Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0c605709-b6c6-3803-a412-6f881c4ec44a.roa
File:                     0c605709-b6c6-3803-a412-6f881c4ec44a.roa (raw, json)
Hash identifier:          sz9wgtICvdAdqNp5nHtXmLwdpJ/srciUm+ok89GzU5A=
Subject key identifier:   01:B9:78:7F:BE:51:74:BD:84:72:9B:92:F2:D3:8A:26:F0:F4:6F:FB
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A8410CD71023C77FC6859BE00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0c605709-b6c6-3803-a412-6f881c4ec44a.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     30036
IP address blocks:        2604:2d80:ed00::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:10:cd:71:02:3c:77:fc:68:59:be:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=e9161e08-3539-44d2-8cae-3aada8701659
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:41:86:74:23:40:39:c2:e1:c2:24:11:6e:dc:
                    7a:d5:dc:af:e0:0c:b5:a6:a3:e9:67:d9:57:42:49:
                    0a:77:d7:95:ee:13:2e:dd:5e:9f:be:df:27:81:30:
                    ef:82:e3:68:b0:24:e6:dd:52:e0:46:5a:a1:71:c3:
                    8d:26:7a:ec:e6:6d:d9:62:0b:f3:5f:61:55:ec:7d:
                    32:97:4b:2c:69:15:e6:8d:32:66:3a:21:bf:66:a3:
                    10:4e:a8:a5:ef:ed:d7:74:a1:37:1b:47:60:20:c0:
                    23:34:fc:44:fa:82:ce:ee:7e:53:89:b8:d7:b4:36:
                    f6:5b:19:25:4f:32:0d:05:a1:3d:75:13:48:32:bc:
                    bb:8e:36:6a:77:e2:e5:cb:b2:b8:0b:11:70:6c:86:
                    c8:3a:11:43:38:61:39:cf:c2:6a:56:b3:34:cb:57:
                    78:44:e1:a6:0d:da:93:fc:42:57:bc:36:51:7f:71:
                    57:58:d7:14:f1:82:eb:b0:12:80:f3:59:ea:3a:29:
                    51:d5:30:db:3f:2a:90:97:b6:2a:de:7e:80:d7:95:
                    b4:60:83:80:e9:78:a6:2f:5b:bd:3c:45:13:6d:8c:
                    27:e4:63:40:f0:be:15:0f:20:ea:3a:77:76:04:95:
                    65:db:8b:fa:09:c9:e4:67:50:20:73:1d:48:cc:10:
                    72:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:B9:78:7F:BE:51:74:BD:84:72:9B:92:F2:D3:8A:26:F0:F4:6F:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0c605709-b6c6-3803-a412-6f881c4ec44a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:ed00::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:1d:73:61:3f:52:3c:14:f2:d0:20:13:78:4b:8b:77:38:ef:
         25:d1:e8:62:d8:b0:9a:a4:ad:f1:90:ff:5b:10:49:46:da:56:
         da:e9:fc:db:a5:be:4a:ef:40:aa:4c:a1:d6:6a:22:b6:c4:74:
         3e:6d:95:1c:20:48:9a:b1:2a:27:49:d0:32:5e:e9:d5:6e:d8:
         00:5d:4a:e4:f2:6d:07:75:d1:d2:ae:3e:a2:f9:98:29:21:25:
         53:1c:7a:21:54:c7:b6:51:66:fa:88:aa:17:a5:a1:6c:19:d7:
         ea:82:bd:17:29:f5:be:83:79:93:7c:26:c2:b5:44:7a:c4:5e:
         1a:cc:df:20:e3:f8:3a:17:51:f7:e7:41:f4:7a:ce:5e:bc:ee:
         36:11:4f:cf:66:28:7e:34:8e:77:82:cb:e5:ad:7e:aa:22:ae:
         13:cb:81:96:79:64:6a:25:85:d5:b4:5e:44:07:72:a7:64:56:
         a5:a1:d1:eb:ed:f4:fb:1a:f0:ae:4e:32:cd:17:16:0f:c9:e0:
         c6:1c:9c:9b:49:2c:8b:10:2d:1e:7f:0c:a2:48:14:70:28:4d:
         dd:b3:c3:ef:a7:55:48:8a:9a:24:6d:01:29:fc:b7:6a:3a:69:
         0b:c1:2f:2e:c2:e3:e7:f4:bc:97:d1:87:b6:7f:50:8b:c5:85:
         17:e5:fa:b0
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqEEM1xAjx3/GhZvgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk
ZTkxNjFlMDgtMzUzOS00NGQyLThjYWUtM2FhZGE4NzAxNjU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgUGGdCNAOcLhwiQRbtx61dyv4Ay1pqPpZ9lX
QkkKd9eV7hMu3V6fvt8ngTDvguNosCTm3VLgRlqhccONJnrs5m3ZYgvzX2FV7H0y
l0ssaRXmjTJmOiG/ZqMQTqil7+3XdKE3G0dgIMAjNPxE+oLO7n5TibjXtDb2Wxkl
TzINBaE9dRNIMry7jjZqd+Lly7K4CxFwbIbIOhFDOGE5z8JqVrM0y1d4ROGmDdqT
/EJXvDZRf3FXWNcU8YLrsBKA81nqOilR1TDbPyqQl7Yq3n6A15W0YIOA6XimL1u9
PEUTbYwn5GNA8L4VDyDqOnd2BJVl24v6CcnkZ1Agcx1IzBByHQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFAG5eH++UXS9hHKbkvLTiibw9G/7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMGM2MDU3MDktYjZjNi0z
ODAzLWE0MTItNmY4ODFjNGVjNDRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgO0A
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACMdc2E/UjwU8tAgE3hLi3c47yXR6GLYsJqkrfGQ/1sQSUbaVtrp
/NulvkrvQKpModZqIrbEdD5tlRwgSJqxKidJ0DJe6dVu2ABdSuTybQd10dKuPqL5
mCkhJVMceiFUx7ZRZvqIqheloWwZ1+qCvRcp9b6DeZN8JsK1RHrEXhrM3yDj+DoX
UffnQfR6zl687jYRT89mKH40jneCy+WtfqoirhPLgZZ5ZGolhdW0XkQHcqdkVqWh
0evt9Psa8K5OMs0XFg/J4MYcnJtJLIsQLR5/DKJIFHAoTd2zw++nVUiKmiRtASn8
t2o6aQvBLy7C4+f0vJfRh7Z/UIvFhRfl+rA=
-----END CERTIFICATE-----
Generated at Wed Aug 6 00:38:59 2025 by rpki-client