Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a6590e64-c517-33f5-a324-f2e87226a249.roa
File:                     a6590e64-c517-33f5-a324-f2e87226a249.roa (raw, json)
Hash identifier:          pMxY5BM3Hw7JKRVXoOjIx+iwyYdQcYg1UdsgsgYp+9o=
Subject key identifier:   6F:30:61:0C:B4:83:CD:AA:43:37:D6:B0:44:34:41:CB:76:C9:C7:21
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B87B2414A3D3EFB509A9048E0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a6590e64-c517-33f5-a324-f2e87226a249.roa
Signing time:             Wed 15 Oct 2025 13:00:38 +0000
ROA not before:           Wed 15 Oct 2025 13:00:38 +0000
ROA not after:            Tue 13 Jan 2026 14:00:38 +0000
asID:                     30036
IP address blocks:        2604:2d80:2a80::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:87:b2:41:4a:3d:3e:fb:50:9a:90:48:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct 15 13:00:38 2025 GMT
            Not After : Jan 13 14:00:38 2026 GMT
        Subject: CN=4e82048c-33b8-48e6-930a-b535e3a392bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:90:d0:00:90:b1:8a:4c:a1:96:93:70:f0:82:
                    6c:ac:ab:22:ea:47:a7:49:64:a6:a2:15:09:83:4e:
                    c0:97:36:d1:9b:ba:ba:29:31:6e:cb:f2:53:82:c3:
                    82:fc:e2:1e:6e:c1:1d:d4:ab:39:30:bb:0b:84:d0:
                    23:2b:31:3b:14:d4:4e:c5:32:5f:4e:2c:19:6a:ce:
                    32:8e:45:83:90:17:38:c0:f9:53:90:79:4e:57:aa:
                    d5:6d:1c:99:e6:7a:c3:33:0c:f6:95:69:e8:47:49:
                    4b:b3:d0:14:d0:d4:a4:ea:7d:0e:2b:7a:82:0e:ad:
                    2f:6a:f1:c0:c8:62:32:fa:09:7c:0e:d3:0c:e2:78:
                    49:5e:ef:52:80:1d:41:1e:9b:35:cd:ec:20:3c:12:
                    46:0a:0d:b2:96:01:b2:89:0d:14:33:40:55:69:6a:
                    b2:2c:99:85:34:34:fc:dc:fe:f8:be:fc:44:0b:28:
                    f6:7e:8a:99:dc:a1:45:e7:34:2a:5a:ae:e2:e7:4d:
                    57:8c:4f:1f:68:df:a7:90:50:74:5a:a4:33:1d:4d:
                    0c:fb:fb:eb:6a:43:2d:d6:2b:cd:57:30:35:3f:4b:
                    ee:e2:32:e7:c4:cf:19:13:6b:4f:80:69:f6:85:48:
                    2e:a1:95:2a:ee:e3:f9:5b:a5:d4:5a:95:dc:a7:a3:
                    1c:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:30:61:0C:B4:83:CD:AA:43:37:D6:B0:44:34:41:CB:76:C9:C7:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a6590e64-c517-33f5-a324-f2e87226a249.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:2a80::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:f0:28:e8:9b:a4:46:39:9f:96:ef:1d:ac:d1:60:4c:a2:fd:
         34:f6:77:65:d8:aa:bc:d6:d8:69:9a:7e:55:29:4a:5d:6a:3a:
         75:47:cd:1c:a9:d6:07:1b:8b:ec:25:35:bf:9b:d0:68:24:22:
         89:a5:5c:de:10:aa:24:51:5b:3e:29:c8:f9:aa:9c:65:f5:76:
         e8:48:40:7a:3f:a3:e5:36:a6:9f:88:26:a4:93:38:45:8a:aa:
         70:e1:10:ca:9d:71:c2:7f:ae:2f:48:51:e0:0d:ed:9e:bd:47:
         ac:ba:ef:5f:2b:d2:1d:95:5a:f5:73:1f:e1:36:c3:c8:bd:dd:
         8c:63:de:71:db:f2:0d:e5:e5:dc:62:23:d4:e1:31:e0:0b:db:
         2e:7f:f0:60:f0:fb:26:8f:89:0a:34:c7:4a:17:2d:f3:0e:10:
         eb:19:2e:0f:5f:e7:9f:4e:81:a7:1b:4a:21:fc:ab:84:73:95:
         7e:6d:41:b7:e9:31:c1:95:cc:56:fa:3b:4b:20:d8:56:a3:26:
         11:16:d7:e4:0b:ec:a1:70:76:01:92:26:e7:47:d0:1d:e3:5b:
         1a:32:ec:11:b9:aa:75:19:11:60:2e:75:ee:a2:b0:44:f5:29:
         3a:30:45:10:e0:f4:d8:3c:e5:9a:66:25:68:51:7a:5e:b3:ec:
         2c:4b:f4:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:24:02 2025 by rpki-client