Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1e6d0626-1a26-3d13-b884-c8694aae0a71.roa
File:                     1e6d0626-1a26-3d13-b884-c8694aae0a71.roa (raw, json)
Hash identifier:          JJT7tE89qcvV7Zr6aueInFPT/7oJ07rX1SsOSVp28SU=
Subject key identifier:   2A:1A:15:2D:75:D0:5E:51:46:A6:00:72:AC:E2:45:DF:7F:9E:F3:CF
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A8412421C4C789F0B8499E2C0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1e6d0626-1a26-3d13-b884-c8694aae0a71.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     30036
IP address blocks:        2604:2d80:9f00::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:42:1c:4c:78:9f:0b:84:99:e2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=62b242f4-5a5f-4da9-84da-e5e8e5a14556
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a7:28:ff:c2:16:66:c0:70:67:0e:29:a2:dc:
                    f6:4d:f8:25:ed:78:83:18:ce:7a:a9:48:64:49:cb:
                    79:0e:44:55:3e:09:b0:d8:d9:ce:06:e0:ba:75:9f:
                    04:e9:53:e2:01:85:70:6a:86:ad:2e:00:72:ef:6d:
                    f8:86:b8:a1:3a:62:26:60:bf:98:f0:3e:87:51:3b:
                    ab:87:21:7d:c7:37:a4:58:35:a2:83:29:1e:d0:1a:
                    73:e0:82:d2:26:ae:3d:88:b6:e1:24:58:41:da:70:
                    44:94:d1:b1:cf:a0:30:4d:fc:2d:1c:cc:9b:76:e5:
                    82:0c:d0:5d:91:ad:bc:35:aa:3d:42:b0:62:e8:db:
                    1a:3b:f5:e3:93:5c:4f:ad:d3:e5:40:1a:71:a3:d5:
                    f8:0c:78:f0:94:d2:a1:a7:57:01:6d:8c:49:92:7f:
                    c5:8e:2e:03:e2:75:a0:bf:e8:f3:c5:1f:95:3c:44:
                    a1:5f:38:2f:f7:76:ba:f3:b8:ef:c2:8f:50:6a:af:
                    8e:5e:9f:fc:41:1e:3c:18:f3:b9:35:ea:a8:76:81:
                    a7:e4:97:1e:f7:65:0f:4c:d7:b8:97:28:92:b6:89:
                    9b:05:18:77:0e:11:aa:be:32:16:e5:cb:f7:ff:d0:
                    83:b3:c3:d0:3e:fb:fe:d9:3d:7b:a3:e0:8e:df:15:
                    9c:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:1A:15:2D:75:D0:5E:51:46:A6:00:72:AC:E2:45:DF:7F:9E:F3:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1e6d0626-1a26-3d13-b884-c8694aae0a71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:9f00::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:cb:7b:e7:24:16:bb:48:29:e7:4c:c3:41:29:bd:16:e3:ab:
         91:5c:0f:d7:8c:51:ff:67:b4:7d:45:cb:bd:bd:53:fe:ac:82:
         ee:2d:58:37:80:7e:99:9d:c2:b3:5f:12:b5:00:04:a8:09:5b:
         86:a8:aa:ff:58:67:e2:39:72:a8:bb:31:23:93:6c:e6:cd:d6:
         36:50:4a:ed:9a:75:0f:60:6c:00:c4:79:2b:05:55:39:de:9e:
         0a:10:14:10:d6:a0:0d:5a:6a:40:8f:66:bd:8c:0f:1b:08:f0:
         b6:d1:87:fc:4e:47:82:9a:22:10:c2:c3:48:4d:ef:9c:0b:96:
         dd:d2:b9:a8:02:29:7c:fe:99:90:6a:93:fc:d7:35:31:30:32:
         06:f5:c4:37:4c:a6:47:02:b4:ef:a9:40:fb:35:50:0c:06:43:
         3a:9f:d6:06:ed:39:8d:3f:dc:9a:bf:fe:25:ca:3b:69:3c:01:
         10:66:51:e5:c9:45:af:32:be:6a:f2:6b:53:5c:a4:c0:31:70:
         8b:30:b1:2f:45:52:7f:24:96:5c:45:bc:0a:b7:f3:6b:75:f4:
         fe:f8:8e:2c:93:0a:d3:28:30:cd:39:4a:d2:a6:3d:05:3e:29:
         a7:76:61:54:9f:c1:90:bb:6e:c5:fb:24:f3:4e:e1:2e:fc:a4:
         30:9a:6b:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:12:03 2025 by rpki-client