b2:5c:
                    f7:a7:f7:a3:86:41:fb:6e:b4:db:b0:f6:d0:76:00:
                    a7:a9:7d:f6:c0:92:6f:12:84:5c:18:7d:1e:74:84:
                    90:1f:ff:82:42:94:ad:d1:9f:20:7e:d6:ac:8b:e6:
                    a9:19:ad:16:3b:9f:b5:bd:02:b4:b1:fa:cf:ea:22:
                    38:af:4b:9e:a8:f4:fb:89:b4:c5:84:3e:1d:5c:14:
                    eb:a7:ca:3c:3c:1a:4e:1b:34:56:5e:9f:0c:78:20:
                    b6:09:e3:b8:0e:6b:0e:51:f6:19:2e:8f:27:fb:7c:
                    b0:68:ad:b2:e0:b3:dc:d2:7f:1a:6e:bf:6f:cc:67:
                    cd:e5:c5:c8:7f:48:c5:47:07:ea:b1:d2:f0:bc:14:
                    5f:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:72:EE:91:C1:BC:57:D9:4B:E8:FF:CC:97:4C:2F:0E:9D:2B:54:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9566cf39-f779-3c2f-b70e-2e14de576061.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:d4:42:40:72:65:15:65:b1:64:20:fd:d2:25:c9:ec:16:e1:
         f4:ad:8b:7f:6f:b0:c6:c7:c8:7b:9f:45:49:6e:63:5f:08:ff:
         79:ea:a2:c9:e3:9c:48:28:0d:f8:c7:db:33:ee:8b:ee:63:3d:
         73:d2:7b:17:a5:90:4f:2f:f3:a5:c0:66:dc:fe:cf:de:1a:57:
         d2:1e:c4:b2:8e:ff:c4:60:c7:a1:70:be:c8:56:4d:4c:0e:c3:
         fb:0c:6f:b1:40:d6:d2:c3:19:f8:cc:72:de:cf:b9:5b:b7:db:
         9a:6f:e8:15:3b:51:a2:d2:6e:7c:f0:8a:b6:96:20:f3:1d:83:
         6f:20:06:fe:04:5a:de:bb:0a:84:16:58:fb:cb:cd:1b:5d:ff:
         ba:a6:3e:0e:7c:9d:35:f0:e7:15:bd:03:90:3e:35:25:3a:9a:
         41:dd:32:ff:23:b8:68:6b:4d:dc:25:83:f9:ac:62:a4:a3:97:
         03:f6:c8:c0:42:d7:31:14:74:6e:4f:3b:fa:e6:b3:bf:36:c3:
         29:81:b3:83:57:f6:8b:20:f4:1c:cd:3b:f1:fa:cb:31:65:08:
         c2:31:14:c7:cd:ea:97:80:d5:32:00:8a:dc:ec:21:9e:c2:21:
         7d:0a:21:38:25:11:ef:2f:c3:b7:10:e3:6e:f4:71:ae:ee:9d:
         91:d4:d1:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:18:39 2025 by rpki-client