Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d58b7e14-e119-3d33-9423-f1e1552e3b35.roa
File:                     d58b7e14-e119-3d33-9423-f1e1552e3b35.roa (raw, json)
Hash identifier:          KZcUGO2a04Juil0um5I0AD1/RdO3GHvjqVgp3RADd48=
Subject key identifier:   92:87:C4:DC:3F:F0:99:C3:C7:90:B6:44:60:BA:27:2D:70:E7:DC:3F
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B7DECC8F0BB2B28814FEF2EC0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d58b7e14-e119-3d33-9423-f1e1552e3b35.roa
Signing time:             Sun 12 Oct 2025 01:00:30 +0000
ROA not before:           Sun 12 Oct 2025 01:00:30 +0000
ROA not after:            Sat 10 Jan 2026 02:00:30 +0000
asID:                     19905
IP address blocks:        2604:2d81:2000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7d:ec:c8:f0:bb:2b:28:81:4f:ef:2e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct 12 01:00:30 2025 GMT
            Not After : Jan 10 02:00:30 2026 GMT
        Subject: CN=88ac2a70-ad7c-4cef-a487-6e569bf6dbda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:81:b2:3a:53:b3:5d:ab:9e:74:32:5f:e3:c6:
                    c5:63:87:22:9b:5d:9a:a5:ac:51:f7:8a:f7:32:a0:
                    88:8a:73:29:6e:39:70:f2:6c:25:0a:77:63:81:b9:
                    f1:a9:45:7e:59:b1:e4:ad:9e:ed:cb:91:16:bd:19:
                    a5:6f:2d:91:26:82:6c:e8:0f:ad:c0:f4:2b:c1:3c:
                    72:11:47:be:0f:a6:67:99:79:83:4c:90:71:d6:7a:
                    30:10:53:86:5d:44:18:93:4f:01:da:7c:90:8a:b8:
                    5e:26:c8:eb:5f:e9:a5:69:e6:bf:a8:c4:fb:78:86:
                    a4:fa:b1:28:ee:f9:15:c1:eb:f6:31:4a:81:ec:f3:
                    e5:64:79:ca:23:1a:e2:ef:6f:83:8b:1c:56:1b:59:
                    3c:99:99:d8:4a:11:1e:ce:9e:a0:f7:44:74:9c:30:
                    e6:03:bb:bb:16:89:c5:de:57:f6:b1:98:45:ae:0f:
                    f0:c3:eb:aa:9d:04:d7:a0:ce:0e:68:f4:dd:69:f5:
                    da:2f:63:ed:38:e2:29:a4:3f:87:3c:38:fe:5e:1a:
                    8a:aa:38:7a:a7:89:b4:eb:28:e2:d4:f5:c6:63:2d:
                    a1:54:66:dc:4f:40:45:ad:be:e6:02:9b:8d:52:42:
                    38:e7:85:9a:dd:28:5b:1a:5b:24:e8:fb:09:b2:78:
                    42:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:87:C4:DC:3F:F0:99:C3:C7:90:B6:44:60:BA:27:2D:70:E7:DC:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d58b7e14-e119-3d33-9423-f1e1552e3b35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d81:2000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:b1:89:df:59:30:d8:11:b3:dc:f8:e5:ee:df:10:5e:bb:ac:
         7e:be:a2:84:a2:bb:89:68:dc:f5:d3:3d:19:ed:d6:7e:e1:6d:
         b4:05:e4:5f:df:22:09:7d:cc:b6:99:dd:92:d4:da:06:1a:1a:
         9c:00:ca:f2:41:78:c9:12:5f:fd:12:30:5f:5b:17:ad:9c:87:
         e5:99:20:97:cd:4e:0a:d6:60:dc:c7:9a:18:3c:66:a9:d0:e5:
         6c:ea:28:89:68:c4:7b:c2:b9:b4:d3:58:b2:0a:0d:27:0b:1b:
         62:6f:cc:2b:53:01:1c:ed:3c:09:4f:53:5b:62:2a:e0:85:ef:
         b5:9b:5e:c6:4e:49:39:b8:cb:73:7c:e6:45:51:09:6a:f6:e8:
         59:12:9d:80:b1:91:41:cf:25:63:dd:c3:94:19:f2:65:64:63:
         df:3d:76:35:fd:f7:92:40:a1:8c:52:ed:0f:70:4e:fe:76:25:
         40:8c:fa:32:cd:b2:f9:af:32:38:41:db:d2:ea:48:5a:42:8b:
         3a:f9:18:4a:79:93:9b:c3:08:02:51:bf:1f:44:de:7b:f8:d3:
         09:21:40:24:3a:98:42:e6:a7:5e:75:ea:22:c5:ba:77:2f:66:
         8c:78:21:a0:44:05:37:87:8a:67:c5:ba:2a:0e:60:92:3c:24:
         7c:9b:6f:0b
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEt97MjwuysogU/vLsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MTAxMjAxMDAzMFoXDTI2MDExMDAyMDAzMFowLzEtMCsGA1UEAxMk
ODhhYzJhNzAtYWQ3Yy00Y2VmLWE0ODctNmU1NjliZjZkYmRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4GyOlOzXauedDJf48bFY4cim12apaxR94r3
MqCIinMpbjlw8mwlCndjgbnxqUV+WbHkrZ7ty5EWvRmlby2RJoJs6A+twPQrwTxy
EUe+D6ZnmXmDTJBx1nowEFOGXUQYk08B2nyQirheJsjrX+mlaea/qMT7eIak+rEo
7vkVwev2MUqB7PPlZHnKIxri72+DixxWG1k8mZnYShEezp6g90R0nDDmA7u7FonF
3lf2sZhFrg/ww+uqnQTXoM4OaPTdafXaL2PtOOIppD+HPDj+XhqKqjh6p4m06yji
1PXGYy2hVGbcT0BFrb7mApuNUkI454Wa3ShbGlsk6PsJsnhCrQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFJKHxNw/8JnDx5C2RGC6Jy1w59w/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZDU4YjdlMTQtZTExOS0z
ZDMzLTk0MjMtZjFlMTU1MmUzYjM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQtgSAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAOLGJ31kw2BGz3Pjl7t8QXrusfr6ihKK7iWjc9dM9Ge3WfuFttAXk
X98iCX3MtpndktTaBhoanADK8kF4yRJf/RIwX1sXrZyH5Zkgl81OCtZg3MeaGDxm
qdDlbOooiWjEe8K5tNNYsgoNJwsbYm/MK1MBHO08CU9TW2Iq4IXvtZtexk5JObjL
c3zmRVEJavboWRKdgLGRQc8lY93DlBnyZWRj3z12Nf33kkChjFLtD3BO/nYlQIz6
Ms2y+a8yOEHb0upIWkKLOvkYSnmTm8MIAlG/H0Tee/jTCSFAJDqYQuanXnXqIsW6
dy9mjHghoEQFN4eKZ8W6Kg5gkjwkfJtvCw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:17:10 2025 by rpki-client