Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f76db314-5ecb-34cf-b1a0-1c99526b9a7e.roa
File:                     f76db314-5ecb-34cf-b1a0-1c99526b9a7e.roa (raw, json)
Hash identifier:          k/7I1an9IwaCJZa+jZxVSFFkJh4d9zPGNigfwJFfWCI=
Subject key identifier:   3F:15:69:29:4D:4B:58:C5:B7:27:03:A5:D5:B0:32:13:11:5C:8A:8B
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584ADAFED12B218BF3DF05169000
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f76db314-5ecb-34cf-b1a0-1c99526b9a7e.roa
Signing time:             Thu 14 Aug 2025 16:20:24 +0000
ROA not before:           Thu 14 Aug 2025 16:20:24 +0000
ROA not after:            Wed 12 Nov 2025 17:20:24 +0000
asID:                     19905
IP address blocks:        2604:2d81:2100::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:da:fe:d1:2b:21:8b:f3:df:05:16:90:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Aug 14 16:20:24 2025 GMT
            Not After : Nov 12 17:20:24 2025 GMT
        Subject: CN=90fe381e-3930-4ae3-8426-afaafc57393c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:11:72:a7:8f:fa:e2:7a:46:42:ad:ed:ea:7e:
                    95:9f:a1:f9:24:62:88:19:26:df:ea:8e:9e:57:e9:
                    98:42:e0:e3:b3:f9:3b:1f:48:f5:cf:2f:eb:e9:3e:
                    3c:73:e4:34:0b:b8:6c:9f:e5:63:ea:2f:18:a1:9e:
                    64:ce:19:37:90:57:99:e0:a7:4d:cf:b3:93:23:6b:
                    26:45:51:3c:1f:e9:74:bd:8d:b6:59:c3:d2:07:d5:
                    dd:16:8f:c0:53:3c:cb:b1:e6:d0:f8:f9:37:ee:cf:
                    5e:57:7b:60:8b:09:78:bc:f3:52:0d:64:2b:0a:e4:
                    9c:82:7f:27:56:29:7a:89:9b:ee:b6:0e:4a:75:e7:
                    2e:64:fc:03:31:b3:cd:d8:02:2a:93:66:b6:8c:f8:
                    15:d3:6c:4a:dd:c4:8f:97:24:de:84:dd:d8:16:a9:
                    94:85:f7:c9:3e:8f:9e:fe:2a:42:8d:38:cf:80:ca:
                    8d:54:a7:df:32:15:5d:27:a4:9a:e8:d5:63:03:d6:
                    9e:11:34:56:0c:d9:60:b6:75:99:0a:e0:22:6d:0b:
                    d5:0d:a7:dc:5f:9e:8d:b1:40:be:40:e8:8a:05:05:
                    01:d6:72:cc:fb:05:1f:0f:16:5d:f1:13:fa:5e:a3:
                    b3:7f:0d:da:f7:65:b0:49:88:c8:5d:66:14:14:4a:
                    bc:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:15:69:29:4D:4B:58:C5:B7:27:03:A5:D5:B0:32:13:11:5C:8A:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f76db314-5ecb-34cf-b1a0-1c99526b9a7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d81:2100::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:6c:a6:6c:65:1c:5f:70:f2:1c:dd:a4:a7:9c:32:4b:12:4a:
         87:7e:5c:02:e0:69:4e:2d:f5:c3:7e:9c:bf:4a:ac:9c:9e:c4:
         f5:c3:09:db:ff:05:38:3d:c4:d3:c0:7b:7c:a0:39:51:10:46:
         0d:bc:79:6c:d7:24:4b:0e:5c:ee:39:43:fe:05:35:ec:cf:31:
         a9:63:d8:28:b4:64:c7:a6:e2:2f:30:cd:81:eb:2a:23:da:f4:
         f2:d7:de:c8:21:ba:e9:c1:e2:41:e0:d7:d1:c9:85:86:df:10:
         f2:43:5e:c2:91:c2:24:75:00:f0:65:b9:b8:d7:ab:b8:ff:76:
         0c:ca:2f:f5:71:c4:fe:eb:d3:9d:68:e1:38:35:3a:78:70:98:
         7d:c7:2c:84:21:94:1c:b0:04:30:4f:51:c6:ac:e1:1e:90:36:
         45:0c:fa:fe:1f:98:90:13:16:fc:ab:80:f4:c0:7f:0c:1f:d8:
         b9:49:a1:cb:af:15:72:ff:67:6e:8c:50:76:6f:75:0c:7e:d6:
         0a:4e:d0:12:3e:ce:53:32:f3:ee:00:1c:9f:87:78:36:c2:1b:
         df:b6:7b:e2:7c:71:89:41:d3:61:32:d7:74:fe:f6:fa:f3:a5:
         90:2a:db:2f:68:b7:9b:41:7b:88:36:35:52:27:65:a6:99:71:
         c0:42:2e:8a
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEra/tErIYvz3wUWkAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDgxNDE2MjAyNFoXDTI1MTExMjE3MjAyNFowLzEtMCsGA1UEAxMk
OTBmZTM4MWUtMzkzMC00YWUzLTg0MjYtYWZhYWZjNTczOTNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1RFyp4/64npGQq3t6n6Vn6H5JGKIGSbf6o6e
V+mYQuDjs/k7H0j1zy/r6T48c+Q0C7hsn+Vj6i8YoZ5kzhk3kFeZ4KdNz7OTI2sm
RVE8H+l0vY22WcPSB9XdFo/AUzzLsebQ+Pk37s9eV3tgiwl4vPNSDWQrCuScgn8n
Vil6iZvutg5KdecuZPwDMbPN2AIqk2a2jPgV02xK3cSPlyTehN3YFqmUhffJPo+e
/ipCjTjPgMqNVKffMhVdJ6Sa6NVjA9aeETRWDNlgtnWZCuAibQvVDafcX56NsUC+
QOiKBQUB1nLM+wUfDxZd8RP6XqOzfw3a92WwSYjIXWYUFEq8zwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFD8VaSlNS1jFtycDpdWwMhMRXIqLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZjc2ZGIzMTQtNWVjYi0z
NGNmLWIxYTAtMWM5OTUyNmI5YTdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgSEA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHhspmxlHF9w8hzdpKecMksSSod+XALgaU4t9cN+nL9KrJyexPXD
Cdv/BTg9xNPAe3ygOVEQRg28eWzXJEsOXO45Q/4FNezPMalj2Ci0ZMem4i8wzYHr
KiPa9PLX3sghuunB4kHg19HJhYbfEPJDXsKRwiR1APBlubjXq7j/dgzKL/VxxP7r
051o4Tg1OnhwmH3HLIQhlBywBDBPUcas4R6QNkUM+v4fmJATFvyrgPTAfwwf2LlJ
ocuvFXL/Z26MUHZvdQx+1gpO0BI+zlMy8+4AHJ+HeDbCG9+2e+J8cYlB02Ey13T+
9vrzpZAq2y9ot5tBe4g2NVInZaaZccBCLoo=
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:13:20 2025 by rpki-client