Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/04663e61-04ff-3bfd-ad43-7ae80c63f9da.roa
File:                     04663e61-04ff-3bfd-ad43-7ae80c63f9da.roa (raw, json)
Hash identifier:          35xeehlHCZU+3dT4rTP7XJ9fhVbZU1mOlqAQEkPm+m8=
Subject key identifier:   18:3F:54:66:97:CF:9E:7B:1F:3F:BE:C0:45:70:F3:41:56:BC:C6:1F
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285849F2E523C679D96E3673CFDCE0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/04663e61-04ff-3bfd-ad43-7ae80c63f9da.roa
Signing time:             Fri 23 May 2025 13:01:03 +0000
ROA not before:           Fri 23 May 2025 13:01:03 +0000
ROA not after:            Thu 21 Aug 2025 13:01:03 +0000
asID:                     30036
IP address blocks:        2604:2d80:d400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f2:e5:23:c6:79:d9:6e:36:73:cf:dc:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: May 23 13:01:03 2025 GMT
            Not After : Aug 21 13:01:03 2025 GMT
        Subject: CN=82599f3f-7811-4e5e-aabc-63cbe151e702
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:38:a3:38:98:ac:8e:31:1e:09:92:1f:6c:f0:
                    82:6d:40:1e:97:4a:af:16:00:c0:17:d9:70:10:6a:
                    47:33:f4:bd:1f:ba:c4:44:9e:d0:94:bd:cf:08:ad:
                    ac:65:b3:9c:eb:b0:f8:3a:f5:ee:ee:49:10:9f:2a:
                    31:8e:2e:9f:fa:04:f5:0c:35:50:d4:53:17:e2:04:
                    2c:2f:23:fe:df:c8:3d:2e:05:82:b5:12:06:fd:a8:
                    2d:4b:f1:1a:5e:ab:3d:18:da:2a:42:ef:e6:46:ce:
                    58:9a:0d:9b:29:83:68:1b:c9:af:27:08:2d:5a:91:
                    af:ec:f8:0d:af:40:a0:56:73:6a:80:a5:a8:9a:30:
                    e8:f7:c5:6d:70:1c:6d:7e:11:da:90:ad:db:66:16:
                    e8:fb:4f:25:3d:64:3a:86:a3:e2:b7:9f:e9:65:11:
                    1b:09:b1:a9:5e:8d:77:a2:23:6b:0c:9a:58:85:b9:
                    3d:d5:7d:bc:7f:5e:a9:82:6d:d2:a3:d6:20:00:7d:
                    b8:6c:f0:22:ce:64:ed:b1:18:e9:2d:20:37:ea:c4:
                    7d:06:36:1d:b0:ef:7c:3f:ca:29:1d:55:99:66:21:
                    f4:72:ff:4b:06:28:96:30:23:64:b9:d4:b5:d9:0a:
                    a8:9a:99:ff:08:ec:c0:54:77:1e:92:3c:a5:5c:b0:
                    32:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:3F:54:66:97:CF:9E:7B:1F:3F:BE:C0:45:70:F3:41:56:BC:C6:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/04663e61-04ff-3bfd-ad43-7ae80c63f9da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:d400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:6a:22:4c:6d:d3:cc:ef:c2:7c:5d:98:28:fb:5f:50:1c:ae:
         81:2a:35:1d:0c:5f:94:0f:a6:e3:cb:45:97:4b:da:1b:0a:1a:
         36:3c:04:2b:7f:a5:20:77:c0:c7:76:7c:a7:59:1b:f9:33:12:
         39:7e:ac:b4:05:ce:8e:30:4b:06:b8:32:71:12:ef:ee:a5:c3:
         5a:01:b9:6f:0b:62:1b:71:98:5a:b2:17:8a:61:8b:5c:37:1c:
         99:c7:e3:61:cd:e2:4a:06:ba:65:71:3b:88:41:50:e2:6c:f6:
         54:0b:f9:43:f3:40:98:ea:28:d5:91:a0:69:08:87:3f:b5:8a:
         4b:ca:11:0a:2f:22:33:a1:e4:9b:81:c8:9e:91:42:2a:2c:92:
         38:87:19:1c:ef:e9:b9:93:b0:b5:9f:9b:33:91:16:8f:e6:98:
         f2:e9:97:59:0a:cd:3b:39:81:ba:15:59:ea:f0:7b:0e:1d:24:
         02:d1:51:c5:50:2a:a8:0c:0d:fd:a8:9d:bf:d6:cb:48:65:93:
         cd:d7:f0:7e:81:ad:47:c9:43:3a:77:48:bf:39:b2:69:50:10:
         80:4e:27:79:13:45:e3:ac:b6:99:da:a0:a7:3a:85:49:11:58:
         06:44:fd:5e:34:b1:00:33:cd:22:0e:bc:12:43:b3:6e:f4:01:
         b2:37:7f:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:28:35 2025 by rpki-client